
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File: V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier: 0u7H5M1kzQyKrwGQlVOMH3XextHHGkwkXygG02AeLww=
Subject key identifier: E9:73:82:3C:07:77:37:F3:BC:B0:2F:DD:BB:96:7B:96:B4:F5:45:48
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 019CAD22A237C35C5050233394205556C15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number: 11D9
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: Opai9dg9_aPXefCDg-UcShG8DsQ.roa (hash: PwYEnlWaHMXct2KSlyUDXvXKQcsU2VZDyx8dPTPY47I=)
2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: Jm9ZP78Oy+6ImkfgDU5m6UYmRpOuFbo7KMT1uhsbbpc=)
3: nRRzwVPO_lwp_dDipainvbLpMZ0.roa (hash: XL1wzfMszjSpjfH9Vrf0CxfKPPrO6e01hughMU6CA/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a2:37:c3:5c:50:50:23:33:94:20:55:56:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=e973823c077737f3bcb02fddbb967b96b4f54548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:0d:71:7d:c2:6f:cf:ad:ab:73:1b:7d:7c:
0a:60:5c:ad:d5:33:2a:9a:c3:cf:bf:46:f5:0e:de:
8f:8f:72:75:ec:aa:ae:d0:fe:f9:cb:5a:fa:24:3a:
47:13:51:81:a6:ca:ab:99:0f:07:1c:23:20:5f:cf:
23:f5:86:e7:0b:92:b9:de:57:a3:f6:15:e9:84:e4:
36:51:c1:d9:f5:27:41:38:93:00:02:c3:15:6f:30:
00:ed:a2:ec:d3:85:fa:3e:b1:b7:9b:41:41:aa:12:
c0:b4:24:30:c6:79:ce:9c:e1:11:74:13:1e:60:db:
83:af:ca:5c:e9:bc:85:a7:8f:d3:19:1b:c9:52:0c:
ff:19:1f:d9:1d:ec:55:90:f0:e1:f6:dd:1f:2e:43:
f1:db:ea:db:cb:09:d8:0a:0e:ef:5c:2a:a1:24:8e:
84:9a:ef:2a:e0:e0:b9:d8:ef:db:e8:ea:50:5a:21:
90:e8:37:48:7b:06:7d:9e:be:ec:d8:32:7c:31:fc:
e3:0b:32:af:1a:9b:14:ce:a4:64:a1:92:12:78:bc:
51:13:36:ea:ce:53:68:b2:32:79:45:e1:69:6d:d7:
37:d2:f7:36:cd:03:0f:16:48:39:b7:ae:f2:a3:45:
e5:4f:77:c9:18:86:59:ed:29:a6:f4:08:2a:3d:42:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:82:3C:07:77:37:F3:BC:B0:2F:DD:BB:96:7B:96:B4:F5:45:48
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:32:67:c2:2e:5e:0f:28:a5:01:78:19:11:59:4e:c2:cc:b3:
98:21:c2:7c:b2:32:3d:15:43:82:d9:d3:1e:b5:dc:fc:b3:89:
3b:22:01:87:f4:77:ba:fe:f6:48:dd:06:8e:63:8a:09:22:67:
29:ed:1f:7b:40:9d:65:ed:6d:5a:51:1a:d0:fc:0b:c3:17:c6:
79:52:a8:97:5e:63:eb:80:f7:25:d7:72:80:91:93:69:e3:83:
62:91:ce:6c:4d:a7:bc:28:c7:05:aa:fd:84:e1:a4:de:aa:e4:
51:38:2f:80:bd:d9:2f:73:7b:ae:6b:1a:c4:ae:d9:15:6c:2c:
70:80:4b:bf:87:b8:f6:0a:ec:fe:e1:bb:96:a5:86:f6:95:4a:
ed:7a:40:15:d0:8c:c8:eb:c0:38:ab:c4:19:34:aa:32:17:3e:
a1:33:c6:68:58:fe:f0:59:9b:c8:e0:42:cc:96:34:a7:2e:ff:
29:5e:6a:1c:b7:01:bf:e4:ad:0f:82:66:f0:b3:b4:ca:8a:8b:
c6:97:f0:00:70:94:49:d1:95:ce:d2:0a:7a:e2:56:f1:33:27:
6d:a3:b0:26:54:c7:16:6f:7c:7b:c7:78:2a:d5:57:e0:83:f8:
36:97:5a:45:88:c5:43:6a:7a:d8:bd:73:67:45:15:9a:31:98:
c9:e2:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:22 2026 by rpki-client