Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File: V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier: A8fHEprkJ2NZMpMH1tSEABFdJhtKCrzprbIVW/2SAsA=
Subject key identifier: 68:4D:72:BB:2D:48:96:FC:DB:6B:C6:41:EC:66:0A:F8:A2:EF:3F:F1
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 019D26CD2CA6F9251B2B15D7B8435E57BD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number: 09EE
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: BxDQYAMULDIcgzCGoRbOdQoc-sM.roa (hash: 3NcdmgeMlXSMuQ/j+h+4gy0qcuBqA1IJLcvSxfX1/aU=)
2: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: jXOnvhV3Sx9Qv+osLTGl6+TWKjKqGACtTZ1CPu82DH0=)
3: zvWrg-epv6Kuwwbr_YnppFR5eP4.roa (hash: CXU1oUM5pH2/lckg4eVPlPBRQqsoIp6BUfj73FNZ/wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2c:a6:f9:25:1b:2b:15:d7:b8:43:5e:57:bd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=684d72bb2d4896fcdb6bc641ec660af8a2ef3ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:42:1a:13:93:10:6d:0a:87:78:58:84:c3:
87:53:ec:db:40:e7:a1:02:2f:30:ec:52:da:de:b0:
27:f0:13:b0:1d:5f:51:ea:d0:d3:19:40:5d:44:17:
16:50:86:0f:e8:df:a7:b9:96:85:04:d7:72:88:c1:
3e:f3:cc:20:15:68:bc:d5:12:a4:82:ea:c3:f6:00:
c3:34:71:80:f4:3d:66:d2:be:c7:67:8c:97:52:70:
7d:db:65:e3:27:08:31:37:16:67:a1:a3:3c:a6:9e:
66:5a:3b:99:1b:83:7d:e5:6c:b6:dc:7d:06:99:93:
a6:a2:6c:4e:2f:0e:4b:f6:d5:c8:f8:2b:5a:e5:42:
30:0b:24:b7:33:9d:e6:36:0a:46:fc:39:13:7c:17:
03:00:c6:c6:af:ad:2d:d0:56:d9:bc:13:cc:90:21:
61:85:dd:cd:83:cc:00:6f:ed:5f:20:89:ff:92:c4:
08:eb:a0:c8:58:5a:8e:3d:91:88:8a:bf:e3:2a:0d:
e8:c9:af:f7:45:e6:61:28:a3:e6:10:ae:8f:6e:f3:
9c:79:b0:0e:78:ac:32:62:91:dc:69:8a:b8:4a:b1:
0f:bc:c0:ae:12:7e:a0:c0:46:b8:06:26:39:6f:26:
77:a3:f1:92:54:3b:4c:0b:6c:10:0a:55:5c:53:9b:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:72:BB:2D:48:96:FC:DB:6B:C6:41:EC:66:0A:F8:A2:EF:3F:F1
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:45:64:3b:4e:00:1f:c0:41:e0:d2:65:23:d9:84:cf:9d:05:
8e:7a:a2:c3:b9:12:42:3c:7a:a2:07:db:21:fe:a0:53:7e:5a:
38:39:77:94:ff:58:b1:dd:f5:97:79:c0:c0:21:92:8e:87:e0:
d2:ca:8f:29:2b:71:24:40:21:3a:53:7c:63:78:c7:bc:b0:ec:
29:a9:63:3d:01:8a:6a:93:96:ca:9d:83:9f:0a:e5:24:0e:00:
00:f1:87:0e:06:34:25:5a:6d:88:c3:b2:30:1c:26:a4:2b:f6:
a0:f1:d2:49:43:01:86:d9:0a:b5:82:8a:48:1f:a3:3f:c0:48:
9d:d9:d2:8f:10:1d:8a:19:e9:a7:d7:3a:5c:86:b3:98:8f:46:
74:02:6f:48:e5:65:9b:95:c6:65:4b:c7:22:e7:76:44:f2:5d:
ca:27:bb:c8:73:4a:09:8b:b1:83:39:f9:00:cd:a7:be:2d:b1:
3a:25:dc:6c:b3:0b:ea:bf:52:38:dc:f0:15:2b:58:7f:3e:af:
11:a4:21:38:9c:b4:b9:ba:95:79:ba:59:31:f6:fc:ec:3a:d8:
a1:8b:ce:cd:e1:cf:b1:3d:a4:56:cd:f9:3e:42:20:e2:fe:1d:
a8:2e:ef:b6:92:b8:e9:06:af:36:f3:66:09:9f:39:d4:58:cb:
b9:d7:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:43 2026 by rpki-client