Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: E06ttNybgxyDjMXR15Q6MDgrhDD2yUE+6pj77R9KnVU=
Subject key identifier: 2F:B3:2D:61:CA:DD:E9:D3:DB:1F:CF:95:12:A3:D0:B1:EE:AB:7C:6D
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 019D265EF2F4C4C69EECFD95C71ED73A8FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 0AA8
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: 7pt8+/q1LpYaRK+hHmDVPCuvkwI2rnHqfUOAGcz2Nj0=)
2: h7Slf79U-tivsMXa7hEOttxBA6M.roa (hash: 3/yXrVufCN3qWz4paHjP2MngE7Cq+dL6ygZqrLPEOdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f2:f4:c4:c6:9e:ec:fd:95:c7:1e:d7:3a:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=2fb32d61cadde9d3db1fcf9512a3d0b1eeab7c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:33:33:73:aa:13:19:28:cd:ea:5e:d1:59:
c1:a6:9e:18:9a:1d:84:15:a3:ae:c2:9c:8e:fb:a0:
de:51:07:5e:75:f2:42:1c:3d:28:55:be:57:be:26:
3d:97:94:2f:d4:da:43:0c:b6:25:63:d4:d0:78:13:
c5:e8:5f:d7:9a:d3:c6:91:5b:1a:5d:7c:de:7d:21:
b0:51:fa:57:b1:2f:6f:31:a8:3a:2c:fb:40:bc:03:
4b:8f:8a:4b:1d:21:70:ed:23:b1:67:b3:f2:76:72:
7e:b8:02:da:d5:af:4c:d6:26:0f:0a:68:ef:7f:39:
f6:5b:9e:c5:76:e9:63:8a:31:d0:fa:32:67:0d:06:
5f:d3:af:8a:22:88:b8:17:75:c8:4b:87:d5:59:9c:
80:4c:27:48:f4:84:7c:17:28:51:d8:76:37:49:45:
6d:20:9d:2c:5c:66:63:52:29:19:61:04:14:ec:33:
83:c6:34:5f:f6:92:3a:8e:c3:32:92:9a:9c:67:44:
12:7c:20:21:36:41:5d:eb:5f:3d:e9:07:92:b9:01:
9e:24:06:60:04:ea:57:4a:4e:46:3d:3f:4b:42:d3:
18:d5:1a:7d:18:e3:8a:41:a9:a8:00:ba:9e:db:20:
5a:a4:77:ca:5d:13:96:73:3f:8b:66:45:99:f9:95:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:2D:61:CA:DD:E9:D3:DB:1F:CF:95:12:A3:D0:B1:EE:AB:7C:6D
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:e5:67:78:84:2d:b6:65:af:e6:9b:97:2d:96:c8:d7:09:
ba:3b:dd:61:ba:58:f3:2b:c2:18:16:d8:67:ff:09:24:7b:83:
09:1a:ac:43:a0:12:f7:fe:ad:8c:0e:23:d0:41:20:4d:ed:c4:
38:35:48:70:1a:4a:19:9a:06:60:1c:34:27:b0:31:8e:17:fe:
34:ab:b3:c5:1b:3b:0b:18:85:b9:1f:76:b9:e5:45:48:65:63:
db:f8:d7:56:91:6d:09:8b:1b:29:b9:f9:48:ee:e2:be:0c:50:
1c:59:54:21:57:bc:36:48:67:52:c7:1d:c5:98:ff:8b:d5:39:
b3:a2:70:64:67:9b:81:28:53:01:7e:cb:56:31:53:01:29:5f:
a7:6a:75:9c:ec:aa:80:aa:42:c3:92:4b:c4:56:78:95:58:ee:
b1:79:d5:1e:c8:e1:03:2c:10:8f:c5:40:33:14:fe:6e:72:45:
d8:df:6c:e1:51:b5:b9:97:42:80:87:76:8d:0d:01:39:e1:10:
ef:c9:01:27:fc:21:8a:09:01:5e:ac:94:ad:c0:cb:b4:6a:b9:
ab:4b:ca:16:13:f1:a2:cb:1f:1a:f1:58:c1:47:00:93:cd:7f:
2e:aa:29:ae:20:06:ad:e6:eb:b8:81:5c:36:c4:a8:88:16:88:
cc:40:b9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXvL0xMae7P2Vxx7XOo/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ODA0MTE1MmRmODBmNmU1MzEzNDI2NjNkZDAwMzEwOTkw
NTA4NGYwHhcNMjYwMzI1MTkwMDQ5WhcNMjYwMzI2MTkwMDQ5WjAzMTEwLwYDVQQD
EygyZmIzMmQ2MWNhZGRlOWQzZGIxZmNmOTUxMmEzZDBiMWVlYWI3YzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YAzM3OqExkozepe0VnBpp4Ymh2E
FaOuwpyO+6DeUQdedfJCHD0oVb5XviY9l5Qv1NpDDLYlY9TQeBPF6F/XmtPGkVsa
XXzefSGwUfpXsS9vMag6LPtAvANLj4pLHSFw7SOxZ7PydnJ+uALa1a9M1iYPCmjv
fzn2W57FduljijHQ+jJnDQZf06+KIoi4F3XIS4fVWZyATCdI9IR8FyhR2HY3SUVt
IJ0sXGZjUikZYQQU7DODxjRf9pI6jsMykpqcZ0QSfCAhNkFd61896QeSuQGeJAZg
BOpXSk5GPT9LQtMY1Rp9GOOKQamoALqe2yBapHfKXROWcz+LZkWZ+ZVmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+zLWHK3enT2x/PlRKj0LHuq3xtMB8GA1UdIwQY
MBaAFFeAQRUt+A9uUxNCZj3QAxCZBQhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3Mzkt
YzYxMmE3MGFiYjQyLzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3MzktYzYxMmE3MGFiYjQy
LzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwnlZ3iE
LbZlr+ably2WyNcJujvdYbpY8yvCGBbYZ/8JJHuDCRqsQ6AS9/6tjA4j0EEgTe3E
ODVIcBpKGZoGYBw0J7Axjhf+NKuzxRs7CxiFuR92ueVFSGVj2/jXVpFtCYsbKbn5
SO7ivgxQHFlUIVe8NkhnUscdxZj/i9U5s6JwZGebgShTAX7LVjFTASlfp2p1nOyq
gKpCw5JLxFZ4lVjusXnVHsjhAywQj8VAMxT+bnJF2N9s4VG1uZdCgId2jQ0BOeEQ
78kBJ/whigkBXqyUrcDLtGq5q0vKFhPxossfGvFYwUcAk81/LqopriAGrebruIFc
NsSoiBaIzEC5hw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:40 2026 by rpki-client