Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier: ieFZbLSymlqoBsMBHVSl1J5DJaGsA7KbBoQXn+eKj64=
Subject key identifier: 28:79:16:1A:7D:38:B0:4F:88:28:81:AB:A1:B1:22:0F:85:10:C9:6E
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 01A0325BD1ED048DD692F9B15874208F8F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number: 1A1B
Signing time: Mon 24 Aug 2026 06:01:13 +0000
Manifest this update: Mon 24 Aug 2026 06:01:13 +0000
Manifest next update: Tue 25 Aug 2026 06:01:13 +0000
Files and hashes: 1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: U8aaG1jQId6C0d6km9pMIZTYJLhnvVvMAp1TVBUZBMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:5b:d1:ed:04:8d:d6:92:f9:b1:58:74:20:8f:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Aug 24 06:01:13 2026 GMT
Not After : Aug 25 06:01:13 2026 GMT
Subject: CN=2879161a7d38b04f882881aba1b1220f8510c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:79:aa:2d:b4:a3:a2:0a:d7:77:b0:c5:a8:
7e:80:94:1f:43:de:ed:6b:cc:9e:1a:71:33:58:ce:
4a:41:51:85:43:07:3b:f8:49:b5:00:a4:f1:82:06:
71:98:d6:3e:47:bf:83:2f:9f:50:f6:18:23:ad:fa:
13:39:ec:6b:bf:ce:32:65:18:ef:6c:7c:bf:dd:6b:
f5:e2:c7:7c:93:84:d6:49:8e:c6:fc:3d:f5:65:34:
07:29:78:e8:83:a4:df:9f:a5:97:9d:d5:82:3e:a4:
06:b5:89:20:70:f1:41:e1:75:06:34:5c:4f:c1:92:
45:53:82:31:c3:a4:e4:be:bc:10:0c:31:18:1b:91:
7f:1f:18:fb:d1:9d:f9:80:ec:fa:89:cc:f4:d3:8e:
6d:0d:a6:b3:12:ca:38:aa:bc:7d:ce:10:76:c1:94:
0b:37:9a:51:98:d6:b9:f8:b8:56:16:38:53:0e:87:
f4:38:5e:af:5f:e7:ae:fb:93:81:62:c9:7f:66:d2:
89:c0:6a:a3:f4:bc:4a:16:22:17:72:e9:b5:db:12:
1f:62:68:a6:18:b4:f4:de:69:ab:10:58:6c:35:1f:
3d:ea:de:bf:b4:42:1b:69:99:36:a5:7c:b9:8e:f7:
70:c5:26:42:ed:8a:93:5b:bc:67:ee:59:7e:e5:f4:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:16:1A:7D:38:B0:4F:88:28:81:AB:A1:B1:22:0F:85:10:C9:6E
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f7:52:53:d1:30:5e:42:87:e6:2d:32:a0:3e:40:c7:5d:be:
43:b4:a1:a8:a2:ef:85:a2:68:b4:4b:42:88:3a:3a:c9:23:c4:
ae:00:c3:c9:19:49:22:a0:7b:5f:e8:29:da:39:f5:6a:42:04:
48:6f:a6:9f:b5:e3:b4:1e:76:c1:31:8f:60:82:fb:88:e1:14:
ac:33:a7:56:97:5d:db:90:5d:01:db:31:1a:e9:6e:6a:37:42:
34:3c:4c:1b:4b:70:66:35:24:a4:1d:96:88:7b:23:38:49:9f:
6e:2b:63:f8:8e:48:dd:95:6c:85:23:18:6f:82:bf:81:5d:56:
3d:9c:39:49:67:ad:55:0d:d2:31:b2:9d:c9:37:29:ca:2d:ff:
65:0d:c2:c6:ca:e7:b5:e6:4a:aa:a4:53:ed:3a:25:b4:f0:7b:
19:4d:ec:2e:1b:33:06:48:bd:10:29:4b:1c:f5:49:43:8b:d8:
4e:80:ab:4d:2d:96:1c:9f:df:3b:e2:20:21:39:10:20:fc:ab:
01:9b:58:9a:38:b1:05:de:8a:de:f2:9e:3a:24:02:a4:42:45:
bd:2a:c7:53:f3:f7:48:12:12:a7:ca:55:d1:63:b9:6a:3a:af:
41:2b:e0:9e:d4:a6:b2:ac:c7:9d:06:85:a4:37:e9:88:b7:ce:
e2:20:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:51:54 2026 by rpki-client