Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: PJJq6b37BJx4D3xL1Wwoc8gfYbO27qtAc3Ueufd1bZI=
Subject key identifier: 08:4A:D9:B4:82:9F:84:F1:23:EA:25:D0:FC:92:0B:A2:F2:C0:AF:05
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 019D284DC25C66D21091CE62E1B899C1B857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 130C
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: LJC-_jw348E9MJkSCHhTzN2qooo.roa (hash: VigKdlIRvlEEvPkwucOqBByNbZoFlk6R1HJNSe1A/8Q=)
2: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: s4JuDEYL078KaC35i2llCoLJstOslk6ipdwW/oYzfUc=)
3: blgxhmEw4o96aXjodyt2NGn4utQ.roa (hash: vqwDcQrAKO9xP6DPN2sBqQxoqvxVDwwR5s/VxKcPEw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c2:5c:66:d2:10:91:ce:62:e1:b8:99:c1:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=084ad9b4829f84f123ea25d0fc920ba2f2c0af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b5:a0:bf:c2:be:46:0c:4d:b9:d5:0a:22:
4f:67:dc:b2:a3:84:92:a3:8c:d3:c9:38:81:95:35:
65:f0:d9:08:6c:ca:d8:51:a3:a7:26:60:e5:42:e2:
de:cd:5a:3f:2b:7b:45:d5:0c:68:1a:7c:35:0b:63:
f5:ef:09:b3:d2:87:c4:97:1d:09:8e:2e:f3:24:ca:
b9:7e:3c:c6:83:eb:5b:a2:98:4d:5a:95:89:5a:de:
e7:eb:fd:9e:e9:69:bc:e3:72:40:0c:a1:05:44:78:
43:ff:c6:6a:c2:27:46:88:f2:98:f9:33:26:c8:0b:
45:68:4b:d9:94:f1:b6:48:ac:78:3e:f0:50:70:b7:
57:0f:b7:80:bb:29:21:60:60:c9:4b:66:a0:60:8b:
07:85:10:b7:a1:ff:12:5f:ba:c5:d9:05:8d:23:33:
bc:64:2e:35:0d:72:74:b0:0f:42:db:1c:8f:e7:e9:
4f:ea:c9:b0:c2:de:68:d2:db:cd:c1:ed:46:73:a5:
43:eb:a5:69:01:4d:aa:1b:b7:02:51:a2:75:73:44:
d7:cd:5f:93:41:36:ff:2e:d0:52:ee:66:63:7d:b2:
bd:c9:9a:48:52:79:3e:25:a8:48:4b:28:fb:f9:89:
19:65:e1:b4:7d:50:19:24:dc:0d:27:b7:f5:74:76:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:D9:B4:82:9F:84:F1:23:EA:25:D0:FC:92:0B:A2:F2:C0:AF:05
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:53:46:41:55:21:04:87:4a:01:e6:f2:3d:80:ab:20:4e:23:
21:24:4e:4c:dd:0d:b1:d9:ed:c8:21:c9:38:59:db:8f:22:48:
06:54:ae:c9:2b:36:70:bd:14:55:cc:a3:71:5f:5e:0a:5d:6b:
57:cc:dd:c3:7f:94:b2:e2:bb:01:81:8f:d7:16:b1:1b:fc:51:
36:c8:cf:b8:91:a7:66:8b:d5:62:7b:58:c4:a6:b8:66:56:47:
5f:d5:79:d8:e2:62:54:63:aa:81:72:8c:3a:90:16:de:52:55:
2b:89:42:b8:4d:ef:e3:d6:ce:19:44:57:48:c8:50:cc:ba:e3:
05:fa:ac:e8:77:dc:ad:d8:61:de:e2:96:16:30:a4:c5:95:79:
b5:da:c5:a3:5a:bf:1c:0d:af:48:7a:6b:13:b9:3b:60:36:a7:
50:77:bf:0b:b7:95:5d:e4:7d:be:ef:05:5f:15:ec:b0:9e:c2:
64:29:9f:2e:e8:2d:e0:70:d5:34:1d:5c:e6:a6:c5:bd:19:8c:
b9:48:ca:0a:79:9a:b0:60:99:6e:79:1a:88:58:b6:60:fb:2f:
66:08:0b:0f:b8:f6:fa:f2:43:05:f1:e4:c9:7a:2d:23:30:72:
e5:18:ac:d5:4e:22:90:d3:dd:68:bb:8a:9e:4c:ce:ce:d6:e7:
74:d2:fa:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTcJcZtIQkc5i4biZwbhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0
NjViOTkwHhcNMjYwMzI2MDQwMTE3WhcNMjYwMzI3MDQwMTE3WjAzMTEwLwYDVQQD
EygwODRhZDliNDgyOWY4NGYxMjNlYTI1ZDBmYzkyMGJhMmYyYzBhZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2y1oL/CvkYMTbnVCiJPZ9yyo4SS
o4zTyTiBlTVl8NkIbMrYUaOnJmDlQuLezVo/K3tF1QxoGnw1C2P17wmz0ofElx0J
ji7zJMq5fjzGg+tbophNWpWJWt7n6/2e6Wm843JADKEFRHhD/8ZqwidGiPKY+TMm
yAtFaEvZlPG2SKx4PvBQcLdXD7eAuykhYGDJS2agYIsHhRC3of8SX7rF2QWNIzO8
ZC41DXJ0sA9C2xyP5+lP6smwwt5o0tvNwe1Gc6VD66VpAU2qG7cCUaJ1c0TXzV+T
QTb/LtBS7mZjfbK9yZpIUnk+JahISyj7+YkZZeG0fVAZJNwNJ7f1dHYGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhK2bSCn4TxI+ol0PySC6LywK8FMB8GA1UdIwQY
MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt
YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm
LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVNGQVUh
BIdKAebyPYCrIE4jISROTN0NsdntyCHJOFnbjyJIBlSuySs2cL0UVcyjcV9eCl1r
V8zdw3+UsuK7AYGP1xaxG/xRNsjPuJGnZovVYntYxKa4ZlZHX9V52OJiVGOqgXKM
OpAW3lJVK4lCuE3v49bOGURXSMhQzLrjBfqs6Hfcrdhh3uKWFjCkxZV5tdrFo1q/
HA2vSHprE7k7YDanUHe/C7eVXeR9vu8FXxXssJ7CZCmfLugt4HDVNB1c5qbFvRmM
uUjKCnmasGCZbnkaiFi2YPsvZggLD7j2+vJDBfHkyXotIzBy5Ris1U4ikNPdaLuK
nkzOztbndNL6Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:18 2026 by rpki-client