Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: EOV8Rq+sPbJJRuC7hG241HMEnBCQTfA2K8JmzOtqgoE=
Subject key identifier: 49:34:E7:D7:42:67:5E:6E:CD:C5:9D:21:36:00:CB:93:D6:9B:74:8B
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 01A0D2374E6E67C6558C3413865E7D2AE97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 07:00:34 +0000
Manifest this update: Thu 24 Sep 2026 07:00:34 +0000
Manifest next update: Fri 25 Sep 2026 07:00:34 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: TiYnZfgATuzcQoi85ZgeY03aUv65ZMLoHHl5ieQFnHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:4e:6e:67:c6:55:8c:34:13:86:5e:7d:2a:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Sep 24 07:00:34 2026 GMT
Not After : Sep 25 07:00:34 2026 GMT
Subject: CN=4934e7d742675e6ecdc59d213600cb93d69b748b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:f9:e1:d8:f1:33:25:2d:47:ec:8f:14:97:
bc:c9:67:57:b7:d5:2f:99:50:2d:eb:f0:8e:39:c0:
ea:36:50:d4:e9:0b:d5:76:60:06:d2:ac:28:6d:a0:
15:a9:2b:45:d0:57:3b:a3:29:2c:5d:07:fc:bb:e2:
6c:f3:4f:80:04:0b:2e:36:d3:c3:f2:97:2a:08:6e:
87:27:eb:c3:fa:21:29:c9:3c:9c:a3:cd:36:28:f1:
e1:2a:00:d7:8c:c5:73:e1:7b:5f:4a:c3:c0:1e:09:
a0:7a:af:10:f2:f9:b1:33:97:f9:25:05:89:9d:6c:
02:b1:f4:63:af:d7:35:23:79:1b:72:5d:c7:08:01:
29:a9:5f:2d:2a:ef:51:fd:2a:81:49:17:61:36:19:
44:0d:0b:9c:38:26:d6:f8:f7:82:35:34:f2:91:e8:
ec:8a:21:29:be:57:32:67:a5:c1:1b:6a:ca:c9:a9:
4b:6f:ae:40:f4:52:53:25:df:bb:c0:97:28:84:70:
99:a1:b7:eb:2f:53:13:1f:b5:8e:23:6f:4c:fb:11:
b0:04:20:ed:c9:1c:33:9d:9a:a4:53:c0:31:2f:e0:
76:35:52:37:27:8b:f5:e5:39:7b:1b:32:3b:ba:4d:
cb:e9:72:17:c2:af:69:66:aa:5a:32:82:13:66:62:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:E7:D7:42:67:5E:6E:CD:C5:9D:21:36:00:CB:93:D6:9B:74:8B
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:bb:d8:5c:ae:b7:a4:b4:31:ba:31:d9:66:67:e1:ee:8b:
e7:8b:7d:34:a5:78:de:a3:b1:11:bb:e7:3c:57:13:a0:f2:9e:
98:85:76:93:46:41:59:7d:20:4b:12:da:47:47:45:d6:06:dc:
00:92:d9:e4:6c:4f:e9:c0:36:91:bf:f0:6d:d4:c7:13:63:f1:
ed:c1:1d:29:06:33:7b:c3:e5:d9:fa:b8:bd:53:51:b6:f1:43:
7f:ab:06:57:56:12:16:9f:57:43:65:e0:b9:1c:13:fc:e2:1b:
85:f9:1e:c4:9b:c1:32:91:b4:4b:e7:b6:8b:32:1c:4f:3d:b6:
57:1e:6e:c4:fb:4f:74:29:12:2e:85:de:a5:52:96:03:8a:36:
61:03:60:16:64:d2:68:28:00:86:76:31:e9:c9:a7:4e:83:b3:
fb:23:ba:27:e1:7a:ef:cf:fc:55:c4:74:87:03:db:02:ff:4a:
b8:46:92:4c:60:3c:7d:60:50:92:7e:04:08:2a:40:68:3d:e4:
bc:4c:ee:15:14:14:59:76:e9:28:b2:fa:f2:4b:8f:51:9b:ff:
a8:aa:c8:3c:47:f2:44:63:a0:4e:cf:64:a0:d0:0a:d3:0f:7e:
13:44:f5:f0:58:23:e4:7d:49:37:c3:d9:12:b6:f3:7a:0a:ed:
2d:ed:35:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN05uZ8ZVjDQThl59Kul8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OGQ4NTRiZDJiZWUyNDJhODJmYjgzOTIyZDE0OWJjY2Yx
OWVkMDIwHhcNMjYwOTI0MDcwMDM0WhcNMjYwOTI1MDcwMDM0WjAzMTEwLwYDVQQD
Eyg0OTM0ZTdkNzQyNjc1ZTZlY2RjNTlkMjEzNjAwY2I5M2Q2OWI3NDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdL54djxMyUtR+yPFJe8yWdXt9Uv
mVAt6/COOcDqNlDU6QvVdmAG0qwobaAVqStF0Fc7oyksXQf8u+Js80+ABAsuNtPD
8pcqCG6HJ+vD+iEpyTyco802KPHhKgDXjMVz4XtfSsPAHgmgeq8Q8vmxM5f5JQWJ
nWwCsfRjr9c1I3kbcl3HCAEpqV8tKu9R/SqBSRdhNhlEDQucOCbW+PeCNTTykejs
iiEpvlcyZ6XBG2rKyalLb65A9FJTJd+7wJcohHCZobfrL1MTH7WOI29M+xGwBCDt
yRwznZqkU8AxL+B2NVI3J4v15Tl7GzI7uk3L6XIXwq9pZqpaMoITZmJatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk059dCZ15uzcWdITYAy5PWm3SLMB8GA1UdIwQY
MBaAFFeNhUvSvuJCqC+4OSLRSbzPGe0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEt
MWFiNWY1Mzk5ZDNhLzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xMjhiYzYtZjZmZi00YzkwLThiNWEtMWFiNWY1Mzk5ZDNh
LzEvVjQyRlM5Sy00a0tvTDdnNUl0Rkp2TThaN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBu72Fyu
t6S0Mbox2WZn4e6L54t9NKV43qOxEbvnPFcToPKemIV2k0ZBWX0gSxLaR0dF1gbc
AJLZ5GxP6cA2kb/wbdTHE2Px7cEdKQYze8Pl2fq4vVNRtvFDf6sGV1YSFp9XQ2Xg
uRwT/OIbhfkexJvBMpG0S+e2izIcTz22Vx5uxPtPdCkSLoXepVKWA4o2YQNgFmTS
aCgAhnYx6cmnToOz+yO6J+F678/8VcR0hwPbAv9KuEaSTGA8fWBQkn4ECCpAaD3k
vEzuFRQUWXbpKLL68kuPUZv/qKrIPEfyRGOgTs9koNAK0w9+E0T18Fgj5H1JN8PZ
ErbzegrtLe01EA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:29:44 2026 by rpki-client