Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier: RPYVF1gjwzq97RNawKoXe2FZeqYEqRwCLoW5v5WHZc0=
Subject key identifier: E0:87:48:AF:31:7B:24:55:9E:48:7B:84:5A:A7:F7:A3:82:EA:E3:E3
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 01A1352331B301C50002A72864156960F82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 12:01:01 +0000
Manifest this update: Tue 13 Oct 2026 12:01:01 +0000
Manifest next update: Wed 14 Oct 2026 12:01:01 +0000
Files and hashes: 1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: +E8Vu5QzQYXyIWCHdck8eIOe2IWnFUhd9Aro9zyZkLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:31:b3:01:c5:00:02:a7:28:64:15:69:60:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Oct 13 12:01:01 2026 GMT
Not After : Oct 14 12:01:01 2026 GMT
Subject: CN=e08748af317b24559e487b845aa7f7a382eae3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:d1:43:cf:f1:87:ad:ad:d7:c1:19:ef:e9:
6c:a0:b1:ab:f8:7b:7f:fc:c4:73:dc:42:49:be:04:
c9:a1:e4:c2:32:0c:bd:0a:d3:a1:a1:4e:d9:53:02:
93:71:1d:89:fe:2f:0b:c3:e7:5b:44:dc:0b:1b:a8:
8f:f4:85:cd:44:8f:c7:7c:68:2d:07:94:23:06:45:
7a:30:b0:05:4f:c1:ff:02:49:22:8f:a7:f6:fd:9c:
44:86:46:79:ee:4a:24:02:64:1e:0b:37:c0:6d:97:
1d:d1:8f:c3:b8:fb:87:00:15:fd:b5:34:4c:5c:44:
9b:b8:eb:de:04:65:9e:c1:da:2c:75:73:e3:df:c7:
93:64:b2:8a:0a:b2:39:bf:5b:ce:d7:cb:b2:bd:ac:
ea:1d:9c:fc:28:99:5d:86:bd:dd:28:2b:33:a4:4f:
34:79:eb:71:44:de:a9:2d:19:52:18:76:49:2f:55:
20:6b:b4:f6:2e:be:bd:8f:b3:ae:3d:e7:35:7e:fd:
f8:53:29:46:97:02:67:79:52:87:d6:c8:0d:7f:ca:
82:72:4f:e7:a4:0f:cf:2a:a9:47:12:51:c3:a3:c9:
06:f7:fb:ea:75:4a:c9:5a:10:ef:55:72:c0:b9:1a:
e8:ce:d1:16:af:bd:dd:d6:16:e8:08:98:d9:8f:15:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:87:48:AF:31:7B:24:55:9E:48:7B:84:5A:A7:F7:A3:82:EA:E3:E3
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f9:b1:48:65:df:1b:e8:f1:f9:89:30:89:5d:6a:dd:b9:45:
cb:93:32:2d:79:b6:22:c8:cc:a0:4b:0d:ac:3d:92:03:d5:62:
e1:87:b5:a9:44:d1:f9:13:75:3c:66:f4:a3:3f:1e:74:34:73:
1d:fe:f8:e0:00:87:4b:40:f6:c7:32:8f:f4:44:fb:56:42:20:
17:cc:96:6a:fc:b4:a6:e5:0f:7e:45:19:6f:f4:a2:aa:a3:5f:
56:ef:10:d5:17:d9:ee:20:77:b9:88:b7:b8:b1:74:fb:43:2c:
74:81:67:54:3b:37:6e:60:5c:ac:b5:a2:e3:b9:6e:9f:21:e8:
e1:a6:59:43:c4:ec:7a:62:17:e3:0f:e5:c9:eb:2b:d5:da:62:
62:fe:0e:07:5e:85:47:82:e2:9e:cc:fa:8d:53:52:d0:25:b2:
95:0b:5f:34:8c:1a:4b:64:56:6a:ea:d7:ec:8b:9a:e2:1f:71:
4c:86:31:37:ce:f7:25:34:0e:d4:ad:47:14:b9:a7:3b:57:34:
a9:fc:0b:44:c8:59:2a:6a:62:3c:1c:dc:f6:b7:f1:23:e9:a3:
e3:b6:b9:2b:aa:c0:f4:2d:38:64:c5:a4:62:68:35:20:25:b4:
8b:42:0a:82:25:38:56:a5:b6:97:f8:2f:69:b1:a6:21:9b:02:
4d:77:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:33:01 2026 by rpki-client