Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier: kz30WdOmBe61JetGpqQ1SmcL/3DpXWcX43BbiicgV0U=
Subject key identifier: 8A:FB:43:9F:E5:B0:D6:12:61:66:B9:A5:32:20:76:30:77:76:6E:A5
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 019D3940F424B232BB0A0F88ABE59A854935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: JHY0GDYKIt-9Vn4AUyhaDkdiW2w.roa (hash: it7x+UgEzab8l9txt69a/1I+wVvRxBXOQLBewnm6JCA=)
2: Q7BJcsQY7_3P4zXrcrrE9sBxSmk.roa (hash: toO4RVQNKW7VmbI8kxFH7ZrhAHouGuOO2lQDDPuxpqY=)
3: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: zRouygbmN8f3m2ajNxuX5nYe9704jo5IuZuAOpG9ODI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f4:24:b2:32:bb:0a:0f:88:ab:e5:9a:85:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=8afb439fe5b0d6126166b9a53220763077766ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:17:ae:72:2d:9b:80:64:9d:e4:a6:16:9f:
a1:5a:3f:ea:2f:9b:bd:a6:7a:33:f7:47:62:2c:31:
ec:2a:76:e9:96:7c:24:29:fb:c1:72:50:a3:6b:22:
fc:d0:0b:ac:8f:d5:49:2a:18:22:5b:cc:26:1d:3e:
e3:8f:48:40:ce:a7:d8:3e:15:6f:03:1a:0a:42:b3:
4f:97:2b:01:05:49:b2:a7:45:d6:aa:6b:19:e7:f6:
b9:7b:b3:c7:f7:25:81:8c:d8:9b:5c:99:39:a4:29:
a1:93:66:a0:d6:6f:eb:7f:0c:3e:94:78:22:9f:2f:
5e:99:fb:ba:9b:7f:14:14:cf:c5:21:de:1c:0d:bd:
da:cf:df:16:6d:80:b9:6d:cd:6b:90:ae:37:60:7c:
93:b2:8b:a2:16:94:77:ad:61:e8:54:14:d4:73:a7:
1c:43:92:1d:d9:92:62:0c:bc:2c:6a:63:bc:58:ca:
49:21:4e:41:90:ab:1b:6a:39:d2:f0:1b:0f:24:97:
79:57:20:04:a8:5a:b2:ab:c5:9e:38:e0:35:ec:7b:
60:18:90:ae:f9:2e:ba:8b:0a:62:2c:58:1b:b9:53:
cc:e4:2a:07:cb:7a:0a:c3:08:26:14:e8:4c:f6:83:
bb:0e:1d:72:ba:94:d1:f8:80:7d:aa:87:67:d4:18:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:43:9F:E5:B0:D6:12:61:66:B9:A5:32:20:76:30:77:76:6E:A5
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8f:cc:ff:e2:5b:29:6f:4a:b4:67:36:cd:fd:dd:87:69:46:
ac:f3:fc:a0:44:79:75:8f:17:81:83:88:07:21:9e:d9:19:83:
54:eb:5f:28:bb:2c:6b:2e:80:1a:7e:2c:9f:c5:3a:fc:04:e3:
f0:82:93:31:91:b6:ca:08:4a:d8:ef:0a:f2:98:ef:d9:ed:91:
e4:58:c7:76:16:e4:89:69:39:9f:df:c4:19:37:68:56:57:a1:
56:33:29:51:1f:89:ae:df:02:8e:7b:75:43:8c:f3:4e:43:56:
ec:d4:31:e1:2d:6e:73:e5:d9:91:36:6e:b8:88:7c:b6:7c:81:
55:90:27:24:64:d1:a9:88:b1:90:6d:22:c7:d9:3b:a7:f2:e1:
6e:34:df:f1:ce:04:92:db:4e:11:03:ec:5b:19:10:cb:ce:15:
61:4e:d8:6a:25:8b:f9:4d:17:a9:eb:c8:be:eb:59:e1:d9:d8:
ab:ff:a9:08:70:8c:66:b3:01:6d:76:86:ea:70:d3:ae:a1:1b:
40:98:0d:3f:f7:0a:86:58:96:f3:4f:7e:6a:c0:ba:16:58:34:
d3:65:fd:e2:60:d4:c9:25:8c:cb:18:8e:6f:32:8a:2b:44:bf:
eb:0b:49:71:98:e5:e2:6d:79:cb:45:f1:46:19:b9:8a:e7:5e:
85:5a:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:54 2026 by rpki-client