Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier: kFRlSgR619cozpO9eBInsFEORp92dFjQSMEuTC4euNc=
Subject key identifier: 71:00:29:35:3C:A8:7B:DC:A8:E7:3B:62:97:11:36:CE:F5:3C:3D:CE
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 019D26CD01FF2AA675EE5AA6C4C3B42DC78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number: 1218
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: Opai9dg9_aPXefCDg-UcShG8DsQ.roa (hash: PwYEnlWaHMXct2KSlyUDXvXKQcsU2VZDyx8dPTPY47I=)
2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: r14l8hK3PUz5VAuNJN7+Qr3niPoKjgDFjTpOFW/DD2s=)
3: nRRzwVPO_lwp_dDipainvbLpMZ0.roa (hash: XL1wzfMszjSpjfH9Vrf0CxfKPPrO6e01hughMU6CA/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:ff:2a:a6:75:ee:5a:a6:c4:c3:b4:2d:c7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=710029353ca87bdca8e73b62971136cef53c3dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:04:0c:f8:d3:ff:11:1e:b8:ad:6c:86:13:
c8:f6:04:be:73:6e:41:2a:08:f9:5c:19:ad:82:5a:
12:44:7f:fe:23:60:6c:38:7f:c4:3d:37:14:55:5e:
97:c5:9b:3b:a6:bb:dd:98:8c:46:9f:66:53:79:13:
08:79:23:2a:c3:76:39:89:c5:0f:01:6b:46:14:f9:
09:f7:3b:12:87:c1:44:85:b8:4d:7a:08:8c:f2:92:
9d:96:25:22:a9:78:5b:92:46:e1:a1:25:de:5b:07:
bd:80:9e:53:39:03:03:57:08:19:3c:46:1c:a4:12:
82:80:5d:09:c2:0a:c0:27:f7:e9:49:03:4b:72:27:
e9:58:e4:de:ea:09:81:83:80:48:c0:7f:00:18:ff:
d0:f6:2f:46:95:a1:5f:57:22:75:8e:09:09:c9:76:
b1:d6:a1:2c:64:e7:94:56:23:bf:79:14:e2:ca:0f:
58:6b:a5:17:69:f0:c3:28:cc:66:62:f6:7b:94:2c:
21:38:42:51:e1:c0:84:5e:e5:ed:f0:37:30:f3:a8:
f3:02:38:50:34:19:9f:b2:d3:d3:47:c1:df:fd:77:
b8:e6:f6:2b:3b:f3:81:b4:67:44:f8:65:7c:88:b5:
5f:0f:52:73:10:3a:85:fb:18:b8:82:03:a1:d0:76:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:00:29:35:3C:A8:7B:DC:A8:E7:3B:62:97:11:36:CE:F5:3C:3D:CE
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3d:3e:43:4a:af:67:f9:0b:51:ff:80:a1:43:d4:19:b1:1b:
ae:af:90:e4:8e:f5:8f:38:98:69:23:8d:3d:a5:a4:c4:ef:9c:
d5:ca:26:4e:c0:da:27:a9:e3:5d:ee:1e:45:4b:08:16:39:0a:
a1:4d:b3:6b:db:49:3d:e0:05:f2:07:9e:ac:4c:05:db:13:ed:
26:68:55:93:82:11:3f:4f:dd:60:80:e6:ac:f9:a3:c0:ed:c7:
7e:3f:bb:a0:71:74:83:41:5e:61:7b:03:a4:a1:e4:5e:56:70:
ac:23:e6:fe:6e:4a:6a:99:ae:30:58:bf:13:02:c5:18:68:a1:
d5:fb:21:f1:5d:c5:3d:3b:ae:39:0c:43:ff:aa:d7:59:fb:3c:
8d:98:f0:7c:5c:94:fd:51:12:d1:a6:38:a5:82:ad:53:c1:34:
02:fc:16:ab:57:0f:de:f1:79:cc:3c:99:32:f7:7c:7b:0c:e5:
8e:7c:58:d2:d4:e6:60:2c:72:84:42:f9:36:90:dd:54:49:00:
f1:f0:db:d4:68:ab:6a:cc:c2:af:fb:3a:3a:a2:b7:15:5b:ae:
55:fa:9d:24:87:b4:7f:f6:24:8d:a5:b8:31:8c:c8:72:1f:63:
bb:da:f6:23:93:0f:ca:df:63:94:b1:81:5b:dc:7e:60:71:3d:
ed:37:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:40 2026 by rpki-client