Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: u/qgbN+SymGP1xuIq/O6NK8mOop//dqcLdcsg3vNNGQ=
Subject key identifier: 3E:A1:5A:3D:C8:3F:46:2E:B0:69:20:15:4F:D8:AA:07:62:B7:A7:28
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 019D2B4DF2015CF5FD8E24D1A7B5C40F4982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 05B5
Signing time: Thu 26 Mar 2026 18:00:21 +0000
Manifest this update: Thu 26 Mar 2026 18:00:21 +0000
Manifest next update: Fri 27 Mar 2026 18:00:21 +0000
Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: jpEqZl1xVZXT7zZb6jFETDj2sPHpVESkdikckYIeVDg=)
2: sU0CnD7fmFimr_rcXy1fRdF4mlw.roa (hash: /IZQqNWdeef3TByRifZMyHdV5Oe4U72Qr/QHSSpfxeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:f2:01:5c:f5:fd:8e:24:d1:a7:b5:c4:0f:49:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Mar 26 18:00:21 2026 GMT
Not After : Mar 27 18:00:21 2026 GMT
Subject: CN=3ea15a3dc83f462eb06920154fd8aa0762b7a728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:bf:54:5e:66:6c:7f:ec:40:9d:1a:0c:b6:
3b:24:83:0b:8a:48:f7:72:db:96:39:1a:fd:a8:c0:
5a:61:1b:91:b7:c2:a2:4c:0a:12:14:a5:7d:ab:1e:
2f:98:9c:35:32:2a:6f:75:65:d1:27:df:6a:86:37:
d4:5a:04:0d:36:ed:33:dd:63:c4:b5:be:0f:83:49:
dc:3b:a5:f4:55:7c:00:95:89:fa:ac:41:c3:ef:88:
ba:9e:99:6a:5f:a3:d5:af:0a:46:fa:36:4d:35:21:
8e:7b:f7:d8:be:f4:68:d5:f1:83:79:d6:c5:c3:b2:
7e:85:14:90:82:9d:b1:ec:00:88:a7:be:a7:2d:d6:
69:63:b9:c2:22:bc:fb:9c:07:6e:b9:17:3d:8a:12:
c1:85:69:f9:db:32:17:4e:78:4e:47:aa:a6:f4:ac:
15:8e:c3:50:87:c8:19:fe:1f:37:75:18:ce:fa:d4:
e8:12:dd:bf:bf:a7:24:ea:50:5e:67:6e:9f:93:b7:
79:a5:b7:4c:82:c0:f6:da:eb:eb:a6:f4:be:93:a8:
67:9c:e9:8f:5e:7d:73:d7:01:e2:80:d6:1a:a3:e8:
1e:98:9d:29:65:31:a0:38:20:11:99:78:e6:76:5a:
a2:2f:1b:a4:b1:76:5f:20:8f:0a:59:fa:d7:a1:41:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:5A:3D:C8:3F:46:2E:B0:69:20:15:4F:D8:AA:07:62:B7:A7:28
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:c2:c0:63:76:ae:82:e5:23:9e:ac:28:64:18:a7:cc:c1:
86:df:ac:a0:94:9a:26:45:e0:a4:2b:8a:34:ed:fb:a4:f8:4c:
9e:dc:7d:26:a1:84:82:63:ce:20:5d:04:ae:2d:e7:db:0e:bf:
29:7b:b3:8f:b4:be:4f:22:7d:dc:e9:ae:81:41:4b:b6:a5:1a:
ef:88:52:57:2d:f6:e7:8c:c0:2c:97:a0:5b:6e:09:b5:88:ee:
0d:95:3a:f3:a5:6c:b9:76:75:50:1a:25:ea:65:09:fe:58:a9:
cb:36:b0:42:de:e0:28:77:0f:d5:0e:3e:26:71:12:46:09:05:
65:53:3f:d1:d7:58:77:64:69:66:b2:87:7e:76:02:7c:50:68:
fa:28:83:4b:1f:b3:89:40:af:e5:30:d6:4c:f5:7b:dc:ff:3f:
38:39:09:7b:16:16:61:80:c1:fc:ba:f4:0d:0c:2b:d7:ac:24:
9b:6d:26:a8:a2:b4:0c:a1:6e:ad:20:56:3a:1c:67:9d:fa:a1:
eb:66:b3:ac:9a:07:7f:19:38:88:16:80:68:d5:86:58:bc:0e:
18:38:66:9d:e6:ed:5c:c6:59:49:ba:26:97:43:53:95:4a:c3:
64:3b:ca:7a:63:14:0b:73:89:99:6b:6f:be:1f:bd:cd:a4:88:
17:d8:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:21 2026 by rpki-client