Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File: V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier: s9RJIUB8gusVdqQ2JjW/D9IBPBSeSbFrVDBOKcDcceM=
Subject key identifier: AF:DE:30:80:3C:45:19:84:CA:95:0C:AF:6B:17:20:4F:06:F6:62:7C
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 019CE6A43B680CFE783AE28AD8396F9C6C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 10:00:48 +0000
Manifest this update: Fri 13 Mar 2026 10:00:48 +0000
Manifest next update: Sat 14 Mar 2026 10:00:48 +0000
Files and hashes: 1: QHKubAaWU3rZXqcgMw_rFgGwHlw.roa (hash: 84jkJFXrjsdItstz0iNY4wQwy8CG6Wjsb9Ta7TD1huA=)
2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: bfgurrNMJzgayQLSrI7oL/iwHeqMmhUN/dapI8d2fH8=)
3: gCxy-B6_9nnMrK0Bb6ykXoX-kvU.roa (hash: 3OI7nKRRWyMq1X53pCEQC3Z/sntzJNq/svM0w34ORBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:3b:68:0c:fe:78:3a:e2:8a:d8:39:6f:9c:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Mar 13 10:00:48 2026 GMT
Not After : Mar 14 10:00:48 2026 GMT
Subject: CN=afde30803c451984ca950caf6b17204f06f6627c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:aa:13:4a:b9:b0:74:b9:11:92:77:b1:e9:
00:1f:99:20:84:c5:d7:3d:c9:3d:27:50:a7:c1:6c:
af:71:20:03:96:52:15:2c:a5:ed:08:98:45:62:4e:
17:a3:1d:75:2c:5a:3c:cb:af:98:07:d8:ce:53:cd:
ef:90:0f:b1:82:47:85:14:0a:29:12:44:2b:e0:ef:
d3:38:3f:25:b0:ba:5f:07:c0:3f:8b:9a:57:5d:05:
34:9c:2e:41:99:c5:54:67:9a:49:80:7f:60:b0:da:
b7:60:88:47:65:6b:59:4a:98:bc:27:0a:51:f0:7b:
45:58:56:7e:56:e3:fd:4c:68:1a:ca:b6:6e:e1:c9:
5a:ae:4f:fb:d3:63:0f:b7:4a:bf:cb:2f:d5:2a:1e:
1f:47:b2:18:97:1e:9a:ab:3e:a6:49:2d:cb:0c:0e:
94:db:77:06:86:ad:e8:9c:99:06:36:1b:d9:11:7d:
9a:c6:57:d2:7d:d9:f9:70:5a:9b:97:02:6d:73:15:
ff:60:c6:6e:cf:74:eb:5e:c5:f4:b4:7b:60:e4:7c:
8e:32:08:f7:80:2b:d2:ce:48:08:11:7f:71:c2:f3:
9f:3f:6d:d5:14:ca:e4:50:58:37:fb:ca:f2:05:12:
36:46:d2:65:0e:c3:a8:2b:ac:e9:4f:ff:eb:cc:55:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:30:80:3C:45:19:84:CA:95:0C:AF:6B:17:20:4F:06:F6:62:7C
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:ab:b9:ac:ee:3d:14:08:43:f3:08:b2:57:de:90:16:00:ec:
76:20:3d:f1:99:7c:03:bb:24:85:ac:ef:7e:98:4f:0c:07:08:
1a:de:ef:a9:ff:1d:8d:19:3b:a0:c9:3a:8d:b6:80:26:6a:9c:
8b:76:d1:fb:40:3a:02:28:f9:36:15:70:70:ac:57:4f:89:a9:
5b:b2:e2:9f:6b:46:4f:a8:62:03:95:9f:94:3a:5b:79:1d:1f:
ab:d7:39:43:4c:7d:eb:c1:13:36:be:d5:dd:77:c2:08:06:da:
53:1b:29:5f:5c:88:da:8c:03:5c:df:62:dd:06:1a:76:33:69:
27:99:0c:34:ae:71:85:2c:63:70:aa:a4:23:e8:0f:37:45:f9:
d1:40:a0:ec:d0:d2:da:70:13:a8:a2:c2:3e:62:e9:fa:c1:00:
25:e6:a5:76:96:71:52:71:0a:30:0b:43:e5:c7:30:c8:ce:a6:
2c:2c:0a:dd:a8:89:86:98:5a:b5:6a:25:4d:ab:da:0f:35:0d:
81:d7:00:b8:44:29:89:ea:2e:b2:64:a0:ab:18:47:5d:5b:2f:
15:6c:ff:9f:ac:e6:df:6f:9f:f3:bb:ab:4d:30:19:9b:05:66:
67:53:b5:a7:06:b4:b5:c3:4b:d3:af:3d:1f:f8:38:a2:bc:f8:
1a:15:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:23 2026 by rpki-client