Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File: V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier: JxdTHG9vjAhJW+QidYdVP5eiHDoUbTKZ9pXDJMqmmeI=
Subject key identifier: AD:55:C3:33:BF:58:D0:CF:3E:14:DC:FD:25:2B:9E:9F:30:EC:BD:19
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial: 01A0F4C4485E3424EF7923229849BA23E41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number: 0597
Signing time: Thu 01 Oct 2026 00:01:39 +0000
Manifest this update: Thu 01 Oct 2026 00:01:39 +0000
Manifest next update: Fri 02 Oct 2026 00:01:39 +0000
Files and hashes: 1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: TggLUE9kIr+f23LJSqenrBXI6oApu/ocIKxU532Izwo=)
3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c4:48:5e:34:24:ef:79:23:22:98:49:ba:23:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Validity
Not Before: Oct 1 00:01:39 2026 GMT
Not After : Oct 2 00:01:39 2026 GMT
Subject: CN=ad55c333bf58d0cf3e14dcfd252b9e9f30ecbd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:d9:86:48:c3:ef:ae:d3:7a:a3:84:59:dd:
ba:1d:08:93:48:d7:1d:0b:aa:b7:fe:83:e1:d8:8c:
db:66:ea:91:ff:07:b8:e1:6b:30:16:fc:1a:90:d4:
bd:13:a4:e3:e9:9d:c2:7c:bf:fe:71:53:a6:a4:5a:
82:56:73:89:ec:82:d7:49:7c:19:7c:26:d7:0e:d0:
00:de:24:47:67:9c:ea:33:43:f9:3e:f4:3e:d6:94:
8e:61:f7:59:e4:a3:fc:4f:ea:04:47:80:dd:b0:7e:
e7:a5:eb:a4:61:82:32:72:2f:18:34:08:d9:2f:ba:
aa:ce:77:fa:65:97:49:2e:08:d8:f8:62:54:57:77:
03:c5:d1:56:18:a8:84:15:62:87:b8:61:96:23:87:
be:83:e0:0e:fb:4a:39:9b:9b:dc:57:dd:c9:10:7d:
83:37:47:3b:62:6e:4d:ac:4c:be:54:d9:df:08:11:
d9:01:35:01:e4:6e:18:60:ec:02:2a:e9:52:97:83:
90:7b:4d:f9:ed:28:e9:1e:2b:a8:31:82:21:73:d4:
26:94:b5:94:8d:f2:32:5d:c7:8b:91:8e:1b:67:89:
b1:a3:68:b0:3f:9a:8e:a7:54:2e:51:59:57:6c:25:
04:20:ac:cc:93:c9:47:a7:de:b3:8c:17:45:84:9b:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:C3:33:BF:58:D0:CF:3E:14:DC:FD:25:2B:9E:9F:30:EC:BD:19
X509v3 Authority Key Identifier:
keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:a9:99:d1:5d:2f:ab:00:6b:25:96:a3:8d:43:6f:dd:21:
66:6a:18:44:db:72:0f:ad:4f:48:ac:03:e8:a8:4c:6f:dd:ed:
0a:69:f6:98:a6:e2:ee:b2:a1:b5:a8:b0:fe:fc:68:f3:be:16:
1c:f0:9c:fe:0f:7c:d0:c8:bf:35:84:5f:0f:2c:81:47:fd:6b:
38:f4:96:4f:b6:a9:1b:1d:d3:d5:a6:34:32:e6:b2:76:ec:de:
dd:08:f0:9c:ba:1a:f1:97:27:ac:f5:ca:4d:f4:fe:88:b3:bc:
61:cc:5e:6a:22:10:6b:3f:42:9e:54:24:b0:5e:08:94:e3:d9:
a5:03:ac:83:b1:a5:21:93:85:ae:ec:f4:1d:fe:98:d2:a4:77:
7f:6f:a2:39:fd:b3:5c:e1:8e:4a:63:3a:ed:67:32:33:bd:fa:
ca:e1:8e:34:50:d8:47:ca:83:cd:cc:74:66:98:83:fc:aa:83:
99:c6:93:76:41:ff:1e:4d:43:e3:25:cd:4f:10:fd:f9:fa:bd:
33:4d:f1:4d:29:14:b3:77:80:b9:1a:51:df:21:36:63:25:3a:
ab:67:25:45:fd:a6:df:20:7f:67:c4:9c:78:fa:ec:da:31:ab:
6f:ac:91:29:d5:4f:2f:f9:d1:f5:8b:77:4d:0a:37:4f:57:3a:
e3:ff:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 04:48:58 2026 by rpki-client