
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: 8rlA6nIcFiBAxsoABy9yOS+MBxcbP8uEz73yhVwQn8g=
Subject key identifier: BC:63:6A:85:11:D4:95:16:5A:78:2C:D9:3C:74:AF:6B:03:25:F1:E4
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 01A1DEDEA7437AB29EE821B96E0B2D166AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 0825
Signing time: Sun 15 Nov 2026 11:01:36 +0000
Manifest this update: Sun 15 Nov 2026 11:01:36 +0000
Manifest next update: Mon 16 Nov 2026 11:01:36 +0000
Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: 9M+yo/Tk+AEZ6co8r+soJ1hNyT0l3nYeqH+IaeUBYXY=)
2: iz1NumDDEP4HEocZooUpzgUrWuA.roa (hash: Xh3SqqlYQ0WusNga4Qj1Gif5nRzkl+/fhOngglLEBZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:a7:43:7a:b2:9e:e8:21:b9:6e:0b:2d:16:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Nov 15 11:01:36 2026 GMT
Not After : Nov 16 11:01:36 2026 GMT
Subject: CN=bc636a8511d495165a782cd93c74af6b0325f1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:b5:01:5b:86:3b:93:d5:c3:ec:2e:5c:4d:
55:71:91:82:00:6f:bd:3c:86:0d:e9:6c:1b:95:9d:
97:71:4a:c8:d1:ee:ce:ad:c5:e1:a7:2a:db:44:e7:
7e:c2:9b:1e:98:07:fb:19:41:84:72:8e:4b:20:fe:
30:c4:d4:bb:2b:01:e9:15:5b:76:8e:30:34:fd:f3:
b9:08:a8:b8:29:28:47:59:6e:98:81:89:bc:c5:14:
b8:bf:e8:a8:4c:1a:78:92:c7:5e:69:39:b8:ac:ca:
0f:17:63:89:e4:de:34:70:6d:9a:1f:2a:97:78:48:
83:58:46:e0:41:66:f7:bd:f2:ce:36:36:9c:93:0c:
03:ae:54:81:fd:0f:42:44:36:de:10:6a:19:6e:81:
53:f8:57:66:39:6b:86:84:61:94:f3:bd:5a:31:c1:
66:8e:12:c5:6a:2d:c9:c0:02:b7:75:97:9d:fa:48:
b0:6f:4c:bf:5a:4f:be:13:fe:09:5c:46:95:8e:53:
9e:90:66:04:11:9a:99:f1:b1:40:21:cd:f6:9b:f6:
38:64:41:f0:19:27:c5:0c:64:f8:77:4d:df:ea:55:
49:f7:6d:e8:5a:34:79:d5:c1:ea:3a:74:61:69:f5:
8b:23:9d:39:f1:96:6e:7d:0d:04:b5:73:55:fb:56:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:6A:85:11:D4:95:16:5A:78:2C:D9:3C:74:AF:6B:03:25:F1:E4
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:29:1b:f0:f5:3c:f8:8e:73:6c:81:bf:e0:6d:90:0e:4e:
ed:d9:4e:a5:b8:81:d0:0c:bf:32:02:7e:53:7e:02:22:78:ac:
34:14:5c:da:b3:66:3c:32:6e:a9:61:39:b2:97:f8:23:2a:97:
e0:24:3a:c4:14:16:3f:8c:4e:0d:4d:e5:9f:d6:d0:5f:5e:e7:
09:c8:25:af:ea:f0:e4:6e:c8:f3:a9:2e:a9:bc:e7:d7:d2:a0:
52:71:11:38:57:8a:25:12:e0:c9:5a:c5:64:da:8c:34:94:91:
0c:8d:bc:32:bc:4e:58:7a:d2:54:30:a8:32:e6:33:14:4d:e7:
5b:2e:a8:5c:ed:94:8d:d0:04:4b:e7:15:f1:57:50:7e:49:79:
8f:b5:7c:fe:10:d2:1e:13:7f:67:c7:ca:66:37:1a:8a:d4:8c:
73:79:22:76:c7:ef:1c:4c:ce:48:3e:5d:0c:7c:bf:81:43:a0:
eb:e4:c3:c5:cd:e3:87:c4:65:4e:d7:e0:0e:88:cf:d3:69:ae:
1a:d5:8e:34:30:9c:57:8f:d3:10:47:71:f2:23:0e:69:b6:4b:
d3:4f:6f:80:0f:60:9c:ce:24:08:16:2d:11:f5:be:19:58:36:
a3:9d:16:4d:8c:ad:df:76:39:dc:d4:ba:54:03:d4:30:b9:82:
89:b2:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:34 2026 by rpki-client