Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier: J4m4AnkmUBieBQNu4zjXBsNQrxueHTdWD+iiH7aR01M=
Subject key identifier: C4:A9:59:F5:27:96:29:F4:B9:2B:E4:90:1C:00:60:B8:56:F8:91:A4
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 019D371B5762A0F1D02EE3C527AA187A151D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 01:00:31 +0000
Manifest this update: Sun 29 Mar 2026 01:00:31 +0000
Manifest next update: Mon 30 Mar 2026 01:00:31 +0000
Files and hashes: 1: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: T3TyN4Uzj8854+AbPJrm/vrU/+otthtSqQbHbUmJ3iE=)
2: Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa (hash: blwSnQqhNIoWvduAY/JgSuj6c5kvRYhLpvdaBWUqc10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:57:62:a0:f1:d0:2e:e3:c5:27:aa:18:7a:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Mar 29 01:00:31 2026 GMT
Not After : Mar 30 01:00:31 2026 GMT
Subject: CN=c4a959f5279629f4b92be4901c0060b856f891a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:67:06:5e:96:69:8b:9a:21:89:ae:e9:84:
83:7b:a4:85:10:fc:a9:2f:e1:4b:c4:e2:06:e4:f4:
2d:2f:83:b3:71:a9:e6:6d:a0:2e:28:aa:3f:68:f4:
b0:70:ef:69:20:bb:0d:97:61:02:d7:0b:31:7e:95:
9a:97:2b:11:67:83:eb:87:14:4c:93:42:6c:84:77:
d2:61:ef:8d:30:11:ae:48:b5:a4:3d:07:62:f5:81:
10:f8:e9:79:a2:73:76:98:da:29:94:60:73:c8:9f:
ce:46:db:c4:91:2f:50:48:0b:f6:92:3c:0b:49:28:
83:cf:0d:46:39:d4:dd:ff:90:bb:63:14:ff:6c:11:
f0:1b:08:2c:c8:7d:f0:0e:b3:79:03:60:70:6b:77:
42:6f:9b:28:62:26:16:ef:5e:d1:d4:34:b9:ea:9a:
73:9d:be:37:df:c3:9c:82:24:5b:f8:45:59:f0:50:
de:d5:ec:07:23:87:a1:b9:ae:38:89:ee:de:a5:1b:
fe:75:f1:13:41:0c:52:bb:7f:0d:9c:a5:fa:a8:12:
4d:2f:a9:2c:e5:27:bf:e5:8c:b6:c4:4f:b7:a6:5e:
c6:70:06:91:c6:36:86:e1:43:e3:52:4b:4f:d9:92:
0b:6f:7e:fb:c3:ec:2c:e2:d7:84:55:55:5f:76:b9:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A9:59:F5:27:96:29:F4:B9:2B:E4:90:1C:00:60:B8:56:F8:91:A4
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:38:2b:85:6d:c7:f0:36:8a:b3:cd:61:e9:36:d2:d6:21:
b3:3c:d0:24:82:8f:c7:dc:5b:f1:fe:f6:a9:cd:f9:c9:ce:96:
3b:5a:59:af:82:ee:60:21:67:4c:19:3f:ff:7d:51:32:b2:5f:
b1:a3:45:19:7b:94:8e:d3:62:f5:78:f7:70:76:de:e7:22:e8:
af:85:65:a8:0f:f2:db:e0:e4:c0:66:21:a7:7a:51:39:dc:6f:
48:cf:d9:08:67:d4:67:84:69:02:60:aa:cd:af:fa:2b:b2:d6:
3c:cf:b7:c8:c4:22:50:6c:ea:4e:b5:d8:bc:f1:5f:d8:d6:98:
95:6a:d0:3d:35:f6:84:33:66:66:61:98:cb:6f:04:bc:35:d3:
de:eb:5b:6c:ed:c9:34:14:c7:bf:39:65:f8:8b:9b:d1:81:08:
65:75:e5:67:0d:f0:e5:8e:7e:56:d1:4a:79:65:dd:c4:e3:29:
3b:2a:73:8c:5f:7a:05:71:f4:fc:45:0d:ef:c5:b0:48:49:e9:
cb:ec:f9:fc:02:51:fa:d4:a0:f8:e3:54:7b:83:b3:aa:f0:ab:
43:80:7d:45:29:f4:5c:22:a7:74:f7:11:4e:7c:79:3a:1b:e7:
c0:2b:5a:4e:ee:78:cd:c9:12:5e:36:12:a9:30:71:76:c3:ef:
85:f8:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:27 2026 by rpki-client