Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: mMgr/WnS6g5nCbukN/lrKYxIrLMWx0zQV/Wco7x1siY=
Subject key identifier: 79:91:5A:44:DF:EB:7C:F3:1E:E9:45:3F:81:AF:32:8D:58:BE:6B:61
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 019D1BDBF2DDC7163467D8CA5C44D0168DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 0399
Signing time: Mon 23 Mar 2026 18:01:32 +0000
Manifest this update: Mon 23 Mar 2026 18:01:32 +0000
Manifest next update: Tue 24 Mar 2026 18:01:32 +0000
Files and hashes: 1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: v1ncr08h+eFJvUf0E/Rdq41CLnxeT4zLsguDcX8U3b4=)
3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:db:f2:dd:c7:16:34:67:d8:ca:5c:44:d0:16:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Mar 23 18:01:32 2026 GMT
Not After : Mar 24 18:01:32 2026 GMT
Subject: CN=79915a44dfeb7cf31ee9453f81af328d58be6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:57:1e:c1:f4:92:dd:2f:17:a5:67:34:90:
dc:91:72:db:5e:21:b7:8f:12:d9:a4:ef:32:0b:4b:
20:6a:2b:11:fa:95:e3:fa:a3:e5:cb:a9:0a:f7:ee:
09:56:b0:27:26:cb:aa:f3:57:36:90:16:30:1f:94:
15:69:da:00:f5:dc:cf:5e:bc:dd:c1:bc:68:cc:72:
6b:15:86:dc:6d:31:05:83:e2:87:81:69:7d:d8:0c:
db:57:90:ca:2e:e6:e5:b7:cb:3b:d8:7c:fe:0d:8d:
d0:8a:2c:ee:28:b6:3e:47:70:33:39:db:d5:1c:91:
b9:71:2c:ba:7a:63:5f:9c:58:86:eb:5c:4a:55:f5:
8d:cd:a3:6d:68:de:e2:62:73:e1:6d:cd:54:7d:f8:
58:85:08:32:bd:22:91:b7:62:eb:8a:47:ff:0e:a8:
a1:a6:81:1b:7a:a7:78:d2:1d:fd:73:f6:39:ae:15:
db:e9:a6:db:51:15:08:be:2c:a6:d9:e1:70:45:00:
ef:dc:2a:81:66:ee:88:3c:61:5f:e6:f9:ab:b8:37:
42:0d:ec:57:ba:e3:08:58:02:01:b0:91:12:31:d9:
10:58:85:af:3a:f5:47:85:b3:7b:84:f4:b9:31:b8:
2c:18:95:3b:d5:d3:3d:a5:63:01:fb:7b:68:18:a6:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:5A:44:DF:EB:7C:F3:1E:E9:45:3F:81:AF:32:8D:58:BE:6B:61
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:52:52:85:08:b0:16:6a:c8:8b:95:cd:cb:4c:0a:db:07:9e:
b0:e9:87:8c:35:05:bb:12:6e:25:d2:19:89:c0:55:d1:3c:e2:
a0:a7:4e:5d:2f:04:1d:dc:b4:f4:63:78:96:b3:95:bf:7f:7d:
45:53:66:37:25:d4:83:dc:e0:3e:b5:81:13:3a:17:f0:5e:14:
3a:90:9f:70:bc:21:ea:c3:1d:37:ac:da:d5:c1:22:c8:0c:4e:
83:2e:e3:79:48:9e:fa:b0:74:7f:20:d0:07:da:4a:14:52:26:
56:32:3a:e9:43:65:44:19:f0:fd:09:33:64:56:2a:01:13:9c:
3f:15:73:23:92:66:86:28:a3:70:11:30:14:43:4f:82:b1:51:
4c:d4:6c:b3:ab:a7:b8:a3:95:95:c4:8f:bb:43:f5:74:54:c0:
01:ec:08:20:82:78:f2:a7:f8:4a:e2:f5:d1:ff:04:f7:a4:ae:
d6:90:bb:95:aa:e8:93:08:b8:08:61:2b:01:4b:7a:07:fa:c7:
09:32:54:41:d7:bf:bb:4f:08:f7:0a:75:7e:2a:36:dd:a6:f1:
e5:04:1c:09:23:21:e4:c6:f5:23:76:14:41:3b:cb:df:50:01:
55:83:7a:f2:45:3b:05:71:35:4b:5d:c6:1c:f3:c1:b9:df:9f:
69:bc:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 03:20:47 2026 by rpki-client