
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: 5l5s8qb5iTeeF/vzBKqwd/+Jyc1GpsXJjFed3cPBMxs=
Subject key identifier: 68:E5:D8:4F:CE:2B:F7:08:6A:D3:32:07:22:84:4B:EE:F2:17:EE:F9
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019FAABE8083E60A4364E31F026C9EFEE4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 22:00:39 +0000
Manifest this update: Tue 28 Jul 2026 22:00:39 +0000
Manifest next update: Wed 29 Jul 2026 22:00:39 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: I1iqqmpvDWrH6wrm3HbCSyCpOg/Q+A9sFSK5qVHuuak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:80:83:e6:0a:43:64:e3:1f:02:6c:9e:fe:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Jul 28 22:00:39 2026 GMT
Not After : Jul 29 22:00:39 2026 GMT
Subject: CN=68e5d84fce2bf7086ad3320722844beef217eef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:2b:84:b7:a8:d7:45:6d:8a:b0:11:a4:8a:
33:68:e1:a3:e1:c0:a0:11:dd:a8:0e:63:85:ef:5c:
3c:f8:0f:d2:94:94:4b:5c:dc:88:d1:6a:db:02:fd:
0c:4e:81:a4:c8:5a:18:9b:9c:17:d7:a7:b5:5a:5c:
80:16:aa:bc:48:ac:bf:08:c6:b8:37:a2:a4:e5:66:
cd:e1:1c:9d:f9:d9:b7:d7:cb:c0:dd:ea:8e:ab:27:
60:93:b1:4c:6f:a0:ca:48:27:eb:c1:60:e8:a7:b2:
ef:61:b3:22:3e:53:1d:80:22:fc:86:82:96:cf:a4:
92:ca:4f:9d:08:4a:fb:b7:0d:c4:c7:c5:11:6c:61:
90:b9:6a:6a:5a:1a:36:3c:83:31:01:70:f6:44:0f:
1d:9f:c9:9d:eb:8b:c8:d3:df:a1:14:e9:3d:df:24:
1b:38:a4:07:80:5d:6a:e3:3a:a3:34:ad:17:f5:bf:
3b:2b:05:05:5b:17:49:47:91:3a:41:43:84:04:c2:
1c:b1:a6:0f:0a:7c:9b:02:98:fa:93:68:91:c1:dd:
78:eb:45:5e:eb:af:92:38:a3:50:7a:05:df:1c:47:
c7:45:ec:0f:04:13:d5:61:5f:7a:47:5a:26:6b:85:
e0:b4:b1:64:9f:eb:f9:4a:c4:7f:c2:31:2b:f2:e4:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E5:D8:4F:CE:2B:F7:08:6A:D3:32:07:22:84:4B:EE:F2:17:EE:F9
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7c:dd:83:ed:2d:30:d6:99:41:b4:6d:92:3f:aa:0f:99:42:
45:81:ae:62:c3:a9:61:32:ce:3b:02:2d:68:42:a8:70:93:78:
32:29:a8:cb:34:e8:d7:a8:2a:33:43:e7:c4:ae:08:56:e0:44:
de:9f:75:37:d8:13:a5:74:33:21:0b:9d:13:7c:34:c7:92:1c:
81:5b:30:37:ff:b3:5b:be:84:11:9e:67:d0:04:86:84:5a:45:
1b:f6:e4:0c:26:cf:1f:a2:7e:19:31:4a:5e:33:9f:b5:8d:e9:
ad:c6:a6:9a:54:96:a9:57:e8:24:01:05:af:1d:ec:75:dd:5f:
25:c3:34:5b:8d:b9:cd:03:ca:7d:30:41:cd:8a:d0:b6:c0:3d:
e8:a7:0f:7e:e1:68:4f:8a:ac:e6:77:15:53:5d:63:9f:80:f8:
66:2d:cc:09:f4:7f:c0:c8:44:68:9c:0a:92:ef:b0:7f:c0:d4:
f0:d9:94:21:93:b0:9d:85:e4:c2:8f:9f:d4:e1:60:3f:ac:d7:
61:62:4d:3e:d4:63:fe:aa:bb:69:82:e5:d9:93:f2:76:73:af:
ae:f6:e9:70:78:30:67:0c:2f:f5:dc:07:27:44:58:a5:a5:0f:
52:3d:75:3f:d8:f6:d1:98:9b:7c:24:ff:90:7e:0d:18:8c:7d:
4b:7b:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:38 2026 by rpki-client