Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: lVCXPpfabg+gkrgNS5Sa/RmAtX9+g5gKtgrgoB8/gxg=
Subject key identifier: 5B:71:24:77:4C:00:F4:DA:CD:87:17:88:4E:A1:AF:7D:AD:DF:13:63
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 019D2884BA940F6900494008C5B8C70E15BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 10E2
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 4GLNhXruLvMKrzathAZRZVWoVLQ.roa (hash: jQCkb4Hj76KR+kp5xn1wyau7JXz8vDe/RQCW3z25Fe4=)
2: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: 3kylpyFrqqwIar0tE0BZtgauVhwWME+bjBrZr/cMBGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ba:94:0f:69:00:49:40:08:c5:b8:c7:0e:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=5b7124774c00f4dacd8717884ea1af7daddf1363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:de:77:19:13:f4:74:ac:9e:c8:e7:cc:97:
46:3e:3e:3b:d3:d6:50:76:2f:d7:3e:c0:e1:51:c2:
68:e3:34:0b:60:bf:9f:e2:13:90:89:6f:f6:53:35:
c8:9e:7b:9d:bf:b2:f3:56:3b:92:be:46:e0:23:2b:
a5:99:04:1b:dd:06:93:f3:d7:76:ed:15:17:64:e4:
75:fb:07:e3:08:0f:19:0e:fa:ab:89:db:36:41:fa:
c2:39:c3:c3:aa:36:97:42:5d:6a:08:1b:bd:81:86:
76:0c:44:ef:01:e2:04:44:00:28:13:9d:a3:0c:c4:
5a:65:42:74:6c:2e:b2:d7:e0:8b:8f:e8:c2:f7:84:
3d:f3:38:43:52:51:d1:54:c9:64:44:1b:b5:2c:ec:
bc:9a:ed:e9:aa:ae:d5:e4:e5:88:b3:9b:0d:20:b9:
15:f2:cb:89:3b:fd:89:f2:b5:0b:22:d3:3a:01:20:
3a:e2:72:ec:e8:dd:4f:ea:3c:ca:95:b1:26:24:62:
06:af:33:db:93:8e:29:d6:bd:3d:57:84:87:99:84:
42:13:f7:cb:3a:79:88:8b:79:2e:bc:5b:2b:62:2d:
83:94:24:b1:86:91:99:31:c1:b7:ce:21:01:32:ce:
fc:24:8e:ef:a8:13:a3:fd:d2:54:cb:d3:d7:e1:76:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:24:77:4C:00:F4:DA:CD:87:17:88:4E:A1:AF:7D:AD:DF:13:63
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:20:6c:2d:87:00:d2:9a:dd:1e:ff:10:17:d8:bc:07:53:
c2:ca:47:bd:02:94:40:a0:c0:6c:83:e1:49:b1:af:0d:2c:03:
45:f1:db:bc:32:d1:de:b1:95:c7:1f:e9:44:04:11:49:d7:9b:
c9:0d:1e:91:25:ae:d7:cb:82:7b:21:8b:94:59:23:1e:4a:0a:
d4:56:c7:21:b1:90:1e:c9:a8:dd:cd:75:cf:ce:de:a1:87:57:
a9:c3:fe:5c:08:d0:55:f8:46:ce:53:b2:67:9f:1e:57:a9:0e:
47:10:f9:d0:04:e3:a6:df:53:4d:d4:e7:d8:57:54:ef:67:57:
f6:be:b5:c8:52:0b:61:2f:db:6b:ea:ce:30:4a:e6:6f:32:6f:
ef:c0:33:a2:b5:11:07:dc:87:74:bc:aa:40:bb:f3:da:e8:ae:
f2:ad:de:b5:a2:c0:73:f7:d1:b9:9b:af:8c:31:a3:aa:ae:6e:
a8:8f:f0:5c:e7:5d:d1:df:5d:23:98:27:95:6e:3e:7d:2d:2a:
e0:38:46:2b:00:8a:36:8a:c0:f8:4e:c8:48:70:ee:46:96:04:
5c:a9:19:3d:49:09:7a:d7:ea:2a:26:51:2a:43:14:33:64:35:
57:5b:9f:82:cf:fd:28:08:a5:82:03:15:4c:6a:65:b6:89:2c:
77:22:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:01 2026 by rpki-client