Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: toEfCiLR9Ya2TBkOdqoKYIi0B7AY453pbUBVoStJVm0=
Subject key identifier: 91:20:9D:9C:6B:7B:DF:5E:0A:11:F6:19:D9:4F:61:9A:29:E1:C5:41
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 019DA30A55FDEC12445E74869BBF8CF9634E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 05F3
Signing time: Sun 19 Apr 2026 00:00:56 +0000
Manifest this update: Sun 19 Apr 2026 00:00:56 +0000
Manifest next update: Mon 20 Apr 2026 00:00:56 +0000
Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: 9j7DIErMeGzCluC1y0n44a9Rj017YVozPbp2jYUMZUI=)
2: sU0CnD7fmFimr_rcXy1fRdF4mlw.roa (hash: /IZQqNWdeef3TByRifZMyHdV5Oe4U72Qr/QHSSpfxeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:55:fd:ec:12:44:5e:74:86:9b:bf:8c:f9:63:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Apr 19 00:00:56 2026 GMT
Not After : Apr 20 00:00:56 2026 GMT
Subject: CN=91209d9c6b7bdf5e0a11f619d94f619a29e1c541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:13:6a:03:07:db:03:d8:d1:24:f5:09:04:
55:4f:5c:10:43:ea:62:8e:a9:b9:11:47:77:20:44:
e8:8d:d7:55:9e:3b:b1:7a:54:15:83:9d:1a:55:57:
f5:32:e0:b0:7f:8d:96:55:bb:5f:fa:2f:5c:c2:8e:
94:c7:6e:24:76:7d:28:c5:8f:e6:e8:f7:30:3a:e4:
c6:1d:ed:e4:ff:39:70:7d:4e:d8:5f:22:8e:c3:ca:
ed:3f:7a:d8:bf:07:88:e1:3c:4c:02:d3:7a:e4:96:
29:ad:c3:df:91:7e:d5:65:85:ae:e3:e6:3c:63:d6:
ae:b1:b5:ab:7e:f4:76:50:97:78:27:b5:aa:99:26:
4d:c4:b5:63:b1:1a:32:2f:c2:62:b0:d6:d4:ba:f7:
5e:3c:d3:f0:0c:0c:3a:e4:4f:d2:92:9c:90:79:ff:
40:74:75:cd:7a:55:52:df:d2:bb:f4:9c:49:7e:79:
5e:19:03:8f:a0:12:70:c4:e4:bd:32:96:c2:8e:69:
b6:5e:b2:68:bc:29:5a:70:9e:e8:a6:d2:fb:99:71:
1b:c8:9c:1b:6c:a4:6c:bc:bc:b7:85:94:76:67:3e:
95:35:53:f9:04:20:00:6a:72:d4:cb:03:3a:0b:40:
54:c4:de:5d:2c:16:91:62:de:d5:1f:fe:11:7f:15:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:9D:9C:6B:7B:DF:5E:0A:11:F6:19:D9:4F:61:9A:29:E1:C5:41
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:cc:20:66:59:97:dd:7c:da:83:16:e1:58:8b:6c:bb:97:
4d:46:4d:a4:06:e3:88:1a:7a:cf:de:b9:a8:03:43:08:a1:36:
60:b8:cb:b8:46:b8:c5:81:6a:9f:df:af:3f:49:39:81:b2:03:
10:2b:9e:53:e4:29:0b:5a:0e:7f:bf:4a:cf:f7:3b:84:f1:e3:
8e:7c:cb:dd:b5:36:e9:b4:a7:d6:f5:85:2e:31:8c:29:24:51:
d7:06:63:cd:2b:85:f2:56:3a:56:26:44:da:5e:15:ad:96:72:
f2:ea:99:02:9b:fd:20:89:27:85:05:be:3c:55:a5:16:3b:a5:
95:e8:ea:14:21:89:c4:68:62:39:6c:13:99:d9:bc:49:6f:b4:
ae:b0:dd:08:e1:c1:28:f4:61:66:f8:fd:03:8d:42:0a:bf:a5:
1d:7e:ee:d7:19:50:da:a0:c2:9b:e7:da:33:de:01:d1:e2:c1:
ff:b9:53:6d:b2:6f:2c:15:02:5e:85:3e:bb:99:66:53:06:81:
4f:25:44:d2:07:fa:cf:a0:86:b5:16:0f:88:66:f1:1e:74:9a:
2b:9e:ba:63:dd:a9:27:1c:e5:1b:90:58:4d:42:bd:c1:01:f8:
68:95:7c:4b:32:a7:d7:46:39:43:ae:d2:c3:ee:c2:b4:8a:f4:
48:85:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:11 2026 by rpki-client