Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File: V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier: yEi4fNgL39o8sa0VnR43lgx/QlKdKdmCbTyZCM1qc6M=
Subject key identifier: CF:84:4C:D7:5F:EC:73:3A:BC:89:74:0C:DA:62:0D:3A:64:33:F1:07
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer: /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial: 01A0D0B65949202216552239A5AFB402FF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number: 025B
Signing time: Thu 24 Sep 2026 00:00:06 +0000
Manifest this update: Thu 24 Sep 2026 00:00:06 +0000
Manifest next update: Fri 25 Sep 2026 00:00:06 +0000
Files and hashes: 1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: Tsbpqb9Am0DgSdTrGjG8d8Xpa1IPM/JvfhkWDNlIZoc=)
3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:59:49:20:22:16:55:22:39:a5:af:b4:02:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
Validity
Not Before: Sep 24 00:00:06 2026 GMT
Not After : Sep 25 00:00:06 2026 GMT
Subject: CN=cf844cd75fec733abc89740cda620d3a6433f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:81:21:d5:93:28:c3:b8:dc:f8:8e:ca:28:
ae:b2:97:bb:7e:8d:0e:e6:91:25:5f:4f:57:29:db:
da:ea:20:ae:8a:88:90:ac:28:71:6d:c1:09:65:a6:
60:0e:dc:e0:23:af:18:ff:f0:4c:87:56:4b:c4:84:
00:f9:db:5e:59:b7:9b:aa:47:c8:7f:e8:b4:fd:83:
55:3f:99:ed:bc:7a:6b:43:9c:5c:ec:ec:00:e4:e1:
f2:39:e4:1a:5b:b0:5b:ac:15:71:82:c2:b7:4f:b4:
52:79:cf:b0:c3:fc:dc:a9:c3:45:a4:3a:0c:b5:a8:
d9:a1:a1:db:3d:02:a8:9b:07:42:dc:5d:fb:f7:7b:
26:75:31:98:0c:f7:91:6d:7b:b3:11:ca:54:bd:c2:
17:09:2e:9e:38:7b:db:49:01:80:3e:41:e1:58:44:
0e:e1:fd:9b:94:be:35:26:44:1e:cd:cb:fe:71:3b:
f7:18:75:68:a7:87:42:6d:1a:16:ed:38:3a:e0:79:
1d:1d:4e:07:4e:df:53:03:27:54:ba:8a:ae:35:8e:
07:6a:bf:2e:04:b2:c9:b6:ff:bd:04:e6:33:6a:00:
13:4a:b3:be:72:75:82:9b:96:b7:0d:b8:fc:cc:e0:
13:ba:49:da:25:a6:d8:03:00:d6:66:cf:16:b1:a4:
a5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:4C:D7:5F:EC:73:3A:BC:89:74:0C:DA:62:0D:3A:64:33:F1:07
X509v3 Authority Key Identifier:
keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:85:6b:e1:10:41:55:98:a5:58:bb:fa:6a:59:82:75:11:24:
0f:53:54:26:e1:d1:79:4e:22:26:84:e0:ce:28:22:dd:ad:e3:
7e:5a:95:02:49:e8:da:45:3e:f6:48:14:e1:1e:33:71:e5:10:
4f:ed:d6:a0:48:61:33:f4:70:a1:98:83:3f:e2:4b:ed:24:f2:
8c:38:a2:a7:8f:ee:2d:6a:50:7d:9b:ed:cb:b6:71:8b:f7:1a:
1c:40:e5:a0:e9:f5:5a:6d:df:a9:f8:d3:a1:c6:88:2d:30:66:
e8:38:b4:76:92:b0:ba:b4:01:69:23:65:56:c4:e3:7c:61:49:
af:6d:d5:8b:6a:df:3c:90:dd:0b:f6:00:73:c4:d3:73:57:f1:
22:00:7e:7b:e3:62:df:33:0b:62:9e:09:3f:d9:f4:92:21:5e:
6a:bf:83:1a:36:e6:34:65:4e:4c:ea:ea:fd:0b:2c:c6:15:b3:
5f:78:a9:33:4e:fd:9c:04:17:a1:11:18:30:c8:cd:06:f6:08:
34:1f:65:00:c6:34:65:2c:b8:c5:75:f7:7a:59:30:ae:02:0c:
84:e2:0b:42:cc:60:d4:e0:36:01:e7:bb:dd:40:57:68:b2:c7:
8e:48:e3:ec:5e:02:fb:8e:22:9e:9e:56:ff:f6:0d:eb:df:03:
ad:e8:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:02:58 2026 by rpki-client