Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier: ul24ts/M6k1tYsVuvlJ+Zf+FhUT6AVxJlMrdzrEexL4=
Subject key identifier: 5A:E4:B9:38:8A:71:7E:B2:A0:A4:75:FA:84:77:8C:7C:87:08:83:BE
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial: 019D37C10BB0E8EE79181666A574D287DADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number: 0CE9
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=)
2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: m4eZ7e0IhMLHjI3+gUkhS/SngTwVAh99wbCj1D7/6vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0b:b0:e8:ee:79:18:16:66:a5:74:d2:87:da:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=5ae4b9388a717eb2a0a475fa84778c7c870883be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:02:ad:ba:26:2d:3b:a6:c8:1d:4d:f0:cb:
d9:7f:8b:bd:96:83:b8:68:f2:56:a1:d4:ac:d4:c5:
12:bf:2c:4d:3e:0f:85:3a:62:ff:ed:9e:b7:05:67:
69:f0:90:8d:8e:3b:54:1e:70:3d:92:bb:a9:aa:42:
8b:58:99:26:a3:79:c7:75:de:8c:8d:b5:e9:8f:a7:
78:bf:b7:33:7c:83:4f:3f:08:8c:09:fb:7d:6d:d9:
fd:36:9a:ec:1f:99:c3:f2:3a:bf:05:1d:2b:67:9c:
84:d9:96:d8:ba:66:ae:4b:65:6c:6c:aa:e3:6e:a2:
85:61:50:50:35:9a:cb:77:95:22:29:76:5b:7f:0f:
ec:5c:cf:69:26:7a:94:b5:cb:5f:04:3a:45:97:b2:
38:f0:e1:7c:00:71:1c:3b:b3:6d:a9:20:ac:e9:f8:
1d:cb:a2:37:67:d2:ad:27:88:8c:dd:af:9a:c1:35:
c2:8f:7f:28:78:c7:a0:56:8b:5d:28:5e:d1:fc:40:
3d:c7:02:69:a0:9c:06:a8:29:0a:d5:95:43:94:ef:
04:47:2a:31:e9:7f:84:1f:66:5d:ec:2d:b1:19:d5:
e7:4d:62:17:92:36:8b:66:01:33:9c:3f:23:67:47:
2a:52:c7:ba:8e:8c:e9:30:c4:80:2d:84:17:92:ff:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:B9:38:8A:71:7E:B2:A0:A4:75:FA:84:77:8C:7C:87:08:83:BE
X509v3 Authority Key Identifier:
keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:2f:00:b5:9e:2d:af:f5:94:1f:59:4b:ef:13:ff:6b:ea:
91:09:7c:01:87:d5:c3:85:a9:aa:5f:4b:5e:c7:68:09:b5:bb:
60:90:22:d8:2a:93:0b:06:80:24:d6:63:8c:df:77:d9:6f:a3:
ad:c1:b8:dd:30:b7:80:b0:ba:7c:36:cc:fd:6d:3c:b7:a8:65:
34:7d:a4:e8:1c:8f:d0:56:d9:c1:cc:93:bf:4c:da:9a:a5:51:
13:b9:54:a1:cb:ca:c5:a0:2b:fe:20:08:25:0f:ae:27:06:64:
2f:62:21:ee:de:a0:cc:05:90:ab:86:fe:ff:b0:36:c8:84:92:
c3:2b:65:65:f0:bf:09:c9:f3:5b:cb:a7:e2:66:bd:70:9b:8e:
04:7e:14:fb:63:8f:23:6d:25:7e:aa:f1:c1:81:28:df:d2:7d:
46:f3:e0:f4:76:f2:08:2c:88:43:d4:34:82:aa:19:f5:09:d7:
e8:e1:0b:0f:2e:e8:a7:67:06:9a:23:14:72:b0:b1:3b:1e:bc:
d1:3f:f9:fd:62:70:d8:a7:b6:4d:67:f2:dc:35:3c:10:7f:32:
a9:fd:57:36:54:82:b6:99:5b:39:a8:c3:53:f6:ab:83:0e:f3:
c2:10:0a:78:31:36:a6:a2:0a:ee:3b:3d:c9:15:12:0a:cf:f2:
68:2c:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:47 2026 by rpki-client