Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: iyIPSfAvcmVaeo28booohwwqSy+VomZZqRodm4pjA08=
Subject key identifier: BD:27:F2:61:67:12:77:98:2A:29:7C:5C:F7:8B:75:04:24:E7:69:90
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 01A0E173CEF57EC9FC1FA38E69973362FAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 058D
Signing time: Sun 27 Sep 2026 06:00:58 +0000
Manifest this update: Sun 27 Sep 2026 06:00:58 +0000
Manifest next update: Mon 28 Sep 2026 06:00:58 +0000
Files and hashes: 1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: lYR8kecT5aIr0X5BoaojUVCyaqpMmRp27b4o/Bfqb2c=)
3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:ce:f5:7e:c9:fc:1f:a3:8e:69:97:33:62:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Sep 27 06:00:58 2026 GMT
Not After : Sep 28 06:00:58 2026 GMT
Subject: CN=bd27f261671277982a297c5cf78b750424e76990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:72:ec:8c:92:45:5e:a1:c8:6e:2d:f0:50:
dc:88:70:af:4f:81:5a:6d:1a:69:8f:aa:e5:a9:03:
be:26:de:fd:9d:34:9b:0d:16:31:ad:59:fa:7c:f6:
3f:94:7d:c8:84:b4:cd:f2:68:2e:05:51:f8:3d:c7:
1d:a2:f0:9a:cc:7a:53:6a:c8:61:b1:96:55:80:7a:
dd:38:11:1a:8e:8b:c8:2a:21:2f:b9:c4:ce:c8:23:
c2:11:f2:0f:2c:6d:ca:b9:64:32:b5:36:ea:08:af:
27:29:83:d3:ed:6d:5d:5d:f5:02:98:ee:51:d2:e4:
2b:9f:73:81:63:45:39:93:92:ab:5c:16:eb:82:84:
cd:22:51:60:53:5e:6b:f0:67:c5:13:90:f5:b2:4f:
6c:22:b7:6b:44:39:21:ae:22:bc:28:42:dd:6b:02:
8d:ee:6e:17:6b:a6:14:ed:32:6e:07:db:f8:24:d1:
46:31:89:93:b8:1f:48:ec:ff:65:de:a9:62:01:f4:
c5:3c:dc:e2:e4:a6:6c:ac:ea:1b:7a:dd:11:c1:f1:
b7:5b:5b:6a:df:4d:b3:5e:4f:7b:2f:13:45:46:40:
98:2d:53:6b:68:5a:90:79:1d:13:b7:4f:13:0a:d3:
85:09:be:93:27:4f:bb:68:96:65:b5:8e:3a:28:54:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:F2:61:67:12:77:98:2A:29:7C:5C:F7:8B:75:04:24:E7:69:90
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:eb:1b:74:6b:50:ca:ea:97:56:35:99:a3:8c:90:57:71:
e7:07:8c:2f:ac:c5:52:f9:80:5d:06:74:1c:70:e1:0c:28:d4:
15:1c:3d:6a:10:d3:59:02:50:e6:8a:b3:76:8c:1c:c8:4f:2d:
bc:fb:a8:7b:ee:e4:53:96:c2:19:2c:cf:b1:af:cc:df:5a:d5:
91:d9:0b:13:f6:d1:5b:be:47:d7:15:b8:27:e8:8b:75:19:41:
3b:e8:a6:44:4b:fa:c7:bb:b8:46:3e:14:52:b7:af:47:7b:3b:
45:9b:a2:e0:37:f3:fa:b3:4a:7d:9a:6a:87:57:3b:36:04:91:
6d:17:f4:17:56:fa:ce:14:fb:bf:0a:7c:dd:d8:13:fe:45:55:
66:bf:5b:dc:86:84:4c:d7:54:b3:d5:1d:db:6f:4a:6b:73:fd:
5b:0f:82:e7:10:08:f3:cc:45:41:a9:dd:57:7b:96:82:54:c9:
8e:00:48:11:22:26:d5:df:e8:47:5f:77:cb:5d:1b:19:d6:b5:
77:39:78:7a:57:1b:62:7d:cc:c8:7c:27:2f:a2:89:01:2c:ad:
c8:d2:6b:f0:1b:e7:a1:d1:a8:44:bc:d2:60:23:b8:60:bc:68:
96:1a:a0:24:bf:32:d6:8a:d6:ca:61:25:7c:69:fd:60:57:d7:
03:9a:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:52:18 2026 by rpki-client