Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: ZcFZ+XBUP93HLKBvt4bRNqkCoO1NICvgtutrq7sgxf4=
Subject key identifier: B5:DF:4E:DC:0C:AD:CA:CF:3D:DB:FD:CF:EA:EF:8E:4C:E8:20:96:A8
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019D37893F5D4DE0DD5A58089142D6BD3B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 05D7
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: 2a9VKo9Dygu2NWBsV6PkIP0GLhw.roa (hash: Pbqfh39q7ebmoTqxhZo7XwgfRkdtMrqgxhzD81aDOFo=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: yjyLZBcZR6HzcOyz1Bs+Y422usSXTtrOm31yLAmZpEA=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3f:5d:4d:e0:dd:5a:58:08:91:42:d6:bd:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=b5df4edc0cadcacf3ddbfdcfeaef8e4ce82096a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:33:f0:ec:08:40:49:45:d5:36:d9:55:34:
7d:b5:b7:d1:cd:bf:3f:04:86:a0:ec:bc:25:e6:f0:
bc:26:5d:84:7d:50:db:65:3d:62:27:47:81:d7:b8:
95:1b:70:5f:7a:04:36:a0:f0:47:9f:f5:e4:57:07:
80:6d:7d:01:12:ca:ff:bb:a8:cf:b8:d1:ac:4f:1a:
b3:dc:9f:60:b8:00:07:9f:12:b0:59:c5:d1:67:8e:
03:f1:5a:96:a3:03:02:52:f4:2e:aa:b1:a4:eb:4f:
00:a9:91:51:8a:f7:6f:a5:92:15:25:d3:50:b4:9f:
ef:21:18:f2:f4:49:99:50:39:0c:77:e2:54:51:18:
5b:e2:a6:f6:dc:3b:fa:fc:64:95:b5:7a:77:2d:2d:
2d:78:99:1c:93:43:a5:8b:63:d9:27:eb:be:13:81:
db:7c:b3:fb:68:69:54:e3:47:97:11:e8:2b:74:d8:
e6:5f:d6:2f:82:ea:06:1d:ec:d8:94:67:07:f8:23:
39:dd:76:a1:30:07:34:7c:94:88:ff:cb:34:ab:06:
3a:4a:7b:2c:a1:b6:bb:2b:a9:11:f4:41:8f:e3:87:
c9:81:62:e7:43:fa:01:99:e5:f6:c6:2f:a1:e2:2c:
39:a8:28:11:ce:5c:fc:dc:41:1a:71:a3:e3:b0:db:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:4E:DC:0C:AD:CA:CF:3D:DB:FD:CF:EA:EF:8E:4C:E8:20:96:A8
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:88:5e:64:0c:95:16:9d:a3:e3:37:08:d2:dd:43:21:31:dd:
1d:67:01:8a:59:7c:cc:f4:13:93:f5:fa:43:03:36:2d:c0:c3:
9c:83:1c:f7:fd:d9:f7:b4:c1:29:9c:49:3c:f1:3b:c0:d0:5b:
8f:0d:de:83:b9:90:25:01:cc:5e:33:34:22:d2:b1:00:5e:7a:
5a:9c:cd:c5:d2:e6:36:7a:cd:c9:f6:77:a8:3b:73:17:25:84:
99:7b:60:b9:88:c0:4d:ad:d6:bf:c0:de:26:b0:e1:f3:43:dd:
85:16:33:14:1f:ab:84:69:f8:c1:ae:de:b3:d0:35:ea:54:f9:
12:3e:67:f6:96:d6:e2:94:c2:18:99:48:95:fa:28:d9:a8:e9:
7f:8c:fd:21:27:8e:06:ee:58:21:29:47:a3:57:5c:fd:6a:7e:
86:78:d7:91:a4:ed:bb:86:c5:61:42:f1:02:91:45:7d:a9:aa:
f1:47:a1:81:17:81:78:f9:38:d2:58:e7:94:a1:66:47:ea:86:
7f:68:8f:01:3d:2f:2c:32:28:8e:5f:e3:e0:c9:86:bd:43:c9:
1a:3f:79:83:51:76:7e:bf:72:4f:00:54:7f:93:3e:eb:35:63:
bd:af:14:b4:27:80:c6:9e:44:7d:53:f2:c8:85:dd:08:e6:d7:
ce:67:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client