Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File: V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier: RiBQ7xBNhEb0ihApNaxxArMNBZFRC+z5lZs5DTuTvwI=
Subject key identifier: C2:44:7A:E7:51:5E:BE:2F:B7:D4:81:47:2D:DD:0C:03:CE:5E:40:65
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 01A0D8041E0A9780376723ADEBD35E988BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 10:02:23 +0000
Manifest this update: Fri 25 Sep 2026 10:02:23 +0000
Manifest next update: Sat 26 Sep 2026 10:02:23 +0000
Files and hashes: 1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: nCxKKeLH2dR9Y40Ss1jkhDm3rEtplQ4qepwL55ltAmI=)
2: wqUca6hdhuPK8izyY-5u-NB8hFo.roa (hash: HRKsMqKaEiIwseli6i4ZQRouG3dOlIyMlhskACBVj8Y=)
3: yOVUwpawosnLEvEpWeBu0ZksdtE.roa (hash: ecVfRjOLZ9OqmXqMU4m+THLoypH/3fTNLWWn4EOFi9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:1e:0a:97:80:37:67:23:ad:eb:d3:5e:98:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Sep 25 10:02:23 2026 GMT
Not After : Sep 26 10:02:23 2026 GMT
Subject: CN=c2447ae7515ebe2fb7d481472ddd0c03ce5e4065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:b8:31:cc:c0:74:0b:7b:21:c1:75:a3:1d:
a3:c7:54:db:2d:2c:d4:31:54:9a:48:b9:9a:b8:80:
af:f6:c5:40:73:6a:19:0d:67:01:bd:95:ad:6d:7e:
16:8a:ce:1d:72:6d:79:a5:7b:14:42:e1:4c:18:89:
24:48:13:39:63:2c:46:ba:a6:3c:be:b1:f4:fe:dd:
33:1a:5a:e2:b0:89:0e:6e:d4:86:30:2a:f7:7b:12:
40:da:f0:b8:52:ff:bf:9a:0a:b8:ca:4f:18:6a:b3:
28:bf:d5:1a:c2:3f:c2:0a:dd:af:97:1f:88:18:9b:
51:5f:7b:1a:25:61:ca:6b:1b:80:d3:d7:ed:9f:3e:
fe:2c:ab:27:1c:a5:70:7d:9e:d3:82:94:e2:aa:98:
17:60:4b:ec:73:22:78:33:e6:c2:0b:90:78:af:88:
3e:1a:b5:85:50:f1:46:34:bd:fc:af:87:bd:05:37:
97:67:eb:a0:29:c7:29:1d:37:dc:11:be:fb:f6:f3:
77:50:ca:79:14:9e:4c:6b:d6:67:a8:04:ce:53:ff:
f7:45:ae:23:42:b8:09:9b:90:36:56:32:21:4a:72:
48:60:dd:3c:94:ad:30:f8:05:29:96:a6:ba:5d:8b:
75:f6:c2:d4:f5:94:72:ba:87:b9:68:ba:b4:6d:db:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:7A:E7:51:5E:BE:2F:B7:D4:81:47:2D:DD:0C:03:CE:5E:40:65
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:03:9c:7b:c7:a0:45:45:4a:a9:09:76:94:41:ba:ba:86:
0e:8c:bf:e5:da:e8:e1:a4:44:a5:35:42:f3:85:e4:48:d6:2c:
2d:15:4c:4d:79:be:84:36:7f:64:cb:44:b0:9a:f3:e5:80:21:
d4:8a:d6:70:06:2a:48:ca:29:1d:db:35:1d:82:c8:00:9f:28:
37:5e:ae:45:7d:c8:39:78:85:32:be:8a:b7:31:fe:19:14:33:
a2:d1:52:f9:2c:3a:9c:41:2f:c2:fb:bc:f8:15:ff:d5:5d:4a:
d9:b8:88:6f:a7:3e:7f:a4:7d:e8:a6:26:7a:90:cb:8a:30:e7:
9a:2d:e9:5d:bf:00:82:7c:48:9e:19:e7:a2:1a:c1:17:81:18:
e7:0c:12:6e:09:79:0b:33:90:87:16:1a:0d:69:31:ae:70:8a:
01:6b:8a:0e:6e:a4:f0:1d:1c:59:a2:8e:a7:86:e9:39:07:c9:
96:e4:fc:ac:9e:d0:d7:40:9c:73:d2:23:61:87:b1:8e:89:40:
be:34:43:55:b0:77:d5:cc:44:c0:ac:b7:66:52:4c:ab:10:6d:
95:7b:a7:60:97:7b:21:44:0e:cb:00:48:16:1a:3a:ea:88:35:
d8:6a:8e:90:98:cc:99:8c:6d:e1:ef:32:61:3b:a4:4f:73:78:
9c:6d:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:09 2026 by rpki-client