Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: e0Qfc+Ryx39s/tCmmBw9HbISBY4xcE5lAP0hM3yhMss=
Subject key identifier: 85:4A:FD:93:6D:5D:EC:9E:6C:1F:AC:5D:3B:60:3A:3F:CE:2B:57:C5
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019DCE9960B18968BF72F0DBD7BB6952A8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 11:00:51 +0000
Manifest this update: Mon 27 Apr 2026 11:00:51 +0000
Manifest next update: Tue 28 Apr 2026 11:00:51 +0000
Files and hashes: 1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: QGvva9gcL8m2QjldN7NONrKkkhfYJo7ILHCO28TwOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:60:b1:89:68:bf:72:f0:db:d7:bb:69:52:a8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Apr 27 11:00:51 2026 GMT
Not After : Apr 28 11:00:51 2026 GMT
Subject: CN=854afd936d5dec9e6c1fac5d3b603a3fce2b57c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:8a:aa:8e:40:56:0c:a5:92:e6:74:73:b7:
8c:9c:33:73:c9:6c:2d:2c:04:80:54:ef:a9:72:9b:
97:10:5f:fe:3d:36:20:3b:8d:6c:5b:24:77:9c:65:
ec:a9:2e:95:f4:21:4b:79:9d:c3:1a:67:79:d7:1f:
10:98:0a:a4:39:7b:12:dc:66:3e:e8:5a:c6:b0:78:
fb:05:f0:f4:47:bf:b7:00:8e:64:66:b1:2c:a0:7a:
5e:21:fb:76:1b:ac:a8:31:49:01:71:ee:ff:83:d1:
9f:68:26:72:0a:c3:cb:3b:16:10:7f:7b:77:18:e4:
cc:62:8c:8e:bb:a5:c7:b9:dd:4b:59:e8:4f:48:fb:
6b:67:bd:4d:06:4b:ab:4b:14:93:09:3b:5c:c1:a6:
ba:46:1b:a5:6f:cf:02:a0:9d:2e:ed:86:73:29:f2:
2a:b2:20:34:64:b9:02:aa:de:aa:6d:bd:bb:c7:df:
f2:1e:74:ee:11:b0:7a:98:a0:65:15:08:32:a8:6a:
70:df:d9:ff:9a:f4:7f:b8:87:38:a5:e8:9c:19:68:
b0:7a:eb:18:8d:c7:a1:3e:58:a7:a0:24:7b:f6:03:
d0:bb:60:7b:74:00:4d:1b:44:b3:37:e9:1f:9b:fe:
68:f5:ea:70:c4:2b:75:23:f9:21:78:ac:f0:b4:81:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:FD:93:6D:5D:EC:9E:6C:1F:AC:5D:3B:60:3A:3F:CE:2B:57:C5
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:bb:ee:02:4d:51:2d:39:15:74:26:e9:b7:c3:fb:73:c5:
77:2d:11:54:81:a3:8b:38:c3:24:fa:b6:78:12:14:45:5c:7d:
ff:7f:fe:56:fd:45:13:28:c1:ea:fd:90:7c:a7:0f:1e:13:bc:
f7:4d:0f:4a:82:6a:98:90:d3:9c:db:0f:2d:e4:fa:cb:da:0f:
d5:df:2c:46:1d:44:73:95:15:f9:42:a2:df:28:96:d9:52:74:
4c:12:aa:f1:7f:f7:75:26:34:5a:16:cf:60:3e:4a:0d:fd:d0:
3f:2d:6f:13:a9:89:20:30:81:50:61:c6:9e:51:68:d6:15:9e:
af:91:08:56:84:f8:7d:9a:5f:a7:63:06:1f:4c:42:77:a4:f8:
42:5a:9c:bf:c6:1a:3e:1e:34:88:bc:04:82:ef:14:57:84:c8:
b1:f7:10:b5:0b:d1:b4:a3:fe:f5:ee:30:fd:35:1f:f9:6c:12:
30:3e:5b:67:83:0b:4e:a8:09:d4:97:2d:57:d1:f1:dc:08:ae:
3e:99:a7:65:45:a7:4a:28:d5:98:fa:a6:9a:ef:59:78:bf:bb:
5a:57:50:e0:35:58:61:c3:64:ff:eb:9b:46:07:78:8a:03:72:
bf:ab:1c:80:ed:90:f9:a7:77:f8:63:c7:08:88:69:4b:26:9a:
98:80:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:34:10 2026 by rpki-client