Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: DGi2iRd1gyxFlMS3NaiufWTtXFrGEU8pZKhg+T8AvJY=
Subject key identifier: 1A:AB:26:87:2C:A5:16:6E:E0:A0:A6:B4:F9:02:A1:DB:B7:B8:EF:09
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 019D265EC780B4D7A8ADF2401CCF459D7B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0EB2
Signing time: Wed 25 Mar 2026 19:00:38 +0000
Manifest this update: Wed 25 Mar 2026 19:00:38 +0000
Manifest next update: Thu 26 Mar 2026 19:00:38 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: ZTu1AfLYn7c5NMMylmA3DoGLhpMzZOynA+9kEr+35vI=)
2: nAEhxGlWfMw1hJO2kHoupGF6bQs.roa (hash: S5hBxJwXqI+pj2+GP/TME8DVoAiS8tZiCcw9abB/TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c7:80:b4:d7:a8:ad:f2:40:1c:cf:45:9d:7b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Mar 25 19:00:38 2026 GMT
Not After : Mar 26 19:00:38 2026 GMT
Subject: CN=1aab26872ca5166ee0a0a6b4f902a1dbb7b8ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:a1:1c:21:1a:94:fc:fa:cb:2d:b9:bb:40:
91:be:8f:dd:db:2c:d8:d5:28:46:80:b5:80:a6:18:
63:66:84:b9:92:16:b3:72:be:61:0e:78:2a:78:d8:
20:5b:1d:7b:8b:6e:95:b5:61:c8:bf:33:b1:d6:b6:
af:02:5d:ba:12:90:70:f2:66:40:dc:67:d9:fb:fc:
b0:b2:5e:8d:f6:86:da:5f:c0:9a:af:f1:ae:b4:da:
b2:5b:4c:8e:92:76:88:55:7b:2b:03:cd:56:60:23:
f6:e1:46:1e:50:b6:8a:1d:3f:62:fa:39:41:9c:87:
70:57:bc:c6:51:be:0a:ac:f5:a5:e4:2b:bb:e4:a5:
ac:57:7a:16:5a:2f:ba:57:87:28:77:c4:34:30:cc:
63:e4:0b:5b:76:b8:2b:02:e1:42:58:8e:7a:c6:79:
7c:e8:64:1d:67:20:07:01:87:51:57:0f:b7:95:95:
18:f3:0d:f9:5d:5c:7f:40:5a:3f:bc:a2:b0:6b:11:
2d:42:8f:f0:db:9c:84:db:58:ee:a6:ed:7c:0f:a5:
1c:32:c5:7d:d4:a5:4d:1e:af:c7:59:6a:b1:86:d1:
20:71:3d:3b:ba:de:f5:89:bb:a3:e4:da:2b:47:18:
7d:2f:9b:32:d2:32:73:8b:c0:e9:5d:a6:be:53:0c:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:26:87:2C:A5:16:6E:E0:A0:A6:B4:F9:02:A1:DB:B7:B8:EF:09
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f2:db:78:4c:b0:a5:45:34:b9:5b:5a:96:db:53:c0:93:08:
82:61:63:cc:13:a4:d1:d1:1d:51:c8:55:65:8c:11:0f:08:4f:
af:22:e6:53:0d:0c:af:7a:b5:89:80:dc:98:c8:84:10:6f:b1:
76:0c:68:3b:00:2e:c5:bf:b7:cf:32:01:9f:03:06:f3:20:8a:
a4:5f:a2:44:9d:d8:64:c2:b6:b9:8a:17:ed:2f:7c:be:91:f3:
02:33:9e:8c:e6:81:25:bf:fc:15:99:8f:ce:6b:2e:f4:73:2d:
1e:54:5e:ef:40:26:dd:f7:79:a7:10:81:4e:3f:b9:0a:e6:90:
b2:24:a0:53:0d:04:0c:c9:96:f5:c8:47:d7:02:5f:dc:a7:cd:
53:31:c6:59:f5:07:ee:ca:ad:76:5d:31:cf:79:0a:0d:86:23:
c6:8e:a2:bc:eb:14:0b:5f:fd:74:b1:0f:c5:97:57:f7:0e:a8:
7c:a8:f7:77:1e:5f:37:c4:a5:f5:af:67:76:19:d3:b9:22:ca:
2d:71:a9:1d:19:45:87:98:5a:37:59:47:2e:0b:52:ca:19:a0:
53:bf:24:7e:bd:f0:17:b7:af:a6:4b:da:48:28:74:bc:f0:b5:
31:ab:f7:97:f9:f0:31:53:0e:10:d9:8d:32:6b:6e:8b:73:b9:
38:fc:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:26 2026 by rpki-client