
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: Y6nOwmj6bcenvde01YEhEp+YBPIAnU0Ewb3k6S4OrHI=
Subject key identifier: 5A:E4:86:A4:B0:35:7F:3D:9C:F6:BC:DA:23:DF:27:75:A7:8D:A2:B7
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019D27A8D104F3B88E93580791F21382DB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: HicqY3wYmj0tBBzRkwRzuQ7d+doEw9XuOIYqEEoc2H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d1:04:f3:b8:8e:93:58:07:91:f2:13:82:db:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=5ae486a4b0357f3d9cf6bcda23df2775a78da2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:47:60:ac:a7:38:ec:9a:35:23:1d:72:db:
bc:55:58:b9:39:40:a3:b9:c8:00:df:ec:75:7f:ad:
1d:14:c6:4a:d5:49:e3:59:ba:47:04:5f:1b:d3:a6:
28:84:83:67:ea:ec:dc:13:6a:db:6a:d5:06:11:51:
39:49:52:5a:a6:65:39:20:a0:68:df:5d:29:66:5f:
9b:27:18:b5:e4:1e:bc:e2:d9:6d:64:cb:f3:5b:f2:
07:0d:db:b8:f4:60:9b:5a:f4:ea:f4:53:37:ef:60:
30:2f:0a:d1:30:90:ad:fa:07:89:cc:8d:71:c9:e5:
7f:9d:9a:a5:81:72:81:3e:cd:4a:1c:f9:70:04:46:
b7:16:a4:8a:6e:75:3a:7a:c8:e0:e7:a6:80:53:2a:
56:08:ef:df:2e:d5:8d:b5:25:33:5b:79:1a:1b:38:
4b:78:c8:7f:3c:ea:ea:79:94:02:23:99:1a:5f:72:
b4:f8:cd:44:4f:f5:28:09:38:e8:57:79:c1:89:ea:
be:76:c9:a9:45:b7:f4:0c:99:8c:1d:95:22:e7:0d:
33:a3:33:a9:f3:96:dc:9d:70:c5:70:93:9e:93:a9:
50:6e:10:8c:85:57:d7:f6:56:10:59:1e:06:6c:c2:
40:7c:34:2b:b7:1c:b2:a9:0d:55:0e:02:17:de:51:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:86:A4:B0:35:7F:3D:9C:F6:BC:DA:23:DF:27:75:A7:8D:A2:B7
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:66:5d:60:16:14:55:d5:69:ee:cf:db:65:cc:bf:12:2d:d6:
7e:6f:18:e3:5d:43:d1:1f:0a:0c:dd:1b:c7:fe:bf:90:ee:2e:
74:93:c5:8f:b2:57:97:06:f7:e3:4e:cd:c5:d1:e7:72:a0:9d:
d0:a7:9d:42:85:4d:dc:d4:fa:3e:a6:45:a6:d0:a0:56:ab:2d:
4f:d3:c3:0c:d7:58:a3:74:e8:91:2b:d3:41:21:dc:b5:d4:b4:
cf:33:2e:70:b3:fd:bc:a0:db:40:57:2f:dd:61:5a:23:46:81:
05:1a:36:cf:b5:ed:ea:c5:b3:5f:de:f8:43:c7:3c:4e:23:99:
92:a9:2e:67:5d:4a:2c:82:c3:f6:b3:94:82:4c:ba:c5:db:31:
6e:52:d3:5d:f0:f1:90:17:89:ad:d9:68:bc:28:77:f5:75:41:
8d:48:35:d4:1e:c9:c9:61:96:12:23:df:ae:55:5e:13:c6:f6:
69:83:dc:eb:bd:3f:55:64:73:20:cf:09:52:41:2b:05:28:63:
d0:c5:f6:23:a7:0a:75:3c:e7:19:0c:f9:b4:d2:ee:e6:e1:d3:
c2:dc:0a:84:fe:df:59:da:11:a1:0e:41:39:78:44:6d:3a:8f:
06:f7:2d:1f:d1:e2:d5:ba:b3:46:32:9c:0e:d8:5f:b2:9e:1d:
2e:95:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:31 2026 by rpki-client