
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
File: V58iewJgDmAu_FEmBensZlrR-C4.mft (raw, json)
Hash identifier: Rm1k7fv8j1uwE7WdnheNmHwQ4kI4qMI+MApw/B3EuhE=
Subject key identifier: 49:32:A8:AF:50:3C:97:77:C0:98:5E:51:54:91:68:02:CF:98:4D:92
Authority key identifier: 57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
Certificate issuer: /CN=579f227b02600e602efc512605e9ec665ad1f82e
Certificate serial: 019CAE35F0DDDFB818F22C9F97585C2B2CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
Manifest number: 24
Signing time: Mon 02 Mar 2026 11:01:36 +0000
Manifest this update: Mon 02 Mar 2026 11:01:36 +0000
Manifest next update: Tue 03 Mar 2026 11:01:36 +0000
Files and hashes: 1: V58iewJgDmAu_FEmBensZlrR-C4.crl (hash: a4wlqnhBuYlpdXAAHmJ7iu1C3W04wh7diyYC06a9yDY=)
2: _W45yWZbF0IW6tEuWrtSE9T4T4U.roa (hash: LUpLsmmYWa7Qa/cjp3HgkJS6f328ddsso8MNmbggimo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f0:dd:df:b8:18:f2:2c:9f:97:58:5c:2b:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579f227b02600e602efc512605e9ec665ad1f82e
Validity
Not Before: Mar 2 11:01:36 2026 GMT
Not After : Mar 3 11:01:36 2026 GMT
Subject: CN=4932a8af503c9777c0985e5154916802cf984d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:da:cb:2f:60:40:6d:73:d4:4e:e7:3a:f2:
e7:dd:23:e4:f5:be:13:9c:74:00:d4:88:28:f1:b0:
01:cb:3d:bd:86:85:53:32:40:29:d6:b8:6a:2b:b7:
64:21:5e:a8:71:be:b0:c3:79:12:91:42:12:7e:5f:
98:cd:6d:61:10:ac:9a:f1:bf:97:35:e2:68:43:ac:
68:04:49:b7:95:01:8e:fd:a6:78:98:15:ef:ac:6c:
e5:99:4d:2b:a6:e0:89:04:53:7f:fd:2f:4a:bd:88:
51:b4:45:73:b0:1b:a1:ee:c9:8a:e1:8f:1b:ab:2c:
8e:a8:79:cc:70:7a:e7:05:e4:17:d1:80:14:25:48:
33:dd:f0:06:b4:ce:80:92:6c:32:6b:3b:47:76:9d:
b5:ad:d4:ae:78:29:3e:32:d2:01:0b:b7:18:d5:cb:
91:13:e7:9a:9e:ba:8a:1e:02:b0:2e:e4:dc:5f:6a:
eb:e1:35:a6:94:4e:af:48:56:9d:19:6e:c5:fa:52:
86:1f:39:2b:92:0f:b3:a8:f4:1c:9e:85:95:6d:ef:
6a:38:74:7c:de:9b:5a:04:d0:95:f7:53:e7:45:35:
35:41:0b:f2:b2:28:cd:0f:f9:9a:8e:9a:ee:58:1c:
df:c3:b2:72:9e:c2:08:5f:fc:26:ce:5e:eb:58:b3:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:A8:AF:50:3C:97:77:C0:98:5E:51:54:91:68:02:CF:98:4D:92
X509v3 Authority Key Identifier:
keyid:57:9F:22:7B:02:60:0E:60:2E:FC:51:26:05:E9:EC:66:5A:D1:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V58iewJgDmAu_FEmBensZlrR-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a696f1-c37c-4c6a-a1a0-eb8e9aa95484/1/V58iewJgDmAu_FEmBensZlrR-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:82:64:49:71:6b:e2:f2:4a:2e:7f:3a:83:dc:fd:cc:46:
45:29:04:14:e6:14:c8:18:b4:cf:0b:59:72:40:82:39:f9:3e:
74:34:c8:29:50:35:60:90:36:89:cf:9a:4b:19:b6:d1:cf:e1:
5b:90:6f:4d:40:e7:ea:0f:93:75:5c:b4:ce:17:d4:34:73:fe:
28:5a:72:0d:a1:4d:f1:fc:9c:7a:5c:a0:19:3d:0a:09:13:56:
82:3a:84:4e:11:36:f7:3d:65:f2:78:e1:0c:67:b4:6e:04:86:
6f:9d:c7:94:33:12:c1:ff:27:11:61:69:88:99:e7:4e:f0:58:
ba:c0:50:17:bd:f3:49:8b:2e:ab:38:b3:93:94:d0:3a:0d:dd:
91:96:b4:f9:db:9c:b5:5b:da:74:83:e2:68:34:ce:e9:47:9b:
84:37:00:94:1a:03:37:a4:e8:23:67:32:bd:61:ae:9c:c8:3c:
4c:94:80:20:62:17:07:48:f1:b3:3e:55:27:af:a4:a1:34:6d:
99:11:b6:11:ee:f6:81:46:c7:96:ed:f1:8b:76:3c:76:58:26:
91:41:dd:08:e4:83:69:cc:bd:7e:0a:6a:b2:cf:8d:e4:4e:e4:
d3:07:23:9f:6f:f3:a1:d5:9a:bd:f8:46:c4:94:e2:45:d5:fe:
2d:09:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:35 2026 by rpki-client