Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: mQw1ubUz+ZKQrtB82y1MMD2Ro/1EQH5/z6v7N2Y8fL0=
Subject key identifier: 81:2C:1A:05:44:9B:EC:0A:16:E3:C4:D4:3C:2F:2C:E7:6E:CE:C1:5A
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 019D39AEEE8CF469BDEC9BDFF0C83D4DC805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 0AB2
Signing time: Sun 29 Mar 2026 13:00:58 +0000
Manifest this update: Sun 29 Mar 2026 13:00:58 +0000
Manifest next update: Mon 30 Mar 2026 13:00:58 +0000
Files and hashes: 1: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: D9sKgaOkiNXTx24nNkIFFPfKyMqd+EnAm7x4IQ6vv9Y=)
2: h7Slf79U-tivsMXa7hEOttxBA6M.roa (hash: 3/yXrVufCN3qWz4paHjP2MngE7Cq+dL6ygZqrLPEOdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ee:8c:f4:69:bd:ec:9b:df:f0:c8:3d:4d:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Mar 29 13:00:58 2026 GMT
Not After : Mar 30 13:00:58 2026 GMT
Subject: CN=812c1a05449bec0a16e3c4d43c2f2ce76ecec15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:29:dd:de:ca:8c:f9:31:38:c2:67:13:e4:
bd:9a:01:5e:eb:df:f4:a4:43:2b:8c:a2:cf:8b:10:
c2:3b:5a:02:a5:4a:5e:db:ff:59:c6:f3:be:c6:72:
47:1c:3a:8f:dd:34:bd:cd:86:54:49:f2:f5:43:a3:
45:ea:e8:fa:c2:aa:67:9a:cd:a7:3c:77:08:37:81:
17:c2:f4:c9:35:9f:be:a6:c5:fe:09:17:ec:ca:56:
f5:25:32:3e:6a:49:47:c7:cc:51:71:17:13:8e:17:
df:ef:f3:67:53:5d:06:ae:67:46:0a:3a:0c:5f:df:
31:05:2d:0c:3c:2a:dd:3f:2e:53:4e:ec:71:da:8f:
25:e1:50:29:fb:73:2a:b0:b5:a6:eb:08:b1:d8:7e:
42:1e:75:68:77:06:3a:4b:e3:a2:73:a8:89:82:42:
2d:26:1c:f7:24:ba:d7:56:68:43:fd:0e:c6:21:bf:
b6:b8:71:c6:0f:49:24:b6:eb:e7:bf:64:80:28:3e:
54:92:cf:8a:bd:84:4e:6c:86:de:dd:d6:c1:46:14:
55:ba:b6:8d:2b:5f:51:db:a7:2d:24:b6:98:02:8b:
6d:2d:97:9d:06:9a:f0:5f:b2:cb:07:3f:58:68:63:
d6:fc:4c:6f:d7:e3:5b:88:e1:24:e3:22:c9:b8:2d:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:1A:05:44:9B:EC:0A:16:E3:C4:D4:3C:2F:2C:E7:6E:CE:C1:5A
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:7c:df:3c:f4:09:1f:18:83:5f:0c:d7:f7:3a:81:dd:57:
03:cc:dc:7c:f2:33:61:a8:7b:ed:43:d0:4f:ee:83:fb:5e:f9:
ae:06:69:c1:f5:41:c5:6e:4e:a6:29:52:02:e8:99:32:73:e1:
52:30:f9:d4:0a:95:9b:81:e7:93:52:e3:8e:d7:16:81:69:89:
0d:71:37:f0:c1:c1:cb:44:49:01:65:14:da:ca:a2:e7:26:b4:
9b:19:36:48:72:12:ec:d7:7e:73:85:d0:c1:ab:22:a3:21:24:
58:dd:34:89:bc:bd:e7:e2:9a:2a:ad:81:56:f6:e7:58:db:dc:
e0:5e:6c:43:42:1d:c7:b9:30:50:55:a5:98:e6:8e:ea:37:a2:
a5:bd:df:02:66:a2:26:54:9e:50:54:92:6e:09:f2:1f:ed:fc:
af:e4:50:a8:15:65:b9:12:36:d8:ed:8d:91:1a:a8:12:7d:12:
b6:30:ce:2e:62:21:ea:b2:dd:d8:d6:92:4e:a5:8c:74:df:da:
b0:f5:83:51:47:56:d1:c5:7b:89:d1:af:3a:78:d0:d8:78:cb:
41:5a:a3:e1:9c:63:74:c7:83:95:28:14:00:bc:85:6f:63:2d:
a7:11:f8:ab:8b:9c:af:59:20:99:3d:5f:52:ab:42:66:e6:83:
37:70:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client