Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File: V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier: aSs/+YeAg2oZ4dtB0zBN3BU+uVKh68D+krbEYzXWLOY=
Subject key identifier: 20:45:4D:5C:5D:67:12:77:43:E5:A8:08:84:75:9D:37:25:E2:96:F7
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial: 019D39AF588FBCAAC7C806647ADFDDBC4524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number: 07D4
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: UAe6hHF4tY5tJRAZ4zl4Keq33hE.roa (hash: 4qhi3u98mfE9B0D9RD9MOTzasDKVZY5O0ywJYLJl2BU=)
2: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: u4uUyBmcs4LGaE4aujfodvlktaMses2PmvKoSu4Q9Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:58:8f:bc:aa:c7:c8:06:64:7a:df:dd:bc:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=20454d5c5d67127743e5a80884759d3725e296f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:01:03:08:f3:aa:b8:42:8f:8f:6d:fa:01:
5d:55:fc:60:3f:db:80:15:aa:31:0f:e2:ed:2a:e4:
66:82:62:50:1f:ae:e1:c7:1c:c4:15:1b:bf:8b:bf:
f5:f2:76:78:97:dc:49:f9:75:e5:95:28:1a:be:04:
8d:e9:b9:a2:55:74:2e:4d:81:fd:f5:10:4a:fa:ad:
c6:68:c7:0d:38:b3:3f:7f:90:6e:08:5a:ad:cf:54:
27:c6:78:c1:db:0b:fb:3f:5f:ea:00:73:f9:dc:b1:
b0:9f:be:fb:b0:1f:ba:64:1b:e0:60:7a:5c:ed:1a:
8e:2b:3e:ff:a2:01:a1:1f:60:f2:83:8f:32:ae:0d:
cb:1f:d0:d6:0a:f7:a4:b4:3b:67:8d:ae:22:9e:69:
91:28:04:98:ed:c9:75:86:a3:39:4f:66:1c:f5:0f:
75:fe:70:d2:59:aa:60:4f:d6:f7:49:39:fa:7e:84:
61:83:e9:7d:ba:14:38:88:2a:56:ad:c5:eb:e6:6a:
27:6b:3c:96:df:cb:9d:11:95:6d:35:db:de:79:bc:
1e:13:a5:7f:10:d6:b7:6b:d8:0d:f4:6b:63:45:af:
8a:69:59:d1:df:fb:47:b9:f0:ba:bc:42:d8:1b:10:
ba:e8:71:71:be:44:88:e6:11:8e:03:c8:a2:42:f4:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:45:4D:5C:5D:67:12:77:43:E5:A8:08:84:75:9D:37:25:E2:96:F7
X509v3 Authority Key Identifier:
keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:e2:89:37:0f:b1:13:84:52:da:47:a2:7a:95:cf:57:2d:
68:e8:01:98:19:e6:7b:74:f9:cb:e9:a2:85:67:6b:b4:29:4e:
4e:40:2d:86:e0:34:05:ba:a6:aa:5a:ea:62:08:a3:00:16:e2:
4b:15:cb:81:14:54:7c:74:1c:49:b3:6a:fe:5f:6f:e4:35:cf:
d5:55:1c:27:6c:c1:cd:0b:32:89:0b:b6:6d:a5:a1:0d:62:49:
83:25:3f:37:cc:c2:9b:7c:c2:30:e8:bb:a6:29:6d:66:3c:64:
0b:c7:53:7e:bd:99:45:d8:24:b7:83:be:8d:3c:c4:91:5a:55:
d8:ec:62:86:d7:78:c5:3d:01:db:9e:f4:52:a6:7f:d2:5b:95:
4f:b5:8c:65:e5:be:c4:0f:2f:c9:f3:fb:47:5b:28:4c:aa:d4:
7f:da:d4:0a:53:bf:03:b0:23:b4:9b:b8:7d:58:27:f1:c9:83:
5d:a6:27:62:13:32:52:49:da:f7:a4:18:7d:61:94:90:fd:99:
1b:a5:53:8a:e9:02:fc:14:23:9c:d5:c3:a1:07:84:19:35:0f:
8f:04:5c:2b:84:13:f5:2b:92:32:2d:d0:04:d1:4d:db:64:0a:
b0:f4:28:d8:3c:44:f4:53:7f:c4:38:b9:92:c4:35:52:7c:8d:
06:00:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:11 2026 by rpki-client