Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File: V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier: HoiY9xpYhytPytINpYVgsHmAVxjrHv2Jp4Xz2VH7ZQ4=
Subject key identifier: 08:4A:05:F6:7C:5E:4E:A5:F6:24:E4:12:56:77:EB:D3:D9:77:11:C5
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer: /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial: 019D38D29D33114DF72B318115B4C7924FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number: 17D9
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: 5XHpqadRZJG2YXG+yg7faBgZJrUtEJujGVh6LMhHpkM=)
2: dgZwUDI_c_NIZWV13znKBtyTc2w.asa (hash: g4PT++nYCcDgLzeFvs4Iw+M3UcLVFAeLCSamiImmoHA=)
3: v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa (hash: pMY9nBh6/UwsDxDddCcVlI4vP8imr57XVjh9i41unRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9d:33:11:4d:f7:2b:31:81:15:b4:c7:92:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=084a05f67c5e4ea5f624e4125677ebd3d97711c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:d4:f8:9c:07:b3:9f:3b:fb:a6:b5:0a:7d:
8c:d1:3c:80:42:56:92:5a:00:e7:ec:5b:74:10:9a:
e6:f0:df:61:aa:58:c1:6d:fd:24:6e:0b:63:a3:87:
14:48:1a:68:b7:7f:33:20:cd:d5:03:98:76:2c:b4:
f2:dd:46:58:68:61:ff:72:cc:88:84:d8:79:7f:a3:
b0:c0:dc:c2:96:e5:40:8e:c3:6e:66:fe:87:7c:9b:
10:73:38:48:eb:a5:d1:79:42:db:03:90:dd:67:f1:
1d:59:3c:52:a6:53:36:5e:cf:01:35:25:23:2a:08:
4b:5d:9f:34:0d:60:77:ba:7f:2c:55:8a:4e:01:b6:
a4:5c:83:d4:a3:39:aa:ec:16:fb:b6:fe:56:b5:19:
4e:5a:39:69:73:5b:ba:39:2b:34:2b:51:77:40:87:
e2:0b:dc:30:72:4d:1f:f0:7a:de:73:bf:02:b5:e9:
3d:73:63:a8:f8:a7:d7:9f:b3:fd:ee:f6:83:b5:5e:
52:53:fd:51:f5:3c:a3:7b:19:38:3a:d1:cb:70:d2:
a1:71:ef:31:80:52:f9:b3:03:a1:5c:27:56:75:e0:
8a:f5:0c:d2:b0:eb:83:85:c6:fa:ae:6e:66:88:ab:
73:ee:83:d4:6e:94:b5:0c:95:38:d5:fa:0b:e1:12:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:05:F6:7C:5E:4E:A5:F6:24:E4:12:56:77:EB:D3:D9:77:11:C5
X509v3 Authority Key Identifier:
keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:7f:57:ae:80:c2:48:b1:d7:ec:71:98:61:6f:a2:f7:3c:
bc:1d:39:4b:43:c1:bb:f0:e4:3d:58:78:6b:2e:36:6e:36:56:
6c:d8:94:2b:8f:f6:9f:3f:a7:2f:9f:e7:03:a7:4e:12:20:e8:
eb:78:97:25:6d:c9:9f:ee:63:79:e3:4c:43:db:a9:e7:79:3b:
55:51:29:c6:26:af:8c:08:2f:c8:2e:f8:e6:ee:7d:3d:c5:e1:
34:63:ad:89:90:0c:c3:62:10:3e:0b:b4:1a:26:3d:f6:f7:67:
7f:32:6d:59:89:e6:bc:f0:a3:09:41:70:2b:cc:20:80:65:2c:
5f:f5:1c:20:ca:4b:95:92:54:21:4a:d8:ce:3f:54:dc:21:63:
33:f9:09:28:35:63:c3:a7:5c:b8:9a:5b:3d:87:84:7a:d1:e9:
c5:96:f9:f6:9f:fd:82:88:81:75:cb:8a:cb:fc:e0:44:00:0b:
b0:1e:0d:58:2e:a6:82:e6:bb:0f:4a:d2:05:fe:4d:59:66:5b:
ea:30:00:1d:2b:c3:a0:7d:c4:3e:3f:b8:52:49:e0:e5:9f:04:
ac:f6:5c:56:0a:08:ef:83:9e:66:1e:75:45:c5:b1:f8:e3:46:
3f:3c:2b:d4:bc:5d:28:3a:79:be:9c:fb:f5:92:93:f7:95:3f:
34:ed:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:07 2026 by rpki-client