Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: 7dyjQ3jqR4DhbBeNeVd7JMCrx/fNVipyYiQDSo1YKBI=
Subject key identifier: B3:AE:74:DC:7C:59:DF:6D:D8:6A:27:49:F9:C0:10:DB:CE:CC:73:8B
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 019D37C0B8350A3DB0F11C30CBC506224108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 1314
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: LJC-_jw348E9MJkSCHhTzN2qooo.roa (hash: VigKdlIRvlEEvPkwucOqBByNbZoFlk6R1HJNSe1A/8Q=)
2: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: gakqYWFhl+x18LvfKD+TgXoLuw79GNhIIW9DjofR5fM=)
3: blgxhmEw4o96aXjodyt2NGn4utQ.roa (hash: vqwDcQrAKO9xP6DPN2sBqQxoqvxVDwwR5s/VxKcPEw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b8:35:0a:3d:b0:f1:1c:30:cb:c5:06:22:41:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=b3ae74dc7c59df6dd86a2749f9c010dbcecc738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:1e:5e:1d:b3:32:8b:bc:59:a7:ca:29:60:
c0:5e:cb:3d:59:a4:f0:f9:12:68:eb:34:ff:67:60:
d8:10:a5:af:be:69:66:84:04:80:f4:a0:48:71:dd:
f8:3c:3c:51:d6:64:0f:50:aa:0a:7a:02:4b:ff:63:
3c:2b:ac:1d:9b:31:19:fe:12:11:70:37:85:bc:d4:
9e:7c:27:74:bf:73:b6:17:8c:84:fc:f5:ac:9d:f8:
62:de:84:a6:67:bc:b8:e6:2e:6a:cc:3f:06:6c:64:
66:06:6f:41:9a:cf:c7:39:30:19:a7:a3:04:be:21:
33:6c:c0:af:3e:51:0c:e9:c2:c0:59:94:fe:e6:48:
78:28:fe:84:92:e8:22:33:56:01:fd:c6:4c:55:cc:
9b:b4:9f:9f:bd:27:fb:30:c6:66:34:07:46:3e:35:
b7:a0:b5:4d:22:4c:e7:52:55:4a:b9:49:42:dc:32:
ff:e0:30:70:a0:af:34:14:a7:eb:b0:08:8f:0a:e5:
ca:d5:42:cd:6a:b2:e4:a0:b2:85:fc:cd:26:46:8a:
53:d8:3f:7d:31:ed:4f:84:5b:d7:c4:08:9c:b0:e8:
c9:fc:04:0f:5b:98:14:22:f2:33:40:71:3b:49:7f:
65:92:77:01:7b:42:bd:82:5f:f6:ec:18:dc:89:e7:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:74:DC:7C:59:DF:6D:D8:6A:27:49:F9:C0:10:DB:CE:CC:73:8B
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:85:d8:b7:19:82:f6:8a:c5:2e:49:1b:25:f5:20:a9:64:
81:b2:47:0b:b7:60:66:e2:80:dc:a4:10:b8:ca:e6:55:41:97:
be:f7:14:7d:e3:c8:ae:90:f4:5b:d7:20:8d:c9:3c:31:14:d0:
6c:d9:38:8c:a3:96:34:f9:27:01:3a:37:38:1a:ee:b7:2a:9c:
4a:b8:ad:32:41:bc:c0:b7:96:ec:04:38:4b:76:29:6d:6a:43:
4a:82:b9:26:42:d5:79:4b:bc:0f:d6:1c:da:db:cd:0e:9d:52:
1d:bf:b7:40:44:70:9b:ee:ea:3b:46:96:c0:be:92:05:ce:e3:
8c:d0:6d:4a:1f:b8:0b:d8:94:e8:d1:0e:56:6f:86:01:1d:41:
7a:13:0a:cd:a9:6d:b7:59:c3:2b:a8:65:9e:76:65:d7:c9:e5:
84:78:a0:1c:9a:11:f6:a3:9e:7c:80:59:d7:97:b8:ba:c7:1d:
a0:4a:c1:fb:4d:bf:5e:dc:6e:fd:84:1f:ce:9d:e8:61:5b:90:
97:40:9e:0f:25:6a:56:06:18:72:c1:7b:a6:c0:76:4d:14:fe:
27:b0:03:20:13:8a:fb:19:c1:5d:93:3f:5c:36:95:31:5d:06:
53:6b:24:43:c2:42:24:d4:53:82:de:a6:81:97:76:04:cb:d4:
7d:ef:6f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLg1Cj2w8Rwwy8UGIkEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0
NjViOTkwHhcNMjYwMzI5MDQwMTEwWhcNMjYwMzMwMDQwMTEwWjAzMTEwLwYDVQQD
EyhiM2FlNzRkYzdjNTlkZjZkZDg2YTI3NDlmOWMwMTBkYmNlY2M3MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kceXh2zMou8WafKKWDAXss9WaTw
+RJo6zT/Z2DYEKWvvmlmhASA9KBIcd34PDxR1mQPUKoKegJL/2M8K6wdmzEZ/hIR
cDeFvNSefCd0v3O2F4yE/PWsnfhi3oSmZ7y45i5qzD8GbGRmBm9Bms/HOTAZp6ME
viEzbMCvPlEM6cLAWZT+5kh4KP6EkugiM1YB/cZMVcybtJ+fvSf7MMZmNAdGPjW3
oLVNIkznUlVKuUlC3DL/4DBwoK80FKfrsAiPCuXK1ULNarLkoLKF/M0mRopT2D99
Me1PhFvXxAicsOjJ/AQPW5gUIvIzQHE7SX9lkncBe0K9gl/27BjcieeyTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOudNx8Wd9t2GonSfnAENvOzHOLMB8GA1UdIwQY
MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt
YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm
LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI+F2LcZ
gvaKxS5JGyX1IKlkgbJHC7dgZuKA3KQQuMrmVUGXvvcUfePIrpD0W9cgjck8MRTQ
bNk4jKOWNPknATo3OBrutyqcSritMkG8wLeW7AQ4S3YpbWpDSoK5JkLVeUu8D9Yc
2tvNDp1SHb+3QERwm+7qO0aWwL6SBc7jjNBtSh+4C9iU6NEOVm+GAR1BehMKzalt
t1nDK6hlnnZl18nlhHigHJoR9qOefIBZ15e4uscdoErB+02/Xtxu/YQfzp3oYVuQ
l0CeDyVqVgYYcsF7psB2TRT+J7ADIBOK+xnBXZM/XDaVMV0GU2skQ8JCJNRTgt6m
gZd2BMvUfe9vpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:23 2026 by rpki-client