Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: IC/ggPpx7Msnh0TD/WYcWz21Ocv//DrGMpYEJ1mslzM=
Subject key identifier: 01:D7:BF:3E:AD:50:59:3A:C4:32:C6:04:62:6F:03:19:4D:81:6F:B1
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 019CACEBAEA137B75E27539EED809714C7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 10A2
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: 4GLNhXruLvMKrzathAZRZVWoVLQ.roa (hash: jQCkb4Hj76KR+kp5xn1wyau7JXz8vDe/RQCW3z25Fe4=)
2: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: MtPeb6P4OlqzM19eZ8TGnGhXs/4z2HKpIiCF8z3ENxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ae:a1:37:b7:5e:27:53:9e:ed:80:97:14:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=01d7bf3ead50593ac432c604626f03194d816fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:6b:e4:f9:05:40:62:fa:27:cb:1f:39:8d:
4e:ff:a1:92:40:67:e9:e3:d4:19:85:3e:c8:31:7f:
86:5c:4f:38:57:db:71:a6:53:0b:1d:2c:dc:ed:e6:
f3:38:e1:0b:aa:33:b9:72:af:b4:4e:1d:bf:80:10:
11:89:1a:fc:cc:1b:3b:d0:a7:da:67:a4:7b:f7:22:
f2:94:1e:62:f5:4d:4a:2f:cf:3f:32:41:29:d2:b2:
90:8e:c8:0d:7a:f2:80:4c:74:71:40:2d:9f:25:79:
e4:f9:89:17:11:5c:22:e7:22:d4:90:29:69:94:be:
7e:bd:f5:d7:7d:33:0e:67:31:94:72:f8:22:2d:cc:
9e:9d:67:cb:67:ef:c3:8e:36:72:4c:0b:f5:3c:74:
13:ef:40:86:7c:0e:01:c2:3e:0c:90:ee:72:24:7d:
80:b1:f6:7d:83:1e:41:ca:c5:d4:3a:0c:c0:a7:fe:
fb:ff:d5:87:58:81:da:2b:17:3e:f3:f5:7e:ea:a3:
94:76:e4:6f:f7:6f:07:fb:e9:21:55:7a:4f:8b:e2:
e9:b1:07:25:c5:04:6d:d1:1d:0c:c0:ac:39:a4:ab:
d2:7b:33:2e:de:55:15:61:10:8c:64:97:ab:52:30:
ed:b1:bf:1e:b6:a2:54:80:b0:0b:f9:e7:7c:0c:81:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:BF:3E:AD:50:59:3A:C4:32:C6:04:62:6F:03:19:4D:81:6F:B1
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:22:a4:9d:78:b4:f7:9f:05:70:27:dd:9d:7f:bd:bd:55:7c:
1b:f8:3f:a4:fc:3d:92:bf:c9:18:ad:90:4b:04:85:26:25:a0:
28:ea:2d:61:7a:fe:da:4c:4a:d5:ea:cb:43:cc:8e:a8:95:f6:
2d:d5:62:48:0f:40:4a:a7:4c:1f:3c:7f:4c:9d:92:83:98:b9:
93:32:ae:e4:fc:9d:ae:b9:74:1b:3b:eb:16:0b:3d:08:6c:df:
1a:97:70:35:e4:a3:72:6a:03:12:fe:88:9c:74:50:e8:73:7a:
5d:02:a0:de:78:6a:fa:92:b4:44:62:ba:4c:00:12:73:be:2b:
b2:f9:3f:b6:c3:33:f8:52:46:89:00:d3:36:40:9f:ff:81:6d:
95:ac:98:e7:cc:9d:49:35:06:7c:71:0c:64:81:7b:05:0a:eb:
5a:f1:29:1d:e5:0b:5a:52:28:7f:ae:76:9c:07:a9:2d:73:b7:
c3:e8:8d:e8:e9:95:54:9a:95:58:e9:66:6f:b9:6d:13:b5:70:
84:c3:cf:d2:4e:d5:0d:bc:9f:bc:0d:e0:aa:6e:9b:2b:61:73:
8f:fb:f4:b1:db:5a:84:18:ec:4e:c2:c1:a2:bc:50:51:a3:85:
80:01:d0:55:b8:25:a2:47:a2:a7:a7:ee:f5:61:e7:58:c8:92:
ca:e1:96:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys666hN7deJ1Oe7YCXFMf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjBkNjdjNDllYzEyZjRmNTQxNzAzOGY2ZGMxM2MyZjkz
ZWE3NjUwHhcNMjYwMzAyMDUwMDUyWhcNMjYwMzAzMDUwMDUyWjAzMTEwLwYDVQQD
EygwMWQ3YmYzZWFkNTA1OTNhYzQzMmM2MDQ2MjZmMDMxOTRkODE2ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FRr5PkFQGL6J8sfOY1O/6GSQGfp
49QZhT7IMX+GXE84V9txplMLHSzc7ebzOOELqjO5cq+0Th2/gBARiRr8zBs70Kfa
Z6R79yLylB5i9U1KL88/MkEp0rKQjsgNevKATHRxQC2fJXnk+YkXEVwi5yLUkClp
lL5+vfXXfTMOZzGUcvgiLcyenWfLZ+/DjjZyTAv1PHQT70CGfA4Bwj4MkO5yJH2A
sfZ9gx5BysXUOgzAp/77/9WHWIHaKxc+8/V+6qOUduRv928H++khVXpPi+LpsQcl
xQRt0R0MwKw5pKvSezMu3lUVYRCMZJerUjDtsb8etqJUgLAL+ed8DIFaRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHXvz6tUFk6xDLGBGJvAxlNgW+xMB8GA1UdIwQY
MBaAFFew1nxJ7BL09UFwOPbcE8L5PqdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzkt
YzNhODM3NWY5MGY5LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NTE2NTctMDQ0ZC00N2QzLWFmYzktYzNhODM3NWY5MGY5
LzEvVjdEV2ZFbnNFdlQxUVhBNDl0d1R3dmstcDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCKknXi0
958FcCfdnX+9vVV8G/g/pPw9kr/JGK2QSwSFJiWgKOotYXr+2kxK1erLQ8yOqJX2
LdViSA9ASqdMHzx/TJ2Sg5i5kzKu5Pydrrl0GzvrFgs9CGzfGpdwNeSjcmoDEv6I
nHRQ6HN6XQKg3nhq+pK0RGK6TAASc74rsvk/tsMz+FJGiQDTNkCf/4FtlayY58yd
STUGfHEMZIF7BQrrWvEpHeULWlIof652nAepLXO3w+iN6OmVVJqVWOlmb7ltE7Vw
hMPP0k7VDbyfvA3gqm6bK2Fzj/v0sdtahBjsTsLBorxQUaOFgAHQVbglokeip6fu
9WHnWMiSyuGWQA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:11 2026 by rpki-client