Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File: V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier: qW2VnpdfVAj+TzgAW7Aiqex8nnULSLnGJgxqb1vCYcY=
Subject key identifier: 36:5A:E7:E8:FE:28:97:FC:F2:5F:5A:A8:58:6E:02:57:65:84:E0:D3
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 019CAAC603C772168EB4C689013CCF2ED172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: HJyM-PK_Z2fkxB2cKtylCvP_oYs.roa (hash: aClMv3GmYl01FOx3i2RmdJlKAVOLcAqBrNkfkkFCYNk=)
2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: A9x4f6q808ArVxUrwdE+myxVphp38+6OE7v51scNi6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:03:c7:72:16:8e:b4:c6:89:01:3c:cf:2e:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=365ae7e8fe2897fcf25f5aa8586e02576584e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:3c:2a:87:02:c8:8d:ba:4c:ea:7a:8d:d3:
7b:0a:63:e9:11:26:b9:41:d2:d5:71:6a:fd:9c:6a:
82:b0:ea:ae:51:ec:fc:be:52:b2:30:72:1a:60:fa:
9d:18:c3:9a:c0:7e:d5:c5:9a:15:9b:5a:24:e0:b8:
9a:09:a9:a5:28:ca:23:28:5c:db:1f:3f:49:c1:dc:
8e:20:48:b9:a6:1a:16:f7:b8:94:7d:9e:65:0a:29:
e3:fa:99:b4:e5:c8:71:3c:f0:e6:76:b1:0e:78:1c:
ee:f4:1f:54:81:14:bb:7d:cd:b9:57:f5:8f:b6:57:
fd:ed:c5:47:59:db:6c:d3:86:20:09:15:ab:be:72:
4e:e2:5c:b9:41:b4:6b:57:7c:08:ef:ab:09:97:ad:
69:e1:e3:36:79:49:63:f4:a6:ac:d8:8e:f5:22:8a:
66:3b:9e:7e:2d:d7:17:75:12:64:c1:bf:48:fa:76:
77:ac:7d:35:d8:ea:fc:03:c0:0e:a7:33:26:99:21:
e2:4f:63:79:9d:15:37:ef:fb:3a:f7:d4:7a:c6:b3:
ec:ae:a9:2f:64:5c:41:94:28:b6:a3:58:61:06:3a:
3f:17:c0:36:bf:b2:bf:82:17:3c:47:35:ef:dd:10:
df:05:bd:b9:ce:bb:1d:47:b9:42:3a:90:d3:2f:a8:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:E7:E8:FE:28:97:FC:F2:5F:5A:A8:58:6E:02:57:65:84:E0:D3
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ee:17:f2:5b:8a:e1:a8:32:af:68:29:fd:6b:b9:51:e0:f1:
c4:5b:81:86:6d:a4:a5:b2:99:a0:b9:78:c1:28:c0:22:f8:69:
60:21:ab:0a:ac:20:95:c5:d4:8f:a3:b7:50:da:4f:87:21:ee:
46:e3:19:2e:f8:ce:1c:27:17:ae:b8:02:a5:44:cf:71:2b:22:
1d:22:ce:ca:7f:bb:bd:28:13:72:de:98:c6:2b:b0:f0:66:66:
68:a0:95:53:60:81:e1:c1:3f:03:33:33:6f:f5:f0:59:43:8c:
db:98:86:b1:15:e6:0a:dd:55:aa:78:12:f4:26:dc:8a:f7:c0:
9f:ce:91:65:b1:be:6e:01:89:61:e5:87:c4:d3:24:e2:e4:c1:
8d:c1:8c:99:b6:58:84:98:3c:6e:f2:ea:34:96:c6:cf:6e:e9:
80:d0:54:7b:2a:db:59:dd:5d:3b:90:1d:23:c4:f9:ae:cd:a3:
1e:05:db:d0:f4:2b:20:76:2e:40:73:66:90:46:fa:44:13:82:
8c:58:38:ff:6e:f2:12:f6:1f:61:5c:e8:24:75:9d:74:9a:f9:
3b:d2:36:c7:26:25:96:af:b2:c1:bb:f4:fa:d7:db:2d:52:c4:
b6:52:c4:b5:74:4e:64:ec:74:d0:d1:f9:de:1e:00:8e:05:dc:
ae:2f:b6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:18 2026 by rpki-client