Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: qdvn1dYxsRWpaVUc/GZTK3dCnP6OUDnk67itrcnIRUY=
Subject key identifier: 31:26:30:CD:9A:40:4D:19:FD:53:30:5C:00:91:59:D9:CA:8E:E2:7C
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 019F935ABA1F3E8CCAAF9D4A1B5063A5308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 04E0
Signing time: Fri 24 Jul 2026 09:00:24 +0000
Manifest this update: Fri 24 Jul 2026 09:00:24 +0000
Manifest next update: Sat 25 Jul 2026 09:00:24 +0000
Files and hashes: 1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: 1XK+2XNP4yHZKhonMpKcM2pqo0/fPCMwQ0UOOugU04w=)
3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:ba:1f:3e:8c:ca:af:9d:4a:1b:50:63:a5:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Jul 24 09:00:24 2026 GMT
Not After : Jul 25 09:00:24 2026 GMT
Subject: CN=312630cd9a404d19fd53305c009159d9ca8ee27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:e4:a0:47:33:8f:d5:0a:80:9c:cf:54:99:
fa:c1:01:7d:9c:97:84:2c:aa:d4:a8:f8:a3:81:aa:
23:74:83:28:ce:a6:9c:7c:84:c7:65:c0:01:36:6c:
07:07:16:98:5a:6d:4c:c5:00:9d:bd:99:5b:41:95:
03:46:4d:dc:07:e9:ba:0f:b8:e0:90:e1:4d:6f:d4:
e8:02:2e:9b:e4:4a:93:12:b2:0d:ef:da:a3:19:83:
0a:09:fc:94:6c:26:b8:78:6a:1d:d2:17:27:d5:6f:
08:ab:8b:4f:56:42:4e:07:19:94:2f:ed:21:c9:27:
2b:50:d7:2c:4c:2b:9e:d4:34:d8:26:99:26:db:6f:
4c:f4:42:e4:68:aa:a3:79:21:67:43:a1:fa:cb:71:
ac:49:26:f9:f1:72:90:16:0f:0e:95:72:f1:ce:51:
7e:7f:18:dd:dd:ad:25:96:27:a2:d7:e3:af:de:87:
92:25:3c:0d:5e:c8:08:b3:34:ea:49:36:c2:48:5a:
92:ab:6a:08:75:1a:ce:e2:c2:8e:48:cb:ad:65:4f:
ce:2d:fe:40:26:6e:19:0b:54:14:f3:fa:da:85:75:
58:ef:a9:7a:08:2b:41:39:7a:59:d5:d4:21:4c:50:
e0:36:0c:0c:55:c4:82:c8:2a:51:0d:fa:bd:b3:9b:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:30:CD:9A:40:4D:19:FD:53:30:5C:00:91:59:D9:CA:8E:E2:7C
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:17:be:db:ba:4d:64:10:12:96:4b:e6:e4:05:bf:89:3c:f6:
d9:3a:b6:28:74:90:b7:a5:39:db:06:df:38:29:c0:f3:f8:ae:
cb:93:70:1a:2c:bf:bd:79:21:5a:6e:7f:e8:df:d4:a2:7a:61:
d5:e6:45:81:20:5e:52:38:7b:32:45:42:8c:8c:73:33:55:60:
64:48:c7:86:3f:14:c2:b4:d3:ae:61:42:36:34:c5:dc:fa:5a:
b0:74:13:24:05:97:87:70:83:26:f0:1b:b4:71:4b:2a:30:2e:
65:27:92:a7:c5:0c:09:f3:ae:cb:28:36:56:fd:c6:bc:db:3a:
7c:1c:4b:5b:02:8d:bd:2a:8b:3c:3f:c9:c4:17:61:c2:60:d3:
23:c3:f3:1b:46:05:e7:99:73:0d:e6:40:81:bb:1a:78:b4:60:
a9:80:d8:0e:dc:b2:e8:58:9e:81:71:5b:98:9b:40:1a:b3:9a:
1a:a2:ac:6a:b6:e8:c7:b5:49:71:51:ac:6c:3f:89:4d:a2:d2:
a4:a8:07:29:62:10:3b:25:b4:67:be:13:f9:78:84:4e:57:04:
1e:dd:f7:79:65:66:41:74:a9:ef:cf:c0:90:6e:3f:80:59:db:
39:a6:f4:4a:73:7e:25:98:61:7e:e4:24:24:1f:c5:5f:c4:7f:
54:e0:1d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWrofPozKr51KG1BjpTCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDBiODYxYWZiMTI1YjhiYzEzOTY5ZDBiNDk3MzRjZTg0
NGJkNmEwHhcNMjYwNzI0MDkwMDI0WhcNMjYwNzI1MDkwMDI0WjAzMTEwLwYDVQQD
EygzMTI2MzBjZDlhNDA0ZDE5ZmQ1MzMwNWMwMDkxNTlkOWNhOGVlMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zrkoEczj9UKgJzPVJn6wQF9nJeE
LKrUqPijgaojdIMozqacfITHZcABNmwHBxaYWm1MxQCdvZlbQZUDRk3cB+m6D7jg
kOFNb9ToAi6b5EqTErIN79qjGYMKCfyUbCa4eGod0hcn1W8Iq4tPVkJOBxmUL+0h
yScrUNcsTCue1DTYJpkm229M9ELkaKqjeSFnQ6H6y3GsSSb58XKQFg8OlXLxzlF+
fxjd3a0lliei1+Ov3oeSJTwNXsgIszTqSTbCSFqSq2oIdRrO4sKOSMutZU/OLf5A
Jm4ZC1QU8/rahXVY76l6CCtBOXpZ1dQhTFDgNgwMVcSCyCpRDfq9s5ug3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEmMM2aQE0Z/VMwXACRWdnKjuJ8MB8GA1UdIwQY
MBaAFFfQuGGvsSW4vBOWnQtJc0zoRL1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEt
Zjg2MmZkZmEzYjkzLzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEtZjg2MmZkZmEzYjkz
LzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhe+27pN
ZBASlkvm5AW/iTz22Tq2KHSQt6U52wbfOCnA8/iuy5NwGiy/vXkhWm5/6N/Uonph
1eZFgSBeUjh7MkVCjIxzM1VgZEjHhj8UwrTTrmFCNjTF3PpasHQTJAWXh3CDJvAb
tHFLKjAuZSeSp8UMCfOuyyg2Vv3GvNs6fBxLWwKNvSqLPD/JxBdhwmDTI8PzG0YF
55lzDeZAgbsaeLRgqYDYDtyy6FiegXFbmJtAGrOaGqKsarbox7VJcVGsbD+JTaLS
pKgHKWIQOyW0Z74T+XiETlcEHt33eWVmQXSp78/AkG4/gFnbOab0SnN+JZhhfuQk
JB/FX8R/VOAdeA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:33 2026 by rpki-client