Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File: V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier: CNoa4Q2UplA16hAX8H0jrF5nG6GuJI2gRgRrEfyYDV8=
Subject key identifier: E9:18:A3:CB:7C:49:95:45:41:3D:C0:64:24:FE:BB:EA:83:AA:00:5B
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial: 019D25F0EB60578C1414BB16B435E7DFBC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number: 17B7
Signing time: Wed 25 Mar 2026 17:00:38 +0000
Manifest this update: Wed 25 Mar 2026 17:00:38 +0000
Manifest next update: Thu 26 Mar 2026 17:00:38 +0000
Files and hashes: 1: MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa (hash: VagX+oyv5O56sokc/qHDCjREdjly46AXJeRdXSrzpR0=)
2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: hERok+AOy3EuwGapU8fgdlOBPmD0fc0KOiwiOMwinXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:eb:60:57:8c:14:14:bb:16:b4:35:e7:df:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Validity
Not Before: Mar 25 17:00:38 2026 GMT
Not After : Mar 26 17:00:38 2026 GMT
Subject: CN=e918a3cb7c499545413dc06424febbea83aa005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:8f:24:e4:c4:54:3d:2d:47:b5:1d:54:2b:
aa:ae:8a:c3:48:b9:7d:46:63:2f:a3:f2:9d:fd:ff:
0e:64:5f:7b:75:e7:ff:01:8c:e2:66:4f:6c:17:3c:
ea:0c:33:65:4f:12:e1:95:1d:a3:f5:e8:94:3c:b3:
c9:49:d9:63:a4:91:cf:7f:69:e2:20:5a:7f:84:7b:
fd:df:cb:c0:e7:de:08:9b:4a:fa:1c:e7:0c:7e:b4:
8c:41:46:a1:3d:19:32:2e:6e:f6:c9:69:6d:a2:85:
d1:a1:cf:00:c7:c7:05:14:7a:b4:92:c0:cb:92:55:
ac:d8:5f:8c:e8:9f:cc:d1:9f:2d:04:41:19:9a:c1:
f1:cf:31:22:4b:31:73:85:78:44:83:35:2b:3f:71:
1e:fc:dd:a3:a5:fb:9e:2d:12:8b:74:08:0a:e8:de:
ab:8b:97:45:8a:86:56:b7:74:ba:b2:75:ae:43:62:
b2:4c:33:64:7a:73:71:73:7d:56:86:f9:1f:12:b6:
7e:71:59:f0:f3:3a:91:a7:8d:a5:1c:c0:b2:9e:73:
ab:63:af:cf:2a:be:a0:78:04:e7:8d:88:d8:63:65:
13:72:fb:fe:19:96:63:29:c9:d4:df:02:f7:99:74:
0d:4e:35:f2:34:a7:c2:e8:f3:6c:65:1d:97:3b:21:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:A3:CB:7C:49:95:45:41:3D:C0:64:24:FE:BB:EA:83:AA:00:5B
X509v3 Authority Key Identifier:
keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:bf:49:e8:f1:aa:8b:09:ab:c8:27:60:47:8f:72:71:a6:
e5:73:df:0e:1e:38:8a:7d:26:2c:1d:a6:db:24:b4:fc:9e:97:
a1:58:5a:89:29:f5:98:ed:90:37:13:e5:57:6a:d5:20:33:3b:
8a:9b:90:6f:0d:c9:95:bf:ac:3a:95:24:af:37:4b:31:f3:23:
f2:05:62:6e:2f:e7:b1:b9:c7:31:c2:d2:dd:03:2b:68:c9:a8:
f8:4f:30:c8:0a:f2:e3:f4:3a:bb:ef:37:6f:4c:c8:67:5b:55:
24:a6:57:bc:82:67:d3:7d:d0:8f:8d:1c:d8:dc:d2:07:25:4d:
39:c4:9c:fd:94:ec:cf:d1:0b:61:fa:33:f4:b3:72:c1:94:4e:
93:48:13:11:a2:c2:4b:5a:51:61:af:66:57:d7:df:c7:8f:d9:
0d:6e:cb:de:95:75:65:4b:2b:40:18:14:f3:f8:b1:04:be:9d:
ee:33:22:48:d9:28:f8:cb:8b:9f:2a:d6:f6:75:e2:bc:b2:36:
93:0e:23:c0:d2:41:8c:31:55:54:f7:be:a5:49:d7:fe:03:1b:
40:63:cd:9e:86:de:8f:43:b5:ea:1c:87:3b:4f:67:f2:b2:04:
26:9e:6a:9c:a5:a4:3e:e2:4b:f8:66:ba:e9:db:7e:f0:89:7c:
84:3f:5b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8OtgV4wUFLsWtDXn37wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3
YTZlOWYwHhcNMjYwMzI1MTcwMDM4WhcNMjYwMzI2MTcwMDM4WjAzMTEwLwYDVQQD
EyhlOTE4YTNjYjdjNDk5NTQ1NDEzZGMwNjQyNGZlYmJlYTgzYWEwMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gmPJOTEVD0tR7UdVCuqrorDSLl9
RmMvo/Kd/f8OZF97def/AYziZk9sFzzqDDNlTxLhlR2j9eiUPLPJSdljpJHPf2ni
IFp/hHv938vA594Im0r6HOcMfrSMQUahPRkyLm72yWltooXRoc8Ax8cFFHq0ksDL
klWs2F+M6J/M0Z8tBEEZmsHxzzEiSzFzhXhEgzUrP3Ee/N2jpfueLRKLdAgK6N6r
i5dFioZWt3S6snWuQ2KyTDNkenNxc31WhvkfErZ+cVnw8zqRp42lHMCynnOrY6/P
Kr6geATnjYjYY2UTcvv+GZZjKcnU3wL3mXQNTjXyNKfC6PNsZR2XOyHyLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkYo8t8SZVFQT3AZCT+u+qDqgBbMB8GA1UdIwQY
MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It
MDY1YWE0MTU1ZWQ0LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0
LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6m/Sejx
qosJq8gnYEePcnGm5XPfDh44in0mLB2m2yS0/J6XoVhaiSn1mO2QNxPlV2rVIDM7
ipuQbw3Jlb+sOpUkrzdLMfMj8gVibi/nsbnHMcLS3QMraMmo+E8wyAry4/Q6u+83
b0zIZ1tVJKZXvIJn033Qj40c2NzSByVNOcSc/ZTsz9ELYfoz9LNywZROk0gTEaLC
S1pRYa9mV9ffx4/ZDW7L3pV1ZUsrQBgU8/ixBL6d7jMiSNko+MuLnyrW9nXivLI2
kw4jwNJBjDFVVPe+pUnX/gMbQGPNnobej0O16hyHO09n8rIEJp5qnKWkPuJL+Ga6
6dt+8Il8hD9bmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client