Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: XCkPv1W9vO6vKJkK9VfaMZd0Bn3YOy4nEWhXp6Edw7Y=
Subject key identifier: 44:EF:53:9A:8E:DB:E1:BE:C4:CB:71:17:55:A2:75:84:55:6C:BF:00
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019EB845B2A4AFD766BE33F5736704AF8B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 195B
Signing time: Thu 11 Jun 2026 20:00:35 +0000
Manifest this update: Thu 11 Jun 2026 20:00:35 +0000
Manifest next update: Fri 12 Jun 2026 20:00:35 +0000
Files and hashes: 1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: EuGWzCcDRd84RhBRBZK2YhG52GVu5k9xtqw2yMI+NPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b2:a4:af:d7:66:be:33:f5:73:67:04:af:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Jun 11 20:00:35 2026 GMT
Not After : Jun 12 20:00:35 2026 GMT
Subject: CN=44ef539a8edbe1bec4cb711755a27584556cbf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:15:23:b1:66:1a:d8:03:7f:6c:4b:df:6b:
f3:93:49:03:b2:92:8b:49:c0:9a:25:bc:16:cb:43:
d8:45:3b:7c:be:12:5f:a8:cf:42:ba:61:a7:ff:5a:
b9:5e:c7:ab:db:22:ae:2d:13:73:e9:ba:43:59:7f:
37:79:06:65:74:70:c9:92:d0:48:f6:94:bb:24:52:
aa:56:4f:26:f9:a2:05:bb:2a:9d:56:84:2f:94:a0:
85:49:40:c2:28:4e:1a:d4:f2:e3:52:d1:c9:8b:9f:
a2:9a:8d:2b:04:fe:1a:8b:5f:5e:23:49:62:3c:5e:
f6:db:6f:5e:ce:ea:fb:68:85:7a:8c:84:56:61:1f:
c4:8f:d5:03:fc:63:a8:4a:ec:69:16:63:73:91:7b:
11:79:c4:c0:1f:07:7e:4a:41:e5:c4:50:8e:bb:9b:
f5:d0:9b:03:c7:7d:1a:97:a1:83:cd:a4:68:5b:e9:
68:25:41:00:57:0f:78:cc:57:d2:8d:e7:15:3b:58:
37:81:54:c2:9e:d8:02:85:7d:34:8e:ed:09:b4:fd:
ba:ee:01:1b:a1:da:bd:f6:bf:73:25:b9:9b:d2:a7:
37:2d:a4:56:c4:8b:e8:b0:c2:1a:02:e2:0c:0d:df:
a6:92:61:87:86:8a:a6:bb:a1:4c:82:ad:57:6f:c7:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:53:9A:8E:DB:E1:BE:C4:CB:71:17:55:A2:75:84:55:6C:BF:00
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4b:60:ed:da:15:78:77:db:87:c8:a5:51:00:c2:74:3f:f1:
dd:89:d3:be:2d:98:68:53:f4:7f:94:87:f9:d2:13:e4:bb:31:
55:c7:57:c1:48:0e:aa:b0:a3:4a:64:77:5f:a5:8a:d5:b9:dc:
85:c1:d2:5b:79:14:1d:73:22:d8:a2:f8:79:61:57:e0:3c:0e:
8f:67:18:ac:84:8f:89:c9:99:ce:9a:7c:6c:c1:e4:42:1f:db:
6f:89:ab:ab:5b:54:ac:fc:f6:89:4e:d3:49:1a:e1:d8:6b:67:
6c:52:f1:1a:18:72:1f:6d:b4:1a:c5:3f:ea:b3:35:fb:60:7b:
23:f5:d0:62:7f:21:c4:73:ca:bd:a6:5a:bc:66:08:ed:71:70:
2f:ef:51:34:5b:e2:77:27:63:e0:1d:04:91:6f:e6:5c:b7:04:
7d:6b:fb:8d:12:71:66:a7:96:07:d1:b4:85:a6:b2:73:15:5f:
ae:63:dc:a6:3f:b5:46:31:21:3a:8e:2d:9b:f8:ec:a8:13:54:
01:85:b4:c3:72:80:d0:7d:15:01:3f:39:18:6e:7a:5b:ff:d7:
a9:ae:0d:e7:5a:9d:2b:df:22:fc:06:7b:af:d2:2e:e0:d6:f4:
03:e3:f0:4b:46:e9:90:fd:c3:28:ee:66:1b:71:f2:d5:e4:bd:
6d:9a:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:49 2026 by rpki-client