Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: OKK2Eieu6IKI6N3TWtgn/lyxAJSOLPQlRmxnbqbwrWo=
Subject key identifier: EF:68:95:F0:DB:43:EF:2A:8C:31:25:43:17:E6:74:6D:55:8B:0A:FE
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 019D3865F1A9AAE1EFA67A83C9758BE3FD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 157A
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: S-Zk0ObYtJMIz656nLDAOtkUtx8.roa (hash: +uIO+SHw3q58WAdHwKwHZ+9+iLe/2WT3m6O2zlQ0zeI=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: RkbyFF0c2clS3istg1LhDlDJdgvEfJkkAdG2CiMJ278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f1:a9:aa:e1:ef:a6:7a:83:c9:75:8b:e3:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=ef6895f0db43ef2a8c31254317e6746d558b0afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7c:4c:db:c9:49:01:5c:88:88:89:eb:19:66:
22:28:6a:61:44:09:27:f0:0e:1f:a6:98:e3:9e:1d:
51:92:9c:56:35:11:a9:31:30:ba:a5:72:c4:39:55:
65:f2:61:9e:b7:85:22:a8:0e:a4:31:89:47:1b:35:
8b:7a:cc:eb:20:61:e1:59:15:0e:bd:d2:c4:44:91:
02:22:d1:4a:55:51:8a:70:00:02:5f:1b:c8:0d:3a:
e7:5d:4f:f2:5b:e0:c1:b3:54:94:cd:00:55:0a:d8:
4c:b6:cc:72:0a:bb:07:1e:22:6b:f5:58:64:d7:00:
cc:d2:19:04:bc:65:a2:00:99:4f:ca:5d:e0:89:46:
95:5f:7b:18:9a:73:8e:1a:10:43:41:0f:d1:f8:38:
5f:e7:fa:7d:f6:97:a0:a4:51:d6:5e:10:eb:f4:22:
71:a9:31:46:35:88:20:23:76:b7:a3:82:c9:47:a7:
96:23:25:8d:28:a8:ec:18:48:a5:08:48:3a:e9:30:
bc:ca:f7:03:3f:dd:67:53:69:a1:48:b5:5c:4d:41:
9a:04:0d:f4:c5:34:47:2b:20:98:09:54:9d:96:60:
90:a7:33:09:73:e6:c3:f1:99:da:a5:1a:46:04:6b:
02:47:47:be:4c:0f:05:4e:d0:c8:25:06:09:86:18:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:95:F0:DB:43:EF:2A:8C:31:25:43:17:E6:74:6D:55:8B:0A:FE
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4a:6c:c8:02:d8:9f:fb:bd:83:20:61:7b:f2:be:a7:43:7c:
b5:74:99:6a:bd:28:89:20:b1:7e:3c:71:8f:60:08:22:9c:44:
96:66:7b:64:d4:52:4d:20:f2:38:0f:79:26:85:6e:d4:19:1a:
75:6c:83:13:50:63:11:ca:ab:4d:ea:05:56:ee:19:9c:85:9b:
b0:35:68:38:ed:70:18:5c:45:84:89:b9:7f:31:4b:2c:b7:f5:
7a:76:d2:5c:1c:ac:53:f3:c9:88:16:d4:99:88:cb:be:bb:95:
cd:03:c0:d8:24:48:cd:c3:6a:6f:9e:17:15:e9:e1:82:bd:26:
78:cb:9c:9b:07:3c:bc:78:8b:95:59:e6:6f:dd:8d:af:ac:22:
02:b9:3b:65:31:0c:ba:46:f1:cd:a4:be:0e:97:53:a0:cd:7d:
e3:37:17:82:e2:74:c0:07:5f:a6:29:12:16:7e:22:d6:ab:8a:
73:d6:f4:53:d3:40:74:c5:8e:a1:6d:ba:ea:53:74:3a:b0:36:
d4:35:bb:55:84:6c:37:d2:41:4b:ce:25:27:53:bc:99:d7:e1:
5a:6d:1d:80:fa:c9:e8:0d:4b:67:3a:00:4c:95:e9:20:9b:1b:
77:09:a0:3f:d9:b2:ad:e2:e8:23:7f:14:ba:fb:f2:b3:7b:c7:
e0:60:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:29 2026 by rpki-client