Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File: V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier: bSDl+6kYVXm4Cp9dsspMlTPuuafutr2/z7QZJCcEFIo=
Subject key identifier: D2:F9:89:78:6B:E0:9A:C3:3C:A4:8B:EB:5D:6B:2D:1F:EC:7A:BF:3A
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer: /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial: 019D2BF365069F232A3A7514F2260B86FE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number: 78
Signing time: Thu 26 Mar 2026 21:01:04 +0000
Manifest this update: Thu 26 Mar 2026 21:01:04 +0000
Manifest next update: Fri 27 Mar 2026 21:01:04 +0000
Files and hashes: 1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: c2cEoOdv8SNFpRECxq+0kFtJzMVgkiL8cigmEBvH+50=)
3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:65:06:9f:23:2a:3a:75:14:f2:26:0b:86:fe:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
Validity
Not Before: Mar 26 21:01:04 2026 GMT
Not After : Mar 27 21:01:04 2026 GMT
Subject: CN=d2f989786be09ac33ca48beb5d6b2d1fec7abf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:98:ac:3c:b2:48:23:63:be:d7:88:76:fd:
d4:cb:f6:f1:90:e4:b2:e8:5e:16:de:de:96:8c:2c:
c1:b3:69:24:40:0c:27:91:fe:12:a9:e7:29:1f:39:
22:48:47:56:10:a5:c3:db:b8:df:4a:80:ee:81:2d:
c8:39:10:30:3f:3c:a4:dd:f0:e8:8b:5f:42:61:07:
69:1c:2d:71:2a:5d:9f:ab:21:9d:5b:bb:46:9d:e7:
e9:ae:ef:04:75:f9:43:2f:99:24:fb:96:05:ba:a7:
e8:66:bd:90:5f:5b:07:43:ee:54:58:81:b2:98:dc:
40:ce:73:8a:5a:97:45:da:bb:e0:e1:bf:62:17:18:
85:d2:8a:26:68:9a:a4:be:93:42:83:8f:83:7e:d8:
8a:ce:1b:83:4f:90:8a:15:62:d6:6b:b3:fb:6f:e4:
8a:9c:ae:b8:ac:ac:21:f6:19:88:48:29:75:3f:14:
7d:a7:00:c0:7a:48:7a:bf:16:1f:82:23:8c:66:c7:
86:0a:87:f0:b0:30:c8:3a:14:57:b2:83:4c:70:e9:
1c:bd:30:21:36:74:fe:d0:21:ef:19:a8:f2:8f:c7:
32:8e:4b:b0:bb:9b:69:37:17:a9:4f:02:20:8d:d2:
da:de:5a:48:9e:7a:ea:52:c1:da:a3:96:07:48:d8:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:89:78:6B:E0:9A:C3:3C:A4:8B:EB:5D:6B:2D:1F:EC:7A:BF:3A
X509v3 Authority Key Identifier:
keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:71:34:24:71:e9:ce:91:e9:06:8e:b8:b5:fe:77:12:8a:d5:
67:78:59:ef:f4:a7:ef:b6:34:b9:71:03:ce:21:75:42:db:50:
96:32:cc:e7:c5:ad:56:ab:69:d4:b0:34:a3:d3:92:a4:be:e3:
ab:0e:de:ad:a5:8f:68:c6:3f:26:4e:a2:53:2b:7b:8e:9c:12:
2e:ae:c0:2a:97:54:76:fc:fa:ad:40:63:d2:9e:1e:bb:ec:e2:
9d:bf:35:ed:9b:67:4a:27:12:6d:f8:06:f3:14:a8:f4:2f:1a:
3d:cb:4f:48:0a:2d:e4:5a:3f:11:40:fa:5e:1d:4d:d6:57:d9:
d1:82:2b:da:9c:37:93:f0:c7:21:b7:38:a2:1f:66:9f:2b:39:
ce:76:e6:e7:b2:3e:ef:b4:3a:4c:55:55:c8:61:72:e5:45:04:
71:cf:dd:d0:ba:e8:19:4d:58:30:a1:3f:9f:09:7a:cd:0b:b5:
57:7c:d6:78:b4:29:df:b7:a8:eb:f0:01:57:ad:2e:09:64:63:
34:ea:fe:a2:46:5e:c8:3d:21:49:06:a5:e9:2e:b0:50:b0:eb:
3a:3c:5e:2c:04:f3:3f:f1:cf:b9:82:6f:c0:bb:01:de:8d:b4:
d3:74:a0:3a:70:3e:25:86:52:a0:fe:3d:28:46:a9:80:9b:4c:
28:31:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:13:25 2026 by rpki-client