Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: ywHzEB5fz9d67Tt1u5ijFXNkLHtEeD/ifhdRdyyFYzk=
Subject key identifier: 17:27:53:4D:D1:66:F9:3B:15:A6:83:4C:37:1F:53:61:97:03:64:0E
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 019CABD991F6983D912C66E77EB5AB416724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 0573
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: 7dSA9bQ/ju/2g28xvvDWlIvg+M3Vn8Qt78XZTVdE5IU=)
2: sU0CnD7fmFimr_rcXy1fRdF4mlw.roa (hash: /IZQqNWdeef3TByRifZMyHdV5Oe4U72Qr/QHSSpfxeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:91:f6:98:3d:91:2c:66:e7:7e:b5:ab:41:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=1727534dd166f93b15a6834c371f53619703640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:19:a1:b4:18:64:b7:7e:a5:45:d3:08:f6:
a6:7a:8d:02:06:62:c6:a6:a2:de:3d:74:7c:f8:b8:
8d:2a:30:9b:44:14:3a:d3:e4:d2:58:3d:18:c1:92:
ec:54:ea:96:b7:e4:7b:dc:52:bf:c1:23:63:2b:e3:
53:db:f8:db:24:a6:8f:45:75:ec:ae:4e:c2:8f:c3:
4e:61:8e:fa:a5:06:d0:bc:09:e2:27:05:1d:f4:85:
d2:f1:5e:f6:b1:0c:d5:9b:53:c4:39:b1:72:bb:88:
9a:86:c0:cd:d3:4a:fd:12:e7:85:b7:71:81:da:2a:
39:35:cf:c9:cb:d6:94:72:6e:fc:db:ab:b5:fc:bd:
91:99:36:95:4f:13:d1:d5:7d:86:ae:9f:c6:85:66:
92:55:a5:49:ea:3c:66:0c:da:b2:b1:ad:18:52:91:
c9:a4:36:20:50:e9:92:27:2c:52:af:a4:a1:19:e7:
6e:2f:85:e6:06:17:02:f3:5a:09:c0:bf:c8:5e:d3:
16:f0:5c:a6:3b:03:6d:bd:71:21:57:ff:f4:90:cd:
7e:2a:86:58:77:5b:41:30:69:48:04:1d:b6:01:f1:
4f:48:a3:59:f2:b7:3e:54:15:8a:33:4c:74:cd:52:
c9:4e:7e:d0:05:ca:c0:e6:ac:04:3e:70:e0:e1:02:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:53:4D:D1:66:F9:3B:15:A6:83:4C:37:1F:53:61:97:03:64:0E
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7f:c9:c1:02:7a:e6:c3:4b:c5:3d:fd:21:d4:1b:5b:8a:e2:
51:8e:04:68:6a:d6:b1:32:2a:f9:dd:78:ce:7e:c3:a1:31:78:
43:f9:bd:42:30:b2:e0:ed:08:66:78:f0:5b:ad:2f:6e:5a:7e:
88:6c:2b:ff:a1:44:d6:72:c2:d8:f0:b0:11:cc:2d:81:f5:75:
e7:7a:56:f6:d2:cd:a6:3f:e0:18:01:87:43:f3:58:81:52:0f:
0e:58:67:82:2f:1c:26:db:3e:0a:4d:ab:92:7b:0a:a2:2f:9d:
b4:01:22:62:9d:20:25:9a:c0:36:fb:d0:f3:20:f7:39:dc:b6:
72:db:a3:bd:87:10:94:16:5b:c5:35:5a:80:2a:11:aa:43:f0:
cb:4c:d6:82:35:2d:70:13:23:c4:17:d6:d0:25:fc:f3:40:9a:
85:b2:c0:fd:18:d8:82:8c:82:e3:1e:92:df:b5:02:bd:9a:20:
19:38:7f:8a:a0:85:4c:e1:b2:fa:6f:3e:d2:eb:31:48:f2:37:
bc:6f:08:64:d6:18:60:b8:3f:54:a9:ce:0a:f6:8a:22:fc:b2:
a3:7d:1a:5e:a4:07:43:d6:fa:6e:fc:95:69:4b:ac:a1:26:00:
99:ce:d9:4f:64:e3:94:f1:65:59:cf:d2:52:1f:df:f4:22:0a:
1f:ad:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:20 2026 by rpki-client