Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: F4wkHuxAy+9d0pM2CjfUsDNgVtc2rX1ujdSJL/7SSqk=
Subject key identifier: 70:BA:6C:2A:40:53:CD:B8:3A:DC:6A:A9:D5:73:72:1E:A2:77:7E:32
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 01A17C5FDAA140560EFCAF5A57A42D31BD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0A08
Signing time: Tue 27 Oct 2026 08:00:18 +0000
Manifest this update: Tue 27 Oct 2026 08:00:18 +0000
Manifest next update: Wed 28 Oct 2026 08:00:18 +0000
Files and hashes: 1: 4XP7HiVkwJb7VBFxlRqtJUdrlkY.roa (hash: OOEInEqutnloYStbQZqNgEuL98Agm2HcQLCCh/vFSb4=)
2: LcnRPWMP0InV3_yP2jprbNChb0s.roa (hash: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8=)
3: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: kEYrewmQSFOmhzjMfWmyaz6gNZ84ieZrpLinhBgznM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:da:a1:40:56:0e:fc:af:5a:57:a4:2d:31:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Oct 27 08:00:18 2026 GMT
Not After : Oct 28 08:00:18 2026 GMT
Subject: CN=70ba6c2a4053cdb83adc6aa9d573721ea2777e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:b8:1a:e7:95:d4:28:21:2e:c6:ae:3a:64:
5a:12:fe:d6:72:22:4d:1b:f0:28:75:9e:d7:09:f2:
02:e3:4b:60:d6:d8:6e:98:68:31:82:c6:7e:f6:71:
75:76:0b:54:68:57:dd:7b:5f:0d:39:ab:5f:3b:29:
35:f1:0b:7a:3c:a6:d0:37:98:0f:28:cf:e5:12:28:
bf:e8:32:4a:65:49:45:4a:e4:f7:85:76:33:f1:c1:
01:a2:7b:db:25:c3:6f:14:e0:b7:58:dd:0a:eb:f6:
e5:f7:ae:86:dc:77:bb:4f:4e:2b:1c:8f:50:9f:76:
8d:c5:0c:7f:11:bf:dd:d7:4b:3c:21:43:2d:b4:cc:
20:ab:8a:73:67:27:89:02:86:63:e9:e6:f2:05:e2:
d0:4f:c6:82:99:91:83:69:12:cc:45:75:57:f2:da:
5a:5a:71:cd:57:05:c5:65:a1:13:55:dc:16:f9:27:
6c:2a:27:13:17:db:82:1e:57:32:f3:92:df:51:f0:
47:99:0c:59:e9:26:04:b5:04:a1:61:07:97:45:76:
24:bb:38:7f:2c:42:4b:d6:74:f5:f6:e1:2a:2d:e5:
cc:0f:5c:41:6f:7a:54:d9:1e:ea:fc:13:26:eb:b2:
7b:97:d5:5a:7e:f5:6f:06:04:6d:a0:7c:63:55:bf:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:6C:2A:40:53:CD:B8:3A:DC:6A:A9:D5:73:72:1E:A2:77:7E:32
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:e9:e8:9e:bf:6f:68:20:72:71:09:9a:3e:ec:c3:d8:d8:
9a:f4:dc:27:b1:30:27:09:3c:6a:0a:d1:07:86:5a:1c:ac:5e:
13:2d:96:b1:a4:67:64:26:3d:3a:bb:a1:16:45:b1:b2:d1:98:
f3:6b:da:17:68:89:40:84:fd:56:c0:76:50:57:02:5f:be:f0:
39:17:09:a0:7e:af:43:8e:5e:38:2c:ec:ef:55:87:df:06:1f:
60:7e:cc:2f:38:99:bd:6f:d3:1e:e9:72:19:9e:35:07:44:e9:
9f:68:70:9d:4c:f9:e9:a0:4a:a9:f6:1a:b2:b9:af:fb:04:47:
0b:6a:37:c6:52:e5:aa:98:45:39:be:cf:90:4f:8d:cd:12:66:
39:78:46:e8:bd:91:85:94:74:da:23:62:7e:a7:c7:37:3b:60:
5e:16:9e:b3:21:59:e5:24:c5:c8:5e:5a:fa:d4:35:d5:a2:a6:
fd:17:6d:91:e4:84:ec:5b:ee:3b:05:02:ec:85:ec:c3:29:af:
4e:ae:c2:eb:e4:0d:6b:92:63:6c:c0:61:72:b6:80:ce:10:d0:
b1:e6:54:79:44:b3:b0:12:87:ed:ad:e0:3b:c0:a7:ff:41:55:
06:a7:fa:12:b7:2f:e6:ee:53:07:a2:68:9b:fd:e6:ed:de:26:
32:02:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:38:36 2026 by rpki-client