Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File: V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier: I1OuHXh62+7lnzaElJS1VWL587TYc2C74B024UjxeV4=
Subject key identifier: CD:7C:00:DE:3C:E8:89:CA:71:EE:03:DC:0B:94:D9:3B:C0:D5:13:3E
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer: /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial: 01A1352367BD21FB9671F4E60799BF02ED45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number: 028F
Signing time: Tue 13 Oct 2026 12:01:14 +0000
Manifest this update: Tue 13 Oct 2026 12:01:14 +0000
Manifest next update: Wed 14 Oct 2026 12:01:14 +0000
Files and hashes: 1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: gt0XIoYEHkW+hcGh0qU6kj4S6FsoX3oI7Qa0zRP25jM=)
3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:67:bd:21:fb:96:71:f4:e6:07:99:bf:02:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
Validity
Not Before: Oct 13 12:01:14 2026 GMT
Not After : Oct 14 12:01:14 2026 GMT
Subject: CN=cd7c00de3ce889ca71ee03dc0b94d93bc0d5133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:3b:b6:ee:37:8f:79:d6:fa:ff:18:1a:ca:
68:1e:c3:6b:72:23:e0:a4:f3:16:4d:b2:7e:9f:6c:
c9:e5:2a:88:cc:b7:2f:3b:db:af:47:18:37:e7:9f:
71:93:f8:35:f0:50:29:4e:56:d1:be:5c:38:11:e4:
e6:99:ea:6c:24:d3:0a:35:27:92:57:5e:2a:09:88:
74:28:d9:3e:b7:ab:57:56:46:5f:23:ba:5d:cf:2f:
0f:f1:06:b7:e7:70:f8:ee:43:cd:0d:3c:d8:23:69:
b2:32:95:06:7b:3a:c7:14:64:dc:b8:67:be:b5:6b:
50:c0:d9:6c:2a:37:89:f7:03:ba:37:69:c6:1c:32:
5f:0d:b7:82:51:12:4f:bc:7b:7a:ed:dd:12:8d:96:
5a:7b:26:fc:91:e5:ef:f4:37:c5:50:8f:90:3e:ef:
34:93:9e:9a:9b:55:4a:59:62:0d:6a:e0:a7:64:f0:
e8:d5:ed:d0:da:a9:91:33:ee:95:70:b6:79:23:2d:
fd:0d:99:84:78:03:a3:0a:c1:70:55:74:b2:75:0a:
70:20:4a:17:06:d1:d9:29:3b:58:60:ce:be:91:e3:
4c:a1:0e:c2:bc:d7:33:fe:10:b2:52:03:ba:1d:42:
b4:d6:88:b1:b1:f5:7d:f0:07:ad:c4:3e:ec:29:40:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:00:DE:3C:E8:89:CA:71:EE:03:DC:0B:94:D9:3B:C0:D5:13:3E
X509v3 Authority Key Identifier:
keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d3:5a:de:2c:34:a4:e7:99:ca:9a:7f:f8:e0:10:6c:e6:06:
7e:04:93:80:d1:60:cd:8a:96:f7:fd:be:e7:5c:ed:df:92:2d:
34:94:35:13:28:26:c4:31:cf:bc:a0:a1:28:91:e3:28:d6:5a:
40:a4:50:14:c8:a8:43:68:34:94:75:bc:9d:02:fb:e0:db:8e:
7b:0e:5b:96:41:1b:ba:f3:1e:4d:e5:3a:10:91:be:86:78:09:
17:c8:3a:07:3f:7f:e3:12:31:a0:26:de:d3:d1:90:3b:65:5f:
74:24:cd:64:52:aa:79:00:be:26:3b:92:fb:f4:b2:df:89:a0:
9c:28:28:7a:c0:1c:14:ca:c0:ab:01:eb:e5:64:e8:56:91:52:
31:1c:b7:ef:23:e3:0b:64:10:63:06:d2:b5:c3:d6:ce:ae:fe:
9b:97:68:47:68:34:15:05:4c:82:7e:2e:92:3f:b3:39:50:ad:
e4:18:8c:50:38:3f:f7:fa:ca:3a:36:a3:52:f1:61:c5:ea:f4:
d4:3b:06:c1:af:6e:ef:4b:5c:81:4c:c1:a1:8e:23:26:52:48:
49:b2:93:b1:b2:76:25:f3:68:4b:44:e1:f8:f2:fd:5c:86:8a:
db:df:e5:ba:25:9f:84:cf:e6:ac:08:ab:43:04:8a:1a:a9:a0:
09:83:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:46:00 2026 by rpki-client