
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier: nCpvt11M+uLkN6uH/mu/OKXwL7GtVQdGMSjmTBWM+K8=
Subject key identifier: 3C:10:C0:1B:13:C2:1F:52:0F:01:D9:A0:5C:9A:A9:97:B1:12:28:22
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 01A0C8FD39D762E0B4B57FBDD7BA07059CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 12:00:33 +0000
Manifest this update: Tue 22 Sep 2026 12:00:33 +0000
Manifest next update: Wed 23 Sep 2026 12:00:33 +0000
Files and hashes: 1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: LzyS0hkaRYu/pu7g7FRlgHDeWdldvz67388rCx6gLso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:39:d7:62:e0:b4:b5:7f:bd:d7:ba:07:05:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Sep 22 12:00:33 2026 GMT
Not After : Sep 23 12:00:33 2026 GMT
Subject: CN=3c10c01b13c21f520f01d9a05c9aa997b1122822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:6a:44:07:f6:34:2e:0a:56:04:0d:44:33:
67:83:c8:2c:dd:44:24:90:a9:ec:42:0a:02:aa:76:
a3:3a:9d:0d:a2:19:47:01:8c:20:15:5f:f9:db:4c:
24:dd:e6:e9:7d:d8:8f:55:8c:d7:fc:bf:74:4b:1b:
fc:26:91:8c:c2:6b:3e:b9:08:c5:e3:ca:fb:59:f0:
ce:81:f4:7e:23:d6:8a:34:d4:7d:3c:6f:9b:cd:d6:
87:de:96:f9:e6:93:5d:6f:a7:23:d1:b6:31:ca:ee:
fb:e2:f1:db:c3:55:dc:12:9e:e5:59:f5:43:f6:af:
cc:72:47:75:80:1f:ac:34:a0:16:09:d9:1d:f1:f2:
ec:9e:c4:66:e5:d9:1b:f2:12:18:89:cd:10:27:f3:
4f:d2:77:20:bf:aa:bd:d4:2a:76:90:62:98:03:2e:
9c:92:11:3f:7b:f7:9f:5d:04:ba:5b:7e:50:a4:e5:
92:f5:c7:a9:90:db:0b:c0:7e:16:22:3a:9f:ab:10:
71:8b:b1:d1:95:50:41:09:1e:13:28:bc:dc:1d:8b:
6a:ae:fb:39:a1:cf:f8:b5:4c:43:90:be:da:4a:d2:
e7:3f:9c:18:77:c8:a0:b3:e5:ae:2d:01:98:24:c0:
8c:2f:5c:f8:1c:33:e5:06:19:62:30:93:f8:96:f9:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:C0:1B:13:C2:1F:52:0F:01:D9:A0:5C:9A:A9:97:B1:12:28:22
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e5:d8:b1:a6:bd:81:fc:c6:dc:d1:46:ab:22:a3:d4:63:cd:
f8:8a:ae:35:66:2b:57:a3:af:1a:2d:63:ea:00:b5:24:ac:04:
75:ae:d1:1c:43:2d:7a:d0:8a:87:ee:62:e8:4a:75:5c:d3:fd:
92:6a:68:30:52:82:f1:9d:9b:55:e4:38:36:78:fd:4c:75:e0:
3c:fc:fa:bf:80:2f:63:cc:b3:f8:10:93:ca:24:18:44:fa:2c:
38:6d:13:2d:9a:be:6c:06:78:8c:20:35:7d:d9:26:ca:87:1d:
e3:f5:d4:a0:9a:53:5d:d3:67:40:ac:f2:2a:ba:22:11:f8:b6:
f4:c5:f2:b0:1b:19:20:83:ff:78:70:e4:05:cd:bd:eb:bc:a2:
c3:9d:f1:5d:0b:14:04:f4:a7:95:98:29:df:d6:e5:cc:ff:60:
e6:2b:89:05:03:d0:69:dc:3c:96:5f:cf:25:af:ed:4b:a0:51:
89:a2:7f:ac:4a:3f:33:ed:12:f5:12:f7:5f:2c:4d:67:fe:9b:
14:a5:c4:53:69:a9:35:5a:85:34:1c:4e:52:99:62:45:35:5d:
b0:65:2c:9f:c3:7a:23:da:40:63:bf:21:2a:7b:cc:d1:3d:92:
bd:c1:7d:4b:e5:e4:a7:20:2c:0c:fa:d7:14:bd:98:28:87:a9:
29:7c:0d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/TnXYuC0tX+917oHBZyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2MwY2Q1YTRjZmQ4M2Q0OTFkNjI3ZDhiMGZjY2I2NzBl
ODE1MzQwHhcNMjYwOTIyMTIwMDMzWhcNMjYwOTIzMTIwMDMzWjAzMTEwLwYDVQQD
EygzYzEwYzAxYjEzYzIxZjUyMGYwMWQ5YTA1YzlhYTk5N2IxMTIyODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybVqRAf2NC4KVgQNRDNng8gs3UQk
kKnsQgoCqnajOp0NohlHAYwgFV/520wk3ebpfdiPVYzX/L90Sxv8JpGMwms+uQjF
48r7WfDOgfR+I9aKNNR9PG+bzdaH3pb55pNdb6cj0bYxyu774vHbw1XcEp7lWfVD
9q/Mckd1gB+sNKAWCdkd8fLsnsRm5dkb8hIYic0QJ/NP0ncgv6q91Cp2kGKYAy6c
khE/e/efXQS6W35QpOWS9cepkNsLwH4WIjqfqxBxi7HRlVBBCR4TKLzcHYtqrvs5
oc/4tUxDkL7aStLnP5wYd8igs+WuLQGYJMCML1z4HDPlBhliMJP4lvlxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwQwBsTwh9SDwHZoFyaqZexEigiMB8GA1UdIwQY
MBaAFFd8DNWkz9g9SR1ifYsPzLZw6BU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMTFiNWQtNjUyZS00NTJhLTk2Yzkt
ZDhlYzJjYmNhZDI2LzEvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMTFiNWQtNjUyZS00NTJhLTk2YzktZDhlYzJjYmNhZDI2
LzEvVjN3TTFhVFAyRDFKSFdKOWl3X010bkRvRlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuXYsaa9
gfzG3NFGqyKj1GPN+IquNWYrV6OvGi1j6gC1JKwEda7RHEMtetCKh+5i6Ep1XNP9
kmpoMFKC8Z2bVeQ4Nnj9THXgPPz6v4AvY8yz+BCTyiQYRPosOG0TLZq+bAZ4jCA1
fdkmyocd4/XUoJpTXdNnQKzyKroiEfi29MXysBsZIIP/eHDkBc2967yiw53xXQsU
BPSnlZgp39blzP9g5iuJBQPQadw8ll/PJa/tS6BRiaJ/rEo/M+0S9RL3XyxNZ/6b
FKXEU2mpNVqFNBxOUpliRTVdsGUsn8N6I9pAY78hKnvM0T2SvcF9S+XkpyAsDPrX
FL2YKIepKXwNtw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:55:19 2026 by rpki-client