Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File: V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier: 6o5iWYTe8iKgqE2oEPcj2keMJ6XBWGMaxbNz7SJiY3I=
Subject key identifier: 12:4C:D1:2F:FC:53:0E:79:D0:0E:9B:DD:DC:B0:5F:4F:AC:DB:C4:A3
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer: /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial: 019CAE6C69347F1F5BC8BC7E6344933DF57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number: 37
Signing time: Mon 02 Mar 2026 12:01:06 +0000
Manifest this update: Mon 02 Mar 2026 12:01:06 +0000
Manifest next update: Tue 03 Mar 2026 12:01:06 +0000
Files and hashes: 1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: zkWrqTLk4dTY5VCnh7h1yKtbvIqcS3+dfgcoMKe5/gg=)
3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:69:34:7f:1f:5b:c8:bc:7e:63:44:93:3d:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
Validity
Not Before: Mar 2 12:01:06 2026 GMT
Not After : Mar 3 12:01:06 2026 GMT
Subject: CN=124cd12ffc530e79d00e9bdddcb05f4facdbc4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:62:2d:9d:36:5d:93:bc:a1:4b:b5:b4:53:
1b:84:04:7c:35:c2:ab:71:c3:11:b8:e0:27:d5:63:
05:6f:f5:8d:4e:71:26:7a:90:e9:01:03:c4:39:25:
6d:22:86:ca:56:b6:c2:26:31:d4:06:96:3e:3e:53:
ce:53:3d:a5:0f:4b:63:26:00:69:b8:8f:3f:04:95:
b6:5a:17:60:ae:b6:59:e7:01:83:b5:10:0f:20:32:
40:fd:1a:0a:66:0c:c4:ac:6d:28:47:b1:16:6f:b3:
59:42:e6:cc:61:94:6f:f6:85:96:a8:c7:e1:f5:24:
05:54:a5:1e:5b:dd:06:b0:c5:06:96:b9:87:05:45:
34:b1:1f:85:f6:96:07:23:1e:a8:4f:09:ac:47:a8:
81:79:6a:1e:ac:86:75:08:26:2a:eb:6e:0c:85:2d:
9d:d9:f9:3b:78:ec:f2:b7:69:90:9d:ef:01:2f:e0:
16:a1:c0:f0:69:f9:6c:2a:9e:18:bf:42:fa:8e:7b:
f3:2f:f6:b6:67:d4:a4:eb:5d:be:11:25:fd:aa:82:
47:7c:1a:3a:56:50:14:cd:bd:04:93:a0:1c:8b:57:
2a:b8:30:68:23:ea:c2:8b:dd:dc:0a:25:57:07:af:
d5:7f:d5:8b:84:bd:07:6d:fd:2d:b5:b1:78:3e:e8:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:D1:2F:FC:53:0E:79:D0:0E:9B:DD:DC:B0:5F:4F:AC:DB:C4:A3
X509v3 Authority Key Identifier:
keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:76:02:4f:0d:ae:3f:60:79:87:b1:11:17:ae:49:e8:1b:
a1:60:44:da:f3:af:38:a5:cf:46:9d:67:d6:8b:64:ac:3f:c4:
29:1d:6b:4d:12:81:0f:43:85:17:92:ea:eb:7b:6e:a9:9c:ed:
02:ff:d1:1a:2f:e5:69:56:3b:27:34:5b:a1:04:11:7c:e4:0b:
24:52:59:89:2c:30:8a:6b:b5:11:90:aa:71:ce:66:7c:45:b1:
51:f7:16:d0:40:e1:46:5f:80:a7:1b:e3:70:c3:89:ae:95:b6:
d9:ae:e2:6a:e5:65:b5:ab:89:79:d7:89:f0:76:79:56:dc:d6:
42:a9:cc:c8:39:0d:e9:5d:8e:ed:63:20:94:09:0d:76:b7:e7:
f8:d5:7e:93:68:be:22:62:ba:0e:56:92:9d:fa:db:3a:7a:9c:
ab:0b:a4:e9:30:d9:53:b9:14:b8:a8:e7:9b:8a:50:16:57:83:
64:0d:3c:96:8b:36:24:84:6c:59:e6:c7:d3:21:69:8a:a2:42:
3d:fa:34:60:bb:08:35:ca:14:49:69:9b:c1:22:1f:3b:6c:1b:
b6:23:7c:f7:ad:bf:f1:2e:5d:9c:46:c2:2b:0e:4d:c9:23:f4:
90:d8:a0:f4:67:c1:0f:c4:fd:c9:52:cd:1b:70:bf:a1:0c:cf:
59:fd:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:36:08 2026 by rpki-client