Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: DygBkClBdIPKugkriy6tns638xK1cQAbyCcQbnCJ8gE=
Subject key identifier: F3:B2:34:53:D0:0C:04:BB:01:9D:08:7F:FE:D6:53:6F:79:04:2E:CD
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 019DCFE35718702F216C10EB3DFCEB92E617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0821
Signing time: Mon 27 Apr 2026 17:01:15 +0000
Manifest this update: Mon 27 Apr 2026 17:01:15 +0000
Manifest next update: Tue 28 Apr 2026 17:01:15 +0000
Files and hashes: 1: 4XP7HiVkwJb7VBFxlRqtJUdrlkY.roa (hash: OOEInEqutnloYStbQZqNgEuL98Agm2HcQLCCh/vFSb4=)
2: LcnRPWMP0InV3_yP2jprbNChb0s.roa (hash: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8=)
3: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: P0x0FE3+bdrB5KT2QcoQx7sIFMZUwMBAzU354L/ZMvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:57:18:70:2f:21:6c:10:eb:3d:fc:eb:92:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Apr 27 17:01:15 2026 GMT
Not After : Apr 28 17:01:15 2026 GMT
Subject: CN=f3b23453d00c04bb019d087ffed6536f79042ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:c2:85:03:97:bc:d1:18:3a:ab:22:36:0f:
75:84:bd:1f:6a:8e:0f:70:f6:80:c1:9e:b0:21:a9:
a9:b6:4e:b0:b5:cb:59:e0:d4:22:b8:67:1c:3b:cc:
36:d7:52:2d:88:f4:4b:94:a6:80:c7:5f:1d:86:d6:
de:07:95:8e:08:de:c7:eb:a1:b5:8e:de:ff:ad:cb:
c0:82:ca:0f:c4:90:f4:86:cf:30:89:f1:e4:4f:fd:
1e:3b:41:8a:29:9f:bd:f6:6a:72:e4:f4:07:da:d2:
0c:9f:66:1b:8d:a3:43:57:69:99:5d:f9:56:c8:b9:
3c:05:56:37:87:18:56:c7:9c:4b:00:16:51:9e:37:
d0:f6:56:36:b9:d7:c7:49:03:60:af:c0:fa:d3:3c:
92:d4:20:5d:1f:2f:6d:0f:99:8f:29:8d:e0:ed:6b:
b8:8e:cd:46:84:40:22:40:11:ec:a5:25:88:e3:84:
a5:c6:00:de:9b:4f:7b:0a:fc:55:ec:ca:d6:39:10:
0c:65:a9:60:8a:2f:8a:8b:d1:16:0a:b1:01:87:53:
f8:40:d3:7d:cd:d8:3e:b8:0b:56:5a:17:55:70:67:
cd:c3:4a:c6:85:ca:a3:ab:d4:30:b7:0b:92:a0:f7:
7e:a6:5c:ed:2a:42:2a:aa:58:79:d3:42:c8:53:53:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:34:53:D0:0C:04:BB:01:9D:08:7F:FE:D6:53:6F:79:04:2E:CD
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:77:e8:cf:f6:97:35:af:b4:bc:f4:e0:86:ef:cf:5b:90:
f9:24:be:00:36:cf:03:8e:27:1a:ba:56:75:ac:23:0d:bd:a1:
ac:0d:17:dc:37:3e:63:90:4d:8d:56:2c:41:19:38:19:c2:0c:
2e:4e:06:79:6a:27:30:2a:d3:7b:67:89:31:60:d3:8a:10:87:
43:5c:2a:62:d0:c9:13:ef:6f:18:62:d8:9e:84:19:bb:d2:84:
00:e9:74:08:be:0e:4b:bd:4e:b0:7e:20:ce:6d:d5:00:87:3c:
51:44:71:b1:6c:e9:77:e8:0a:ea:a4:22:ac:f4:70:fa:7d:d6:
0e:ae:e9:0d:62:cf:ba:b7:0e:9d:4a:86:ec:ff:28:7a:17:4a:
ff:30:cc:9d:6a:ec:77:b8:12:db:8e:dd:5e:89:59:e5:39:b7:
92:f3:05:e9:a0:0a:0f:e3:66:f6:56:20:26:d8:24:98:c5:2d:
b1:79:fd:93:0c:e1:3d:2d:4e:0c:0b:01:33:74:55:4a:dc:d8:
94:11:b0:37:45:ec:c4:e9:ac:4c:dc:ad:97:74:8c:73:65:5f:
d6:7d:4d:32:58:70:43:d1:d3:d5:a9:35:96:a8:21:5d:02:eb:
5f:cf:56:60:24:b3:15:0d:75:d3:2d:56:69:6d:d4:03:7a:a8:
a9:25:5f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:00 2026 by rpki-client