Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: kS1GvLRLqaJVZjFua0jZLiGK/euB+q8exBAWVYMOYyg=
Subject key identifier: CC:2E:E4:C6:D6:8F:91:86:C5:CC:45:93:67:FF:F3:CA:8F:9A:A1:05
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019CF572AF1E36BE874A23DA10D8FE7C85C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 1871
Signing time: Mon 16 Mar 2026 07:00:59 +0000
Manifest this update: Mon 16 Mar 2026 07:00:59 +0000
Manifest next update: Tue 17 Mar 2026 07:00:59 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: YacT7+wwklFd0AJY0oMXToj9Di+vYG9WccRtoraMxzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:72:af:1e:36:be:87:4a:23:da:10:d8:fe:7c:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Mar 16 07:00:59 2026 GMT
Not After : Mar 17 07:00:59 2026 GMT
Subject: CN=cc2ee4c6d68f9186c5cc459367fff3ca8f9aa105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:de:c1:98:fb:88:ab:af:4b:e4:7c:e9:d8:
5c:5e:38:d4:f0:b9:a6:a3:df:98:40:12:4a:67:fb:
5f:87:f1:ee:29:a0:9d:78:5c:4e:67:5e:ea:f7:5e:
79:0d:05:3e:63:00:4b:dc:50:d1:62:6d:83:93:70:
f1:7f:68:24:8f:88:77:c3:8f:39:16:ad:8a:d4:b8:
38:8f:8e:13:01:38:c0:28:4b:8b:08:e0:b1:01:4e:
9f:31:62:30:2e:0c:43:98:f8:b3:01:79:5b:f0:9f:
a4:19:c1:1f:a7:dd:ed:6c:0a:2e:96:2c:66:7e:50:
e3:c1:da:65:57:50:ae:e8:69:96:20:2a:22:05:8e:
af:95:0f:c8:62:b4:0c:aa:88:2a:36:19:66:a2:94:
16:78:81:5e:42:cb:5f:93:39:85:4a:aa:74:2d:41:
4c:86:b2:83:76:05:3a:23:52:da:51:94:e2:d0:b3:
9a:70:b7:58:bc:38:83:ce:ea:b9:98:9e:d8:40:f9:
44:ab:ef:a5:d6:72:34:4d:7f:1c:16:31:37:43:c8:
fa:80:45:ff:bb:8e:92:48:5f:c4:c7:84:8e:e4:82:
59:39:0d:94:2e:c0:d9:db:8b:e3:a8:4b:3e:16:05:
68:a0:63:c4:93:64:09:0c:a4:88:69:5c:01:7d:b6:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:E4:C6:D6:8F:91:86:C5:CC:45:93:67:FF:F3:CA:8F:9A:A1:05
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:67:40:0f:b5:c7:21:4a:94:4d:34:cf:fd:0b:dc:50:4b:57:
c4:25:74:5a:bc:c2:aa:da:5c:10:82:32:29:c8:6f:7c:c9:69:
3e:b1:99:2f:07:95:21:8e:b0:0c:ce:ed:2e:4e:79:2c:a2:59:
83:67:b5:1f:d1:ae:0a:f1:b3:ba:92:91:27:af:94:3c:29:3a:
b3:de:6f:6b:b3:60:2d:f1:f9:59:22:9d:8e:e7:3e:dc:d5:d6:
21:e6:97:6c:df:9a:a1:fc:da:97:6d:40:81:71:4a:db:ed:d0:
57:14:cd:c8:a6:e5:86:a1:8e:34:64:94:4e:81:d4:f4:89:92:
48:01:d1:29:0f:a4:1a:7f:fe:8c:69:ee:d3:17:14:18:81:64:
13:10:89:ee:48:63:1e:b4:49:71:5c:d2:65:e5:29:a3:4d:71:
56:09:fa:ca:5b:59:5b:69:83:72:67:56:85:cb:2b:28:2e:55:
ea:10:95:a0:fd:96:5d:21:71:dc:e7:67:84:bf:a4:cf:2f:b1:
fb:2e:9b:8c:61:b0:b3:13:8c:06:34:77:db:b0:53:fb:f4:05:
ba:7e:85:b1:36:20:48:8b:9f:10:e6:f7:f7:20:24:70:b1:84:
bb:84:57:e1:e0:57:04:77:d4:12:f5:29:56:30:f3:4a:51:7c:
16:09:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:31:57 2026 by rpki-client