Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File: V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier: EPM6YXmQNr5thXQDQO9T3bIwIo82+GgClgpsc70cjCQ=
Subject key identifier: 42:C5:7F:65:AA:5C:C4:19:C4:58:B6:F2:72:9A:A7:59:66:77:0F:5B
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 019D371BFF8FD8E87FF0ECE0FA5AB34F3F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: KTEkwR0V5SpxDj+1epNFkcJrFu+VhNVPvA6CGNCfMHY=)
2: wqUca6hdhuPK8izyY-5u-NB8hFo.roa (hash: HRKsMqKaEiIwseli6i4ZQRouG3dOlIyMlhskACBVj8Y=)
3: yOVUwpawosnLEvEpWeBu0ZksdtE.roa (hash: ecVfRjOLZ9OqmXqMU4m+THLoypH/3fTNLWWn4EOFi9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ff:8f:d8:e8:7f:f0:ec:e0:fa:5a:b3:4f:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=42c57f65aa5cc419c458b6f2729aa75966770f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:74:ce:e3:7c:9e:2d:3c:c3:16:c2:09:8a:
01:7c:e5:2f:9d:ff:9d:b3:6e:c7:48:cc:a7:ed:b8:
18:07:36:a7:34:05:8d:6c:07:9b:ef:b4:64:d4:db:
85:49:69:a6:92:fe:98:c8:ac:ca:9a:d6:33:c2:a7:
63:5a:be:27:91:60:c8:38:9d:ed:62:76:0c:65:9b:
13:74:06:c3:f8:2e:c8:03:49:8e:a6:16:de:9b:7f:
4a:05:bd:93:73:53:9e:da:60:74:84:90:4f:21:d5:
73:1f:0f:f2:8e:12:8a:dd:76:f4:7d:ce:00:5f:4d:
76:61:f6:a7:52:99:bd:1d:5e:6e:1c:ea:c0:fd:52:
fb:02:ee:3b:ce:29:bc:1c:f7:44:01:ea:09:7b:2a:
f8:03:01:05:9f:88:da:99:ad:bf:eb:2a:96:b8:04:
a9:d2:59:f5:97:35:5e:88:3a:a7:ea:cb:6c:5b:3f:
14:42:df:b0:26:c9:e9:20:c1:42:08:1d:db:da:7f:
32:19:9a:5d:11:f2:a4:d1:c9:ef:a0:fb:b8:d1:de:
a9:f8:52:d4:c0:37:c7:69:4f:d1:4d:57:25:72:74:
13:75:39:5b:04:3c:a4:54:9e:98:bf:54:9a:5d:0d:
57:9e:cf:75:87:c1:92:ec:55:83:a2:46:f1:e2:8f:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:7F:65:AA:5C:C4:19:C4:58:B6:F2:72:9A:A7:59:66:77:0F:5B
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4b:83:00:2e:21:fb:75:dd:57:33:a2:1b:56:7d:02:b5:6b:
5c:2a:67:70:dc:42:63:5b:2c:33:a0:97:ee:4b:64:39:b8:22:
ea:d4:c4:fa:3d:f1:19:c6:11:1f:dc:ba:38:9c:ab:bb:2b:46:
fd:88:cd:dc:df:cf:e7:76:c5:c9:5e:50:3f:ac:5c:11:c1:18:
09:2d:83:1c:a8:b8:78:a8:6a:ab:5d:a6:fd:0f:9c:a8:48:41:
65:c7:c3:b5:d2:73:06:ae:a1:29:0a:a2:72:c3:a3:d3:51:14:
91:4b:d5:93:53:3d:d6:d6:fc:60:a3:b3:af:5a:f1:ec:b6:ec:
a6:e1:df:ea:14:d6:61:45:c5:62:62:1e:44:90:04:61:26:67:
cb:08:44:54:f3:4e:76:91:aa:50:55:18:ed:8d:f3:26:56:8f:
a1:3e:6a:2b:de:8b:c6:51:c7:a0:10:c4:2f:29:4d:49:d8:c3:
a3:7e:55:c0:fa:3d:68:ff:12:70:77:d7:34:77:44:49:ab:ba:
3e:59:28:73:35:92:8a:6e:ba:2e:df:60:04:a0:d3:13:da:55:
05:b7:a0:47:76:43:1a:4e:c1:6a:9f:56:69:f2:4f:dc:83:28:
07:2d:11:f3:62:5a:39:2b:e4:1f:a0:06:f4:d4:ef:c6:46:39:
e8:f9:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client