Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json)
Hash identifier: EerxAdYn9w76501HbJ31BHfZqXHAePID/dg8kTlpDTw=
Subject key identifier: 8D:0E:D2:AC:FD:4C:7C:41:76:A8:FD:65:65:B5:19:71:D2:E2:60:3C
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019E30A8FD13C2A2E412066780FA12C707B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
Manifest number: 0A1E
Signing time: Sat 16 May 2026 12:00:41 +0000
Manifest this update: Sat 16 May 2026 12:00:41 +0000
Manifest next update: Sun 17 May 2026 12:00:41 +0000
Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: R9ViFjs0xmQOwV8yfkM26x51ehnOCRSgRXX3tMgU7NE=)
2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:fd:13:c2:a2:e4:12:06:67:80:fa:12:c7:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: May 16 12:00:41 2026 GMT
Not After : May 17 12:00:41 2026 GMT
Subject: CN=8d0ed2acfd4c7c4176a8fd6565b51971d2e2603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:a4:0a:6e:73:5c:89:36:06:54:c0:28:0c:
15:60:13:54:d8:12:a1:67:2a:03:15:fc:37:b9:05:
e1:49:09:ef:b1:04:af:31:7a:d2:81:72:9f:47:b6:
91:e8:5b:d9:53:15:81:39:98:47:1d:42:78:60:41:
59:77:3e:ee:de:12:f2:7b:45:0f:ea:6d:a3:0d:8a:
27:75:35:ac:73:98:90:a3:bb:46:f1:fc:63:cd:b0:
7e:3c:2d:73:77:9d:c6:8e:0d:fa:66:15:7e:19:f1:
ee:0b:2e:cb:ae:a1:04:5f:9b:ba:8a:06:32:d4:2e:
23:d6:7d:59:9b:9d:19:d0:53:fb:28:88:32:20:87:
b3:3d:e0:10:82:86:bd:25:12:6c:4d:69:a7:05:63:
49:2c:65:00:0b:1b:7a:3d:5e:9e:42:18:02:bc:7a:
a0:06:5e:1a:bc:fc:c4:a2:dc:83:0d:1a:84:0b:d2:
b2:db:5b:a3:3c:8b:45:c9:02:a6:0a:cc:da:7c:bb:
de:c5:00:c7:3d:c4:d1:39:3c:88:24:ad:33:53:82:
b1:33:9a:05:01:a7:9e:aa:b0:d7:29:73:52:dc:bb:
c7:8b:44:b7:81:65:57:40:25:90:36:b9:ea:10:b0:
b6:eb:5a:9f:0c:3f:03:df:61:73:d2:7d:0f:70:82:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:D2:AC:FD:4C:7C:41:76:A8:FD:65:65:B5:19:71:D2:E2:60:3C
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:aa:2a:6b:50:97:a4:d9:39:2d:c3:d6:29:1a:81:87:72:
33:27:cb:3a:f7:c5:53:cd:28:9c:73:ad:c9:40:8f:2b:9d:28:
97:10:bf:60:ca:16:f2:87:7f:a3:e3:db:e2:1d:2a:f4:64:de:
f5:9f:3e:eb:83:6a:82:27:9a:90:25:d7:95:55:9b:cf:56:6c:
a5:f7:f4:68:ac:93:94:2a:90:9d:bb:46:82:de:21:56:51:16:
41:49:bd:a4:43:b3:4d:86:5b:7e:3a:63:ba:ec:9b:2f:43:b0:
1e:ec:9c:fd:4a:52:36:d8:77:05:e0:3f:42:8e:13:85:48:60:
57:20:bf:34:99:de:f8:46:f4:b8:12:dd:e2:c0:71:22:76:48:
9a:ea:80:73:93:84:71:3f:7a:88:1f:31:e0:50:46:c5:92:93:
d8:91:e3:6d:1d:a2:c8:95:9a:e4:d4:ab:58:8b:14:36:dd:1a:
99:8d:0f:2e:ef:12:35:83:31:ed:c4:3a:93:02:95:a2:ee:4f:
87:48:34:0f:76:24:f1:f0:a4:ec:e5:5c:0c:40:6c:21:8c:63:
da:d3:6d:1f:eb:32:a3:b5:6a:b7:da:3d:12:0f:67:08:e7:53:
4a:51:d9:5e:58:34:f8:3c:7d:b9:32:ac:e9:d4:a3:30:64:15:
35:8a:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:45:32 2026 by rpki-client