Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File: V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier: sff1CdLS0/+D2tB66ErAkQOi9MBRPxvF224KXRXnRfk=
Subject key identifier: D5:E4:0E:8E:69:B5:CF:DA:F8:B1:5C:37:58:F3:DA:FA:43:B9:FB:47
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer: /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial: 019D3978050041129932706CB27ABE3F1E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number: 7F
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: wg5dSgS7nsLY88FKaAox0khx+2BNXPbLhJac0yaznAU=)
3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:05:00:41:12:99:32:70:6c:b2:7a:be:3f:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=d5e40e8e69b5cfdaf8b15c3758f3dafa43b9fb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:23:a3:66:bf:0e:a6:52:1c:b3:6b:7e:47:
46:c0:34:a2:b9:50:a9:fb:f4:08:f5:44:17:ef:df:
10:4c:fe:38:a9:f3:12:54:ce:7a:52:a7:d6:7f:1c:
31:69:da:9d:66:34:a3:e7:4e:10:47:9d:c1:5c:73:
d9:d8:4e:f1:99:c3:6a:84:45:1b:58:67:72:ee:c4:
9a:bf:db:2a:40:1b:55:c6:1b:a2:e4:e8:d7:06:33:
f6:cb:e6:39:37:fe:fe:b9:5a:3a:1c:85:70:7a:51:
79:92:5f:6c:1d:33:25:12:96:c3:fd:35:15:c0:d1:
48:96:bc:74:43:34:33:8b:30:85:4c:5d:2a:5b:4b:
37:5c:4e:17:b1:f4:46:4b:bc:32:25:3b:13:4d:0f:
32:f9:60:59:26:25:93:14:9c:81:ee:42:7d:12:83:
e9:37:8e:68:0e:de:44:cd:d3:11:7a:b4:e8:db:ae:
2b:c7:62:4e:c6:9e:0b:e4:1e:8c:13:8d:7a:67:65:
c7:ab:b9:b3:f8:f1:f3:03:2e:a4:09:73:de:ea:d9:
de:95:ea:43:27:17:90:d6:34:3e:52:15:3c:df:ae:
37:04:a5:47:31:ce:b6:f1:ad:20:09:97:69:e0:9d:
b8:46:53:84:97:f3:17:a0:11:a9:aa:4d:5b:1d:b3:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:0E:8E:69:B5:CF:DA:F8:B1:5C:37:58:F3:DA:FA:43:B9:FB:47
X509v3 Authority Key Identifier:
keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:88:c5:89:6e:76:2c:cf:bd:a7:67:79:0e:09:7e:b5:cd:
f3:85:3f:4a:35:f3:0d:81:05:03:69:d5:ea:01:19:2d:d8:0c:
3a:50:da:9c:01:42:76:15:cb:28:55:c2:8e:00:eb:af:58:4a:
b7:e6:7e:e2:99:ec:b6:5f:9f:59:1d:6c:0b:79:e9:19:27:c5:
c1:a8:71:f9:67:65:04:a4:69:2b:9e:f5:da:42:9a:bd:d1:81:
fd:45:bc:9d:6f:b6:d5:2c:5a:cf:b9:a3:21:6b:9e:ea:ef:fc:
1e:28:1e:37:bd:5e:47:7e:85:de:fc:d8:4a:12:25:5a:c4:92:
39:11:e4:ff:33:37:d9:c1:43:f8:48:e9:49:a7:0f:7c:8a:3c:
55:f2:93:cb:be:07:bf:b1:dd:1a:31:9f:3c:ff:17:35:39:1b:
01:3e:39:cc:59:8b:ac:d9:4e:f0:c3:52:7e:79:84:29:e9:24:
43:fe:ed:1c:a1:ce:a1:fb:bb:8f:95:19:b8:a6:a0:86:bd:00:
66:84:10:df:a8:f3:41:5b:d2:08:30:83:6f:72:61:e6:ba:9d:
fd:a8:ce:fa:d7:7a:cd:57:46:f9:37:e4:58:55:2e:6c:b6:19:
ea:8e:94:15:a9:ad:f4:ed:86:5f:24:93:f4:3c:f6:d6:e2:ec:
e4:e6:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:18 2026 by rpki-client