Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File: V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier: gox+PbK88/Y7OVy6937uYfiZXUVcQ91N0NcXQxmW6VE=
Subject key identifier: 09:9D:24:76:D9:2D:C6:68:DB:DF:66:97:AE:92:0A:3E:B3:1C:0C:D6
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 019CAA589885263EA5C55AFCB8136ADD1C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number: 1554
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: gx7yvv5gKht6gKOJLJa2CEQ1dDeLtrQ7kzTFNqRxiqQ=)
2: ksTitpak2u-_MSffFj8d3gLieoc.roa (hash: Akc+ifGn4Wu7e6ztv1Jh+lSvFvn72wjh27ACIaDBeLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:98:85:26:3e:a5:c5:5a:fc:b8:13:6a:dd:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=099d2476d92dc668dbdf6697ae920a3eb31c0cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:3f:f7:43:0c:e4:0f:e7:cd:42:f5:59:26:
1a:34:41:c1:14:8a:cc:d9:79:46:c0:9a:85:91:f1:
dc:73:4c:d2:56:c2:96:26:09:b7:35:f5:1e:ca:a4:
fe:28:cd:59:ae:f6:14:56:4f:6f:17:d3:df:bf:59:
48:9d:47:f8:d9:65:fb:1b:5b:39:1c:fc:84:74:2d:
d2:8b:73:06:b0:50:05:c1:c8:0a:67:ff:a9:50:c0:
fe:d8:fe:25:8c:da:08:24:95:c2:f4:0e:2c:b1:1f:
0b:e0:a7:1c:bf:37:a7:87:4e:fe:b1:79:c6:e3:8d:
63:c2:f6:ba:70:4a:4b:d0:39:e1:f5:f5:d5:89:b4:
8e:2a:86:48:02:f3:f5:b4:23:c9:b5:e9:f6:ad:3c:
93:4f:57:23:c9:6c:68:3d:55:b4:97:b4:c8:86:ae:
c7:9e:af:26:f3:c1:90:81:b0:2c:66:c6:87:6c:cd:
e6:e5:f5:d6:80:b6:b1:9e:6a:e5:8e:2d:e2:91:79:
33:70:38:cd:d5:42:de:4b:75:72:f4:0f:5c:0d:a5:
22:82:f9:b9:1a:6d:00:c2:0d:60:41:49:4a:18:8b:
15:9a:9b:12:1d:6b:4b:c7:95:6b:8e:ab:d6:89:fd:
86:59:f8:a8:ed:f4:3c:4a:08:9e:92:f0:80:5a:2d:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:24:76:D9:2D:C6:68:DB:DF:66:97:AE:92:0A:3E:B3:1C:0C:D6
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:5c:af:5c:d0:09:96:07:bc:32:59:8a:36:bd:f1:3e:02:68:
5b:f8:42:8e:80:9c:6b:8a:71:38:ff:05:3c:7c:73:d2:d9:eb:
ca:cd:3d:77:6a:7e:8b:9e:f6:d8:97:99:1d:5e:32:17:76:66:
16:19:f2:d3:35:04:cc:2a:fc:7c:c4:25:a6:56:7a:e3:db:76:
2b:3c:cd:56:e3:3a:8c:29:c8:a3:6f:49:56:ac:b8:bf:75:ea:
98:05:fd:a9:19:3f:ad:96:bd:f3:ac:15:3e:87:2f:75:34:08:
57:fc:76:7f:69:e1:27:70:19:ab:fb:ec:60:e9:c4:8a:d6:cc:
47:33:32:4b:1d:69:de:4e:23:ec:81:d5:ea:a4:ac:3f:ba:95:
1e:bc:3f:12:03:fb:b4:de:a5:4d:cd:58:1c:bc:01:ae:6d:fc:
bd:43:0a:54:70:68:1e:3f:25:33:2f:8c:c9:4f:4b:94:3f:b8:
00:fe:b8:4d:46:c0:ee:44:ad:31:55:b3:39:28:ca:38:b2:94:
72:24:60:41:96:40:27:81:98:89:2a:b3:e9:21:b6:a2:a7:7c:
cc:94:71:7a:ab:51:2d:a4:e4:68:82:19:be:a3:af:d2:96:83:
ee:09:5a:b6:4d:f6:15:25:db:7a:55:83:17:70:25:37:8c:89:
58:cc:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:02 2026 by rpki-client