Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: ima2KvVb0yEhCv8wBtmUywqkWmBmFf9R5k6MHJ1JN2g=
Subject key identifier: 5F:D0:D3:D0:79:94:EB:8F:DE:3B:CB:01:5C:FC:C5:B7:EF:32:18:87
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019F9391A685E0E06D9273CD4E35D584A684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 10:00:23 +0000
Manifest this update: Fri 24 Jul 2026 10:00:23 +0000
Manifest next update: Sat 25 Jul 2026 10:00:23 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: dGYGKy5K0K1Lzdat60HKOUIdIJT7uoykP/LD4DXm9bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a6:85:e0:e0:6d:92:73:cd:4e:35:d5:84:a6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jul 24 10:00:23 2026 GMT
Not After : Jul 25 10:00:23 2026 GMT
Subject: CN=5fd0d3d07994eb8fde3bcb015cfcc5b7ef321887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:be:8d:cc:cd:39:8a:e8:95:d1:7b:8e:1f:
94:ed:5a:30:45:3b:0c:e0:a7:75:c4:09:e6:06:5a:
55:61:1f:1e:94:fb:8b:32:22:05:ad:a3:d6:66:20:
b0:af:51:e1:02:6c:97:9e:85:72:14:1e:20:16:b6:
63:bc:b0:21:75:11:02:40:63:9c:a7:4e:eb:55:04:
2a:22:7e:eb:82:1c:55:3f:8e:9d:9f:ca:e7:33:0f:
cf:60:0f:50:3b:c9:b4:4c:9f:fc:e4:07:59:c8:c8:
8e:f1:49:df:13:5c:a5:ed:22:76:6d:a2:fb:c7:f8:
d7:40:f3:37:9b:59:80:9c:43:80:77:25:65:5e:05:
46:8a:04:b8:4a:3f:3a:18:22:1c:75:f0:5f:d4:ca:
a5:d6:55:cf:79:c9:3e:c6:44:0b:fe:a2:7d:c0:76:
1d:e3:cf:32:8e:78:11:4f:b9:01:97:cc:8c:65:c1:
9f:8d:3a:ff:86:04:01:46:6d:4d:b0:ae:3f:8f:a2:
a3:68:f0:53:e2:77:28:3d:c8:d4:5f:82:c2:e2:2a:
db:30:f7:ae:19:bb:ae:d8:32:6c:07:3b:96:91:9f:
50:3d:32:bc:67:83:26:c5:7c:84:43:6e:c2:80:a4:
f8:4a:43:0d:94:d3:09:fc:86:56:78:f4:f1:b1:4e:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:D3:D0:79:94:EB:8F:DE:3B:CB:01:5C:FC:C5:B7:EF:32:18:87
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d8:1b:07:76:df:ee:58:47:ce:26:81:c6:fa:79:46:d6:07:
58:ac:91:26:47:10:16:d7:f8:f7:48:d5:76:21:c0:9b:39:25:
b1:81:de:40:f7:ae:9c:a6:3e:5b:e9:ff:b5:84:f0:2a:66:e9:
02:e9:61:24:ef:18:c5:07:98:a6:05:a7:2c:09:87:fa:96:3e:
67:ba:d4:88:0b:10:3e:7c:13:a8:de:3a:45:ee:17:ea:36:e5:
e7:f5:f8:4d:5b:32:69:46:d4:42:c7:5a:3c:2a:d5:07:4c:d8:
fe:5e:bf:88:d5:8c:40:a5:aa:57:14:87:b5:2b:a5:85:de:32:
50:85:74:05:9f:06:f1:46:d9:0b:4d:6a:1a:d7:16:96:55:ea:
dc:fd:e9:6f:94:82:16:da:6e:9c:0e:4d:bd:cd:b6:ee:ba:a7:
a4:d4:17:a5:b0:b9:27:e7:12:51:1e:3a:da:f2:a8:6b:53:ee:
fb:43:f2:91:f6:73:24:e4:da:1b:1f:b6:35:16:e1:cd:21:33:
47:96:64:e0:b0:89:7a:10:c4:0f:96:65:6e:8a:8b:08:4c:ad:
74:f6:9c:53:89:fb:82:e8:bd:36:dd:70:02:a6:13:44:db:a2:
46:f0:1a:8a:7a:f9:24:e9:73:c4:c2:5b:0a:c8:d8:c7:a9:56:
8c:a5:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:30 2026 by rpki-client