Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: I0EewmbQGAQMDNvN9L+0Z85Gvfa0fKle9bDrOdTlqhU=
Subject key identifier: D0:3B:BA:2B:C8:18:3D:D2:F0:70:88:5E:4C:29:FC:5D:53:5B:84:3E
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 01A0C8C6675AB332229E2C7E12DC5098971B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 09AB
Signing time: Tue 22 Sep 2026 11:00:40 +0000
Manifest this update: Tue 22 Sep 2026 11:00:40 +0000
Manifest next update: Wed 23 Sep 2026 11:00:40 +0000
Files and hashes: 1: 4XP7HiVkwJb7VBFxlRqtJUdrlkY.roa (hash: OOEInEqutnloYStbQZqNgEuL98Agm2HcQLCCh/vFSb4=)
2: LcnRPWMP0InV3_yP2jprbNChb0s.roa (hash: e8UDEtmRI7MTyD+knc6LFW/m5Kw2e0PHXCb9DXA2Dt8=)
3: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: 6TAbdZpcBUtA1Funh1fNBmKuqbukgOnmuUrL26HvMGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:67:5a:b3:32:22:9e:2c:7e:12:dc:50:98:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Sep 22 11:00:40 2026 GMT
Not After : Sep 23 11:00:40 2026 GMT
Subject: CN=d03bba2bc8183dd2f070885e4c29fc5d535b843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:94:8f:cc:20:2a:12:69:25:29:f7:83:54:
ef:a6:91:09:b9:73:0a:a4:0f:0a:93:03:c6:a8:e1:
ea:aa:ea:d0:4b:6f:41:2f:ff:d4:e1:9e:13:90:e4:
14:1e:14:9a:87:6d:f0:ee:c5:b1:a7:3d:f4:1a:29:
9b:6c:0e:41:41:35:45:a6:94:4c:f8:db:06:20:1c:
b1:96:f8:a0:6f:14:fb:c5:c1:b1:01:26:27:8c:07:
9a:e8:dd:8d:65:7d:e5:87:c2:f4:a6:6e:f9:62:30:
52:96:94:11:98:de:23:da:95:f5:3c:cb:5f:bc:db:
9b:9c:3b:c2:83:c2:89:63:1c:40:ad:c9:da:7c:3c:
7f:d8:a6:01:20:17:44:e8:71:06:e9:cb:78:c9:af:
02:91:57:71:b6:81:7b:ea:8e:47:a7:52:97:4b:92:
8d:64:48:0e:73:0e:0a:7b:76:b9:a3:2b:69:5a:aa:
c6:b6:97:93:c3:89:c8:5b:b7:3e:87:6b:e5:89:f5:
2d:c1:4f:b2:e7:ba:95:02:bb:a4:20:c9:fe:75:44:
8d:fa:1f:b6:21:33:c1:5d:3e:ac:17:09:c6:ef:62:
83:6d:c7:48:ee:c8:25:f6:b3:d1:89:2e:06:03:0d:
75:2e:19:99:73:32:e1:1a:9f:8a:3a:1b:d2:e5:5c:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:BA:2B:C8:18:3D:D2:F0:70:88:5E:4C:29:FC:5D:53:5B:84:3E
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:09:81:f8:47:ed:83:9e:5c:95:e7:fe:35:00:24:7c:e1:eb:
5e:8b:f5:7e:4c:0b:15:a8:18:e0:2f:12:f9:a9:47:cf:a6:ee:
8e:84:34:79:94:ad:17:9d:6e:aa:69:5a:3f:50:12:56:dd:be:
a7:4e:6c:1f:ae:7a:e0:43:91:bd:26:d0:33:d6:08:03:1a:0e:
11:76:79:d5:15:cd:87:91:65:19:38:e0:72:25:b7:aa:98:b6:
20:4c:4f:44:bb:b2:4f:91:5f:6d:66:30:18:c5:48:79:e5:29:
fa:6e:37:e3:8a:5c:41:ab:0c:5f:78:02:c5:c5:40:9f:36:43:
4c:8a:ac:cd:d9:d1:74:3e:ff:13:cf:62:b2:ca:ad:ff:34:25:
6b:32:bc:83:9c:ab:bd:bf:18:9b:a4:44:ac:1a:fc:e1:7a:07:
99:1a:b0:d3:83:a8:63:c0:90:5a:fb:0c:b6:23:fe:06:4f:c8:
d6:75:84:21:c5:67:94:d2:f8:57:46:f7:87:0e:e3:c4:08:5b:
9b:a7:c0:b6:61:62:19:b5:89:07:d7:68:43:6e:a7:ea:18:ad:
4d:36:f8:51:06:43:4f:a8:da:c3:f3:62:76:fd:05:d4:92:49:
f3:74:68:11:72:a2:db:9e:6f:86:84:78:b6:70:57:4b:a4:59:
81:d2:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:35:19 2026 by rpki-client