Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: maby2ej1s1s8rB9htuTFmvzhKje79LePMWaSbaMViiY=
Subject key identifier: C1:6C:83:C8:30:48:10:34:DB:C8:AC:54:DF:22:BD:C1:69:AE:D7:FF
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 019D29615B3BFB7646BFCCE5E54CEB9DDF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: Kz6MRzZAbf0P2fKRSo9EK3LhnNg.roa (hash: FunMB/X94eHRJVpgjb/DKK3OKKV8NdcYckDgjUBxDNs=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: G+E4WNoKg6HcYh6q1Zwq1kB0HhTUDE9dtSU0B+mpOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5b:3b:fb:76:46:bf:cc:e5:e5:4c:eb:9d:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=c16c83c830481034dbc8ac54df22bdc169aed7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:e9:e2:d5:54:04:2d:3b:9f:d7:79:36:e5:
b1:02:6f:27:5a:83:fe:57:9e:f2:5c:90:1f:8a:39:
02:48:76:95:31:c8:7e:8f:63:1d:e0:04:21:e7:02:
b9:8d:6c:64:9d:79:38:93:03:d5:f3:0f:f9:2d:ac:
22:e3:48:e1:40:80:0e:ad:5a:73:c3:9c:22:d8:15:
49:90:26:e2:91:03:ca:4e:17:98:65:34:69:c2:ee:
ef:d6:0e:35:29:41:51:f8:fe:28:12:f3:e4:18:6f:
d6:52:f6:aa:47:14:18:e3:3f:94:ed:9c:52:ee:6f:
21:e6:21:b0:e1:e6:8b:6c:b7:49:a0:73:92:08:ec:
b1:e1:ec:d6:27:a1:21:5a:5b:e5:d6:72:a5:70:55:
8b:9d:5c:a7:cb:f4:1f:98:bf:16:6e:50:79:aa:a7:
7f:c3:f1:d0:1d:24:1a:62:71:83:f0:92:32:7f:d7:
e1:19:93:e9:23:47:4a:87:f0:7c:a1:0d:5b:35:43:
0e:a5:f9:63:33:94:9f:d5:06:05:ad:38:12:b9:71:
2b:f3:80:10:e5:5f:3f:32:89:db:aa:fc:6d:17:7a:
6c:0d:7d:d9:7f:c0:2c:bf:db:78:36:e6:76:f5:b6:
23:3e:bc:40:83:d3:25:ac:54:2c:2c:a6:ae:56:2e:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:83:C8:30:48:10:34:DB:C8:AC:54:DF:22:BD:C1:69:AE:D7:FF
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:93:15:dc:74:f2:85:3e:de:59:b3:51:73:35:e8:29:f7:
e9:9d:25:14:d4:c6:20:d7:a8:0d:77:bc:0b:f3:9c:0a:50:af:
bc:fb:5d:77:28:0d:5a:61:c1:a5:88:2a:50:23:9e:e2:66:fc:
3e:70:e0:e7:37:f4:80:95:11:a8:27:74:39:5c:81:24:f9:5f:
74:5f:c4:e1:78:68:83:14:97:bf:b5:a9:26:69:4b:e5:e5:4e:
60:d2:93:3c:92:aa:89:f5:71:3f:53:b2:21:b7:09:c2:75:77:
44:e7:84:ca:01:a3:4c:02:48:4b:a4:71:3c:6e:9e:93:a9:4e:
34:ad:aa:22:14:0f:cd:c6:12:b4:ec:59:8e:80:5f:ca:b3:bc:
96:38:9b:70:33:2d:26:e5:06:8d:5b:c2:a7:29:b3:25:4e:17:
ee:53:ea:7e:bc:3a:b7:bf:e5:c2:e9:55:4e:36:8f:f2:68:da:
55:1b:99:7d:48:1d:53:a5:ff:87:cc:7a:99:2e:c8:40:a6:0a:
20:82:f9:90:ea:04:b3:d6:44:35:5b:4a:d8:f9:a1:ee:c9:6f:
42:fd:0e:4b:dc:0a:0d:62:9b:ba:98:2c:e0:2d:c4:94:6b:3a:
19:51:35:41:be:6a:43:b4:a4:c4:ad:51:04:bf:7d:16:ab:a4:
92:2b:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:18 2026 by rpki-client