Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: o/t74VuvU93T7TRrwzzZdgMB4gA5QtqFQJRK6eDBzh4=
Subject key identifier: CD:05:BD:39:F4:DF:F0:F5:AB:D8:5C:DE:65:0C:2D:65:38:B9:05:6A
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019E9C972545EAD29FCAFFEC74AE0D34360F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0691
Signing time: Sat 06 Jun 2026 11:00:11 +0000
Manifest this update: Sat 06 Jun 2026 11:00:11 +0000
Manifest next update: Sun 07 Jun 2026 11:00:11 +0000
Files and hashes: 1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: w1KyIoxY0S9gRLoPtziZ9gZrGftgY9+hq8EyQRA/NOY=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:97:25:45:ea:d2:9f:ca:ff:ec:74:ae:0d:34:36:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Jun 6 11:00:11 2026 GMT
Not After : Jun 7 11:00:11 2026 GMT
Subject: CN=cd05bd39f4dff0f5abd85cde650c2d6538b9056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:22:b2:38:66:4f:de:29:20:b3:1e:40:a9:
15:61:c7:0f:73:00:1a:b1:a2:05:fb:41:ed:c2:92:
07:82:40:a6:35:1e:8b:87:0c:22:17:54:ab:bd:c6:
b9:6d:20:0c:72:51:74:9b:16:bd:10:3e:63:7b:48:
43:24:47:be:4d:3c:c1:6e:95:0e:cb:d5:3e:c0:fd:
1e:eb:d2:97:c1:85:bc:0a:7a:17:c3:68:f8:95:3a:
f6:ba:fa:0d:b8:32:45:6a:ff:8c:ef:08:93:21:99:
4b:6d:22:f2:46:66:c2:6f:c4:63:94:5f:45:54:27:
94:1f:d0:21:df:86:23:c3:ab:e3:35:d0:0f:da:8a:
65:48:63:51:bc:c2:d3:ab:b3:f6:c0:b8:69:1a:32:
e8:15:1f:f4:7c:6d:c1:22:20:07:79:a9:24:57:a3:
c1:90:d8:42:80:fb:38:25:50:07:29:d6:3f:5d:60:
74:20:b1:6d:e1:41:ff:d5:e6:b1:29:ff:7c:90:f0:
6c:be:2a:01:4f:e8:f4:b5:cf:bf:50:24:21:96:dd:
c0:42:3a:ce:e6:e5:50:91:83:6d:10:7c:5e:41:13:
8c:67:84:bd:c3:d2:46:12:b5:e0:37:a4:4d:58:72:
0e:14:81:6e:6f:bb:85:c9:98:52:da:fc:7e:7a:63:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:BD:39:F4:DF:F0:F5:AB:D8:5C:DE:65:0C:2D:65:38:B9:05:6A
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a2:d7:c0:8e:c2:11:a3:e2:9c:dc:5e:c3:65:98:ec:95:8d:
23:46:f0:a5:e7:eb:a3:89:58:db:26:eb:be:10:3b:5e:70:44:
4e:f1:67:73:47:46:43:04:d0:07:5a:42:ec:05:24:06:a5:7b:
8c:f9:7c:8f:40:1f:f5:74:0c:9e:46:cd:c8:54:24:f9:bc:47:
ba:90:26:44:08:1b:91:5d:b4:04:54:d4:e9:f9:bc:bd:8b:4e:
87:22:1f:e4:85:5e:3e:da:bf:2f:73:1d:87:53:49:72:c8:5d:
08:e6:03:e8:36:75:b6:20:3a:b9:2e:a4:ce:83:c9:cc:1c:c6:
3d:b6:1c:3c:28:2f:4e:5a:3e:84:2e:af:81:8b:c6:6f:27:7a:
ca:40:79:3f:66:1b:25:aa:e6:26:cd:30:5c:68:b3:ef:42:52:
2f:d4:bc:88:c9:53:1d:ca:53:e0:8c:6a:97:63:e8:0c:b0:a2:
37:4d:d4:46:2e:03:8e:af:48:8a:6b:44:10:ac:68:c9:63:75:
94:9a:83:66:13:e5:49:45:ee:23:a5:ff:d6:06:2b:05:8b:e1:
96:a2:84:c5:e0:cf:b7:cd:17:91:81:3f:a9:eb:fa:a2:0c:09:
8c:39:0b:a1:62:c9:db:f1:18:d5:ce:4a:fd:f9:3d:67:67:b9:
93:31:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:07:33 2026 by rpki-client