
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File: V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier: MrFDL0YatZoMkG3tnn2Ri3GoitjXTz6U3V3aC7o11kY=
Subject key identifier: 4B:40:C8:CE:AF:39:B8:50:1C:85:A4:F5:24:09:4D:2F:E9:D7:8C:3C
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial: 019D3940F38C34EDE99C569D99550D4435D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number: 17C1
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa (hash: VagX+oyv5O56sokc/qHDCjREdjly46AXJeRdXSrzpR0=)
2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: FNyT8mFRsybhhChryWAFtdK0Oq5nDgM2/6IE1xxGg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f3:8c:34:ed:e9:9c:56:9d:99:55:0d:44:35:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=4b40c8ceaf39b8501c85a4f524094d2fe9d78c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:f3:f5:ed:ad:14:21:8c:09:bc:91:0d:df:
69:e7:1d:b4:9f:54:e5:33:f5:21:d2:04:7d:19:3e:
8b:fe:7f:41:cc:fa:58:04:b1:bb:f5:31:ba:f6:3a:
60:55:1a:a5:a7:97:c2:b8:55:da:c3:a9:23:fb:b7:
6b:56:66:a9:d0:63:06:d6:b3:b3:f1:5e:d0:9b:65:
97:4c:a4:13:7f:e8:04:9d:7a:cb:00:31:87:cf:81:
c7:5e:5e:8b:79:dd:7f:a4:54:fa:bd:69:b7:0f:e4:
a4:19:58:be:f0:db:42:89:5c:74:9f:98:d9:e9:0c:
aa:dd:9d:56:f6:dd:35:ce:b8:c7:92:40:17:46:34:
21:e8:68:7c:cd:47:d1:c5:f0:98:9c:72:c2:50:5d:
bd:71:5c:06:09:e0:66:df:e6:3f:45:a6:c0:31:89:
f3:f7:da:3f:7d:98:00:38:86:f9:4f:cd:98:1f:71:
59:97:a5:4f:5d:7e:77:40:fb:37:fa:b1:7d:59:2d:
27:d0:32:e5:ea:a2:47:62:06:5a:cc:0c:03:c0:47:
d9:c4:02:3c:b4:26:26:38:8e:b3:99:df:b0:c0:be:
cb:60:9b:9f:71:40:32:31:aa:29:d1:9d:7e:7f:2f:
46:e8:86:1c:97:22:18:38:11:06:59:bc:2f:58:71:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:C8:CE:AF:39:B8:50:1C:85:A4:F5:24:09:4D:2F:E9:D7:8C:3C
X509v3 Authority Key Identifier:
keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:49:cc:8d:91:01:11:c1:79:e9:77:e0:3c:0e:48:b3:cf:
e8:3c:d0:53:78:36:00:b1:dd:fe:23:be:bf:8d:ab:16:5f:36:
29:6a:9e:73:97:7e:b0:ee:14:08:af:62:c0:58:5e:52:9c:95:
35:b8:90:88:94:aa:0e:dd:b3:7f:8f:6c:04:96:e1:28:ee:80:
dd:33:87:dc:59:2c:c0:6d:a6:5a:fe:0b:a8:bf:b7:f2:ef:b5:
28:34:37:a9:16:c4:20:52:58:7f:2c:2c:7c:36:c2:a8:c2:74:
28:9d:e0:6e:b1:d4:ae:83:c3:66:64:fc:88:f4:58:d5:61:f5:
6b:6e:6b:7f:83:17:a4:fa:f9:d6:6f:1f:55:d1:47:61:75:22:
85:46:dc:0c:b4:34:ce:0a:df:11:63:52:d5:08:36:75:0f:99:
8e:a8:f9:ea:e3:da:c7:22:7c:91:83:28:eb:ad:74:1b:d4:6e:
d2:61:f0:67:9f:8e:0d:bc:2d:73:11:71:6a:b6:00:75:e3:df:
a5:00:e9:7b:91:f0:d7:3e:cc:24:2a:47:9f:de:e0:2d:1b:f7:
a1:b6:ce:2c:46:04:be:bc:8c:b3:89:7a:29:d3:ac:57:17:a1:
7f:a1:3c:eb:89:45:0e:f5:6b:c3:6b:93:4d:8c:b9:07:d0:99:
aa:a2:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:56 2026 by rpki-client