Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: ZhGb+RT/UV396EuEqwxiwAOa+jCzK9amKr364LBFifw=
Subject key identifier: A5:DE:25:8E:59:59:F5:63:37:72:08:7D:EC:5B:58:07:12:5A:1B:9B
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 01A1035AF31DDAB2C472853A5C227379CEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 1A90
Signing time: Sat 03 Oct 2026 20:00:54 +0000
Manifest this update: Sat 03 Oct 2026 20:00:54 +0000
Manifest next update: Sun 04 Oct 2026 20:00:54 +0000
Files and hashes: 1: Qm8uhcNnRTaqoYGKrdrNLc_aZD8.roa (hash: hvZBXvz5QZfJbWaG3RcO8weSJZHMPwQu8jySYopR30I=)
2: RataKp-3hJPq9aEAGgDmde3zb30.asa (hash: JW64/lKsxtyL7zoTPdssRrCZ9GkLw7W77oAu2rYglVk=)
3: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: FWzwWbSC5lhvJRCs7tQEH7QmMddpJHl6adqUTf9xuzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5a:f3:1d:da:b2:c4:72:85:3a:5c:22:73:79:ce:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Oct 3 20:00:54 2026 GMT
Not After : Oct 4 20:00:54 2026 GMT
Subject: CN=a5de258e5959f5633772087dec5b5807125a1b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:f2:44:5d:49:4c:32:07:35:56:b2:11:d2:
c9:4a:bb:d7:1b:e1:00:92:83:93:a8:98:45:17:83:
13:b0:79:37:d5:cc:69:88:84:a8:12:bb:54:be:63:
11:a7:d7:ad:11:fe:ee:df:fd:57:bd:7f:36:48:bb:
84:62:4f:92:0f:d4:ed:32:9e:eb:d8:bb:97:4e:20:
86:08:c3:8d:b9:89:b3:75:a6:a6:82:2d:1d:ad:b9:
77:eb:88:fd:1d:c2:6f:0f:73:fc:5b:b7:21:b6:8f:
df:5c:7a:c2:a7:54:0a:aa:c8:28:8d:6b:eb:98:d4:
4a:88:c7:e5:24:21:03:17:b7:8a:b7:b2:0a:32:e1:
b2:d2:e0:1d:2c:ab:40:03:22:6b:b5:88:1a:b7:2e:
aa:0e:84:b5:0f:6e:a1:44:77:6b:1e:34:2e:ed:36:
d0:b0:a6:65:e4:bb:18:db:41:19:4e:23:2c:f6:f2:
40:70:c7:9f:39:56:18:a3:ca:21:b5:99:d5:c7:20:
23:60:df:fd:90:d2:23:a5:ad:d3:53:87:6f:4e:06:
34:f2:07:c4:3c:66:68:e0:29:b5:d3:56:b7:07:ac:
e5:27:f5:41:20:a3:14:dd:90:9f:6e:f9:06:15:40:
e9:ec:f1:6e:1c:f3:2f:95:dd:93:48:e7:83:da:c5:
f4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:25:8E:59:59:F5:63:37:72:08:7D:EC:5B:58:07:12:5A:1B:9B
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:92:0a:20:f6:b9:e6:60:6a:2e:9a:fd:b0:3d:51:62:bc:67:
2e:ea:54:87:cb:d1:63:52:a0:6b:ce:2e:20:38:a4:95:b5:39:
a2:a7:ec:10:f4:27:90:03:e3:dd:35:57:ae:d7:30:69:2d:02:
26:79:a7:32:51:0c:f1:d1:e4:72:9e:53:32:81:59:e2:b2:f5:
2e:0c:3d:c3:89:04:a3:7b:35:db:b1:f5:be:d3:2d:2d:8e:a0:
83:61:92:5d:7e:e6:1a:e9:d5:e7:f2:49:e3:32:e4:80:27:84:
22:67:80:96:0e:cf:6f:1c:aa:38:dc:a3:bb:a8:44:09:24:45:
b0:63:0f:63:f1:9f:46:9b:91:be:2a:7e:af:7c:75:1e:86:60:
fa:23:f1:01:3f:a7:9c:e9:b9:ff:68:d8:5e:c1:da:b2:a3:24:
90:c5:e8:6f:4f:07:72:8f:5c:db:3c:92:82:a2:cc:35:6f:6c:
f8:1f:4a:75:b0:32:11:56:74:be:1e:ee:b4:38:e1:31:c2:fc:
da:f7:2e:04:53:e9:3f:87:d7:17:fc:98:03:98:ac:13:68:3c:
9a:ed:23:0f:58:54:14:67:35:8e:a1:af:c2:ca:2b:72:71:bd:
cb:05:0e:b2:ad:af:89:95:0f:65:e0:1d:6b:ee:a1:02:fd:da:
61:2b:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:35:16 2026 by rpki-client