Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: K7j5+wwdDLojKu3dk+11fjKVXeAmFlpsflGnCkzgE5I=
Subject key identifier: F0:80:34:25:F8:54:13:86:16:46:17:92:C6:54:A8:24:1E:5F:41:6E
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 01A179CCE97CD3D59C48670D8257676D2EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 0634
Signing time: Mon 26 Oct 2026 20:00:34 +0000
Manifest this update: Mon 26 Oct 2026 20:00:34 +0000
Manifest next update: Tue 27 Oct 2026 20:00:34 +0000
Files and hashes: 1: 4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa (hash: bX+Qa++BgGAVTurdoW+HtFnLZYYAEuUvxiVv/7oFu2g=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: Yu47ETPbVMC7LlIFzEjwNpOgvWCniHjS9sjmTMHJSi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:e9:7c:d3:d5:9c:48:67:0d:82:57:67:6d:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Oct 26 20:00:34 2026 GMT
Not After : Oct 27 20:00:34 2026 GMT
Subject: CN=f0803425f854138616461792c654a8241e5f416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:ec:67:f0:1e:a3:de:23:84:9d:e0:08:4d:
90:34:31:f0:4a:0a:bb:8a:ec:2b:2a:ca:ce:ff:7e:
47:61:88:75:e9:ec:9f:59:e4:73:b4:2a:6e:bc:e7:
12:c9:1a:1e:52:87:67:6e:1f:8e:ba:01:8c:4f:68:
ff:55:ee:e8:4d:82:fb:bc:9f:69:9e:9d:0d:8c:ea:
4b:43:77:ca:8c:85:f9:1d:71:8c:03:03:b2:bc:9a:
72:b2:f1:81:06:bd:e4:bf:c6:a3:fa:37:82:10:07:
28:40:52:87:f1:b0:50:9b:47:75:8b:2b:20:1f:6d:
b3:bb:f3:c8:d1:cc:27:0c:3f:36:eb:fe:fe:b7:aa:
4b:56:a2:42:42:e2:ae:9c:70:18:f4:67:d4:b7:f4:
57:aa:e5:0c:59:66:84:42:a3:92:0c:2d:d4:ce:c6:
d8:1d:84:c6:18:9c:af:c2:0d:13:3b:14:ad:df:a2:
5b:68:6d:4e:7f:ac:6e:6b:7d:c6:89:28:06:f4:2b:
1c:f6:49:0b:75:2e:a3:ed:33:c0:e9:d9:4a:8a:5d:
91:02:08:18:28:6e:cf:54:b9:7d:c1:cd:45:21:b8:
2b:d6:99:11:7b:e4:0c:e5:f9:b4:06:72:fb:3d:28:
40:f4:54:47:07:ef:7e:a5:c3:9e:c9:cb:9a:57:5f:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:80:34:25:F8:54:13:86:16:46:17:92:C6:54:A8:24:1E:5F:41:6E
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:b5:86:2e:9f:82:c1:92:a7:d6:37:15:d7:69:05:40:f5:
33:1f:87:3c:cb:23:75:c4:f4:c3:6f:47:56:79:3b:3c:01:87:
46:5a:f6:e9:40:4c:0a:66:5b:73:48:31:23:07:e3:57:44:f6:
d3:16:45:e6:40:f8:57:e7:9b:10:75:d7:3f:81:0f:b2:28:e1:
d5:5b:45:fd:40:30:40:08:a2:c6:cb:d4:90:07:3d:b1:22:aa:
b0:0f:19:3d:ac:30:fe:58:2d:41:9f:db:0b:9a:6d:53:1e:be:
eb:7e:a1:c2:01:7b:9d:db:04:37:26:1b:37:3f:f8:22:f6:ca:
e8:f1:d1:e8:88:c1:52:d8:fd:dd:41:44:b1:28:04:71:9f:76:
75:b5:f2:ea:a5:b4:b5:73:fe:68:c3:1b:1f:c5:87:fc:0a:df:
c7:0b:f2:f1:cd:55:01:74:51:24:ad:7a:48:71:5e:e7:ae:0d:
aa:9e:67:6d:f8:f2:82:e7:80:d6:56:dc:6a:54:bb:b9:b9:a2:
05:f0:6b:cf:4c:d3:f8:c8:d7:64:cf:7f:15:ea:2c:09:cd:00:
75:79:42:91:77:ef:b3:51:88:4c:5e:dd:ed:f0:8c:c9:df:4f:
5c:d1:a2:ad:55:06:2b:5c:e8:cc:b0:51:89:23:2e:63:5d:9e:
ce:11:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:12:21 2026 by rpki-client