Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File: V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier: 5oXcTnu4AcaliYcY81rvB/Y/39J1wJcBmgBjwHZBlUw=
Subject key identifier: 52:1B:75:DF:5F:E3:D2:17:63:93:3A:DF:70:47:ED:76:60:A9:A4:AE
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 019CAAC6BC714BD20509A1D237674550F9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number: 0A68
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: t1VgqsX/W+LpvhZh8Y8t7if/p6otwG8IbhMjFZC0v4s=)
2: h7Slf79U-tivsMXa7hEOttxBA6M.roa (hash: 3/yXrVufCN3qWz4paHjP2MngE7Cq+dL6ygZqrLPEOdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:71:4b:d2:05:09:a1:d2:37:67:45:50:f9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=521b75df5fe3d21763933adf7047ed7660a9a4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:69:a0:a8:b2:d5:65:32:4a:89:3f:6e:06:
2c:b1:f2:1a:1f:b0:de:b5:dc:dc:56:65:66:93:8a:
c4:32:94:9f:09:9d:0e:49:6c:d9:e7:66:75:0a:31:
89:41:7d:59:fd:9c:37:05:cd:98:37:b6:e2:5d:6c:
d0:fd:74:a7:2e:3c:46:2c:46:e2:c4:86:58:b0:54:
c5:a7:ff:e4:13:96:9a:90:86:ab:be:53:e9:3f:59:
10:34:30:d8:5f:65:72:e7:b9:d5:27:17:17:1b:77:
71:b2:1f:67:44:e9:7b:e2:be:e6:f1:d0:37:1e:b3:
5a:cb:9b:20:71:bc:93:1b:cf:56:8f:56:4c:d3:a3:
a0:60:d3:91:cb:14:08:a1:bd:ef:6a:c8:c5:1c:b1:
3c:71:b2:cd:0d:ac:2d:b8:c1:32:e7:af:ca:76:3b:
10:28:5a:d9:e9:65:82:5a:c2:58:8d:34:28:1e:23:
7b:81:62:78:34:7d:60:e4:15:40:00:00:b5:82:fc:
59:5e:c0:ca:27:8d:d2:af:07:53:ef:f6:19:a3:64:
68:cf:9d:6b:54:21:3d:d1:d8:18:c2:13:6f:3b:e0:
69:40:84:99:cd:d7:20:40:77:3a:46:d1:eb:ae:27:
98:e7:19:5e:63:e4:aa:c3:d8:48:00:8d:7e:5d:d7:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:75:DF:5F:E3:D2:17:63:93:3A:DF:70:47:ED:76:60:A9:A4:AE
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ba:41:bf:f1:95:23:2c:7b:68:cf:84:8f:8f:e0:af:52:68:
31:82:b8:99:f7:9b:00:cc:a2:a4:b2:51:90:ed:de:56:94:2b:
0c:bd:5c:4a:91:41:b4:71:e3:ed:62:65:93:12:fc:45:bf:33:
18:8d:9f:9d:5f:e6:34:ad:a8:a4:d9:62:22:65:66:24:ae:97:
f9:54:4b:c8:42:f4:26:62:ba:9b:12:d0:51:49:b1:95:41:cd:
61:ae:9c:d2:ad:1c:97:22:25:72:2e:33:9c:c5:65:18:77:68:
8e:6f:1e:b9:08:53:6a:24:be:1e:eb:a6:c5:ed:a4:b2:7d:06:
de:84:e0:36:a2:f6:8c:fd:37:44:92:bb:36:eb:c3:82:de:6b:
86:40:2e:05:47:b4:23:27:2a:d7:1e:ca:2e:01:e1:1c:9f:cb:
be:cd:6c:09:ad:e2:83:59:02:fe:f0:18:3a:99:84:71:c0:38:
40:81:c7:c2:06:52:aa:f7:54:cf:4f:66:c3:d1:dd:0a:37:86:
cd:0e:d9:67:f5:fe:d0:ef:d1:81:ff:39:cd:6d:11:84:1f:c6:
f8:89:06:4f:52:00:e3:89:dd:9b:54:5b:d4:64:7a:0d:f2:9f:
0c:cd:b2:8c:7a:30:e7:3f:93:45:41:76:85:41:80:ad:bf:b7:
49:94:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:44 2026 by rpki-client