Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: XVjZk8mYh7cAtQ6/jMTsT3YLi5ZdOktqPBcrizA54Io=
Subject key identifier: E2:52:D3:E6:45:CD:0E:74:60:72:D1:A8:56:BB:58:0C:1A:19:67:81
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 019D29CE5C4710FFD1D4DCFDE6D67DDB4E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 11:01:22 +0000
Manifest this update: Thu 26 Mar 2026 11:01:22 +0000
Manifest next update: Fri 27 Mar 2026 11:01:22 +0000
Files and hashes: 1: ChXWstjRWA_OODNRO9MDbRfgOQU.asa (hash: +k73MShgqLwwtEUsqO+3IrwBNnY2nL4l+Ep35pG4oXI=)
2: Qm8uhcNnRTaqoYGKrdrNLc_aZD8.roa (hash: hvZBXvz5QZfJbWaG3RcO8weSJZHMPwQu8jySYopR30I=)
3: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: 6MXZvtK5+X14VVgtOhWkt3/1cztzslclf4fqR1QPxYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5c:47:10:ff:d1:d4:dc:fd:e6:d6:7d:db:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Mar 26 11:01:22 2026 GMT
Not After : Mar 27 11:01:22 2026 GMT
Subject: CN=e252d3e645cd0e746072d1a856bb580c1a196781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:69:8f:6a:5f:a9:9d:29:d9:5c:1e:43:51:
79:40:2f:f9:b9:fe:99:bc:76:28:c1:36:52:e9:c5:
5f:3d:75:75:5e:0b:31:15:9f:46:21:27:d0:1f:c8:
cd:e2:93:d2:10:ff:d7:c5:0f:60:83:5a:df:11:da:
5a:dd:bd:4e:6c:a5:b7:ce:cd:39:5c:fb:e9:28:fb:
32:4e:94:8e:33:89:9c:a0:ab:f2:d8:8d:59:18:da:
7f:3e:33:92:79:4b:73:e3:e6:f7:d6:e9:0b:69:90:
50:c1:2b:0c:af:73:7a:43:b6:f5:0f:5e:3a:36:5a:
0a:ad:f4:76:05:d2:80:7d:e5:ec:71:17:a6:35:b1:
40:68:b6:4a:cb:54:e8:a1:ca:31:cc:c8:e4:38:ec:
70:a8:78:bd:3f:9c:8e:f9:b1:c5:c8:e1:2f:44:7b:
cc:e3:18:b8:d9:d7:5d:14:a7:51:3f:3d:70:80:d5:
03:9c:c4:9a:45:63:65:6b:1d:a3:82:81:a0:0e:03:
7f:43:62:d3:28:6a:50:7c:60:37:eb:12:09:82:23:
5f:52:3c:dc:07:e8:68:b2:70:46:b5:e8:17:97:3d:
0c:ff:61:d3:f5:e1:b5:77:1a:4f:8c:d8:c0:94:a1:
68:c3:58:f3:d8:5b:cd:16:c0:3b:1a:06:12:aa:e1:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:D3:E6:45:CD:0E:74:60:72:D1:A8:56:BB:58:0C:1A:19:67:81
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:a5:29:96:1e:40:ee:a8:df:c5:cb:e3:40:de:13:2b:b6:
85:fa:3a:b1:70:d3:44:ba:67:46:2b:05:e5:92:4c:11:17:33:
70:49:37:0f:1e:86:1d:4c:75:fa:62:80:fc:dd:3e:3f:f4:c9:
78:f9:b7:de:78:41:c3:dc:92:35:67:81:e0:fa:c3:64:23:a9:
c8:6d:f7:87:1f:d4:21:7f:0c:67:27:c2:ed:b9:eb:a7:88:3d:
73:3e:f5:1c:5c:02:3a:98:c2:77:86:f6:15:28:d7:31:4b:f1:
e7:58:e8:a3:51:ef:f7:db:66:26:a5:a5:76:d3:b7:c6:05:20:
5f:17:3c:8b:54:e6:f4:c6:31:64:43:21:14:ce:d8:99:b4:de:
e1:4c:b0:4f:9f:7a:ef:27:ef:5a:18:09:3c:9f:a5:d3:b2:87:
46:d2:db:e0:90:9e:6e:7e:e4:fb:e4:74:87:85:d6:19:dc:c9:
cc:c6:5f:49:d9:6f:88:34:3d:68:7e:a0:f4:25:07:06:74:8a:
30:95:17:1a:c0:96:ed:0a:8a:25:4b:7a:4c:cf:e4:2c:d0:25:
69:a0:c3:34:89:2e:8f:61:2d:96:bc:f0:36:a4:a1:3f:32:f9:
5e:e0:eb:1a:6f:12:b5:df:d1:f6:c0:5f:f2:52:63:11:ba:27:
0d:bf:0d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzlxHEP/R1Nz95tZ9206fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0
YjQyZjEwHhcNMjYwMzI2MTEwMTIyWhcNMjYwMzI3MTEwMTIyWjAzMTEwLwYDVQQD
EyhlMjUyZDNlNjQ1Y2QwZTc0NjA3MmQxYTg1NmJiNTgwYzFhMTk2NzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYRpj2pfqZ0p2VweQ1F5QC/5uf6Z
vHYowTZS6cVfPXV1XgsxFZ9GISfQH8jN4pPSEP/XxQ9gg1rfEdpa3b1ObKW3zs05
XPvpKPsyTpSOM4mcoKvy2I1ZGNp/PjOSeUtz4+b31ukLaZBQwSsMr3N6Q7b1D146
NloKrfR2BdKAfeXscRemNbFAaLZKy1ToocoxzMjkOOxwqHi9P5yO+bHFyOEvRHvM
4xi42dddFKdRPz1wgNUDnMSaRWNlax2jgoGgDgN/Q2LTKGpQfGA36xIJgiNfUjzc
B+hosnBGtegXlz0M/2HT9eG1dxpPjNjAlKFow1jz2FvNFsA7GgYSquF0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJS0+ZFzQ50YHLRqFa7WAwaGWeBMB8GA1UdIwQY
MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt
NTcxYWYwNjZjZjFlLzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl
LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcalKZYe
QO6o38XL40DeEyu2hfo6sXDTRLpnRisF5ZJMERczcEk3Dx6GHUx1+mKA/N0+P/TJ
ePm33nhBw9ySNWeB4PrDZCOpyG33hx/UIX8MZyfC7bnrp4g9cz71HFwCOpjCd4b2
FSjXMUvx51joo1Hv99tmJqWldtO3xgUgXxc8i1Tm9MYxZEMhFM7YmbTe4UywT596
7yfvWhgJPJ+l07KHRtLb4JCebn7k++R0h4XWGdzJzMZfSdlviDQ9aH6g9CUHBnSK
MJUXGsCW7QqKJUt6TM/kLNAlaaDDNIkuj2EtlrzwNqShPzL5XuDrGm8Std/R9sBf
8lJjEbonDb8N8A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:16 2026 by rpki-client