Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: 9AdGpeuWamb3SM7dDSQhoVMViK3R05JuTn69uvU7WAY=
Subject key identifier: B9:4D:1D:31:A6:AF:67:8B:E2:EB:35:BE:28:0D:22:39:1F:FB:93:7E
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 019DCC745544B733A63E2B9EF360286EF557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 120C
Signing time: Mon 27 Apr 2026 01:01:09 +0000
Manifest this update: Mon 27 Apr 2026 01:01:09 +0000
Manifest next update: Tue 28 Apr 2026 01:01:09 +0000
Files and hashes: 1: 1AjCxB6TkTjdHZOvofHm6NOOWfo.roa (hash: d4r+30BMgqiFQp0F8pzgKQ5i8LeY9r3mXEVd6tCLHak=)
2: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (hash: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ=)
3: 6yXvB2mZ6DFLBKqtlv0jb3RhyEI.roa (hash: 4T1luSU4DmiSKE8Cb9puNxoiNBazFMCURFxFQNY966Y=)
4: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (hash: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y=)
5: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: ICzNLTI1x0kpwmhcIVsRc5Ig3PQc4HXgPHoJoVdbV68=)
6: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (hash: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo=)
7: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (hash: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:55:44:b7:33:a6:3e:2b:9e:f3:60:28:6e:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Apr 27 01:01:09 2026 GMT
Not After : Apr 28 01:01:09 2026 GMT
Subject: CN=b94d1d31a6af678be2eb35be280d22391ffb937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:22:7f:b4:c5:d2:22:3e:71:42:3e:60:87:
69:24:d8:75:5c:da:0f:01:86:cb:a8:5b:e1:98:6d:
72:8b:8e:27:44:cd:f0:ad:62:2a:3b:ea:b5:c5:f2:
ed:24:71:34:ff:ee:d7:8e:12:cd:e2:bd:0a:28:83:
a5:33:94:72:97:f3:03:21:04:17:85:df:53:25:f6:
fb:a1:73:c3:0e:db:f8:16:92:4a:28:ae:28:01:70:
40:05:41:34:e9:a7:85:87:22:3f:85:c6:3a:fd:fc:
01:f6:39:7d:c3:83:60:38:a8:f5:97:0d:fb:4e:07:
91:e3:24:77:67:d2:86:b3:2e:3e:d9:3c:6c:3f:88:
33:17:29:e0:d7:f7:5d:e5:60:44:9f:ad:97:dd:1d:
33:ca:86:0a:55:05:d2:fb:a1:45:38:49:ce:f8:a7:
e9:75:39:ed:3d:a4:ef:23:ed:82:c0:42:0c:b5:d2:
10:f6:81:42:8f:05:29:22:41:8f:84:1c:62:9a:bc:
d1:fc:4c:6b:aa:78:c9:d8:14:b5:90:46:83:ff:7d:
7e:a9:b6:0b:a5:c2:d6:d6:12:b0:38:45:b0:9a:3d:
bf:cb:86:4c:91:1f:2c:a0:0b:31:39:5e:5e:64:db:
46:ea:b5:6d:06:54:05:a7:21:73:e5:a1:98:de:0f:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:1D:31:A6:AF:67:8B:E2:EB:35:BE:28:0D:22:39:1F:FB:93:7E
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:db:58:f9:27:f6:65:a5:36:bf:3c:bf:d9:35:f1:ca:fa:a8:
7d:ea:da:27:d3:88:fe:7a:c0:fa:47:84:bb:64:d7:2b:b5:bf:
74:98:a7:38:9f:2d:7a:65:1b:27:41:77:42:b6:4e:e7:bf:3f:
0d:6f:e5:f7:a9:46:97:db:99:36:7b:bf:44:e3:f8:ba:0e:28:
2d:40:e0:15:06:3a:74:a5:db:6d:e8:c8:0a:6e:d6:4b:2d:6e:
19:10:9f:95:c7:96:8f:ad:0e:24:30:38:e9:c7:95:41:73:1d:
ca:30:45:6b:ca:4e:a4:9d:a1:fb:ae:99:1b:55:01:43:77:ea:
44:83:31:ae:ac:65:f3:f7:32:ff:5f:34:b3:c6:1f:dc:e4:81:
78:0d:8f:ba:1f:14:28:08:13:74:64:a2:30:a4:70:8e:b4:65:
f0:64:5e:99:fd:d6:97:24:de:a1:9a:6e:fd:4f:58:cd:ea:e5:
15:d2:d7:a9:7b:fe:77:1a:71:4d:b6:d6:26:60:dd:be:8f:79:
f8:f2:8d:7a:f7:e2:3c:48:58:c4:07:ed:59:2e:5d:05:bb:f9:
a3:2d:ad:1a:5e:f0:9c:f6:9b:1c:42:31:ac:cb:0a:ae:01:2a:
74:ce:3f:c8:aa:ae:cf:6b:3d:3e:e5:5b:c2:ec:5a:eb:c6:dc:
4b:c4:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:05 2026 by rpki-client