Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier: I/SVp7Yw6o+EpBzzJ2kMBM25j+UE4gR4Q0vuTAYalkQ=
Subject key identifier: 15:9B:65:91:AB:F0:1D:1E:A7:98:D2:59:DE:00:9A:DB:B5:5B:17:C7
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 019D37C0AD1961ECEC8AD8E14B3DED1AF292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: K3MEUZtvO9ofH1ctUKQXWqBx+yc0OxNGlhUBVWQ4EX8=)
2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ad:19:61:ec:ec:8a:d8:e1:4b:3d:ed:1a:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=159b6591abf01d1ea798d259de009adbb55b17c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:5e:73:2c:96:22:86:5f:d8:b3:10:ad:a3:
13:94:be:3e:f3:35:d5:0d:c3:01:66:0c:9e:e7:45:
80:02:31:37:61:77:af:d5:7e:68:57:0f:76:f2:5e:
93:3a:63:fc:28:88:3d:87:0b:0a:0f:be:03:ba:af:
b9:25:c3:28:25:26:28:76:ab:66:e6:0b:b1:29:c6:
9b:fc:9a:95:04:37:98:46:63:c9:4d:b8:82:af:df:
31:6c:b9:75:c0:e0:fb:11:5c:25:68:27:01:68:9a:
a5:18:dc:57:81:4c:0d:93:03:6e:2a:1d:4a:28:c6:
3e:9d:eb:4c:e1:36:1a:14:49:dd:ce:bd:48:e8:10:
35:5b:2c:d5:9c:25:4f:30:d3:92:86:ad:9b:cc:c6:
f4:64:ce:26:37:90:16:a6:88:9d:47:7d:50:12:5f:
6d:13:1f:ba:49:6a:0d:72:21:ba:b1:ef:be:2b:f3:
fc:52:b8:c0:d1:26:86:14:27:fc:9e:5b:e5:fc:bf:
e6:b3:f3:5f:c8:ce:9d:66:ce:14:e8:63:60:92:13:
6e:e0:07:ca:73:97:41:bf:1f:ef:25:b0:85:0d:41:
93:5b:d3:fc:3e:ce:2f:ee:1d:35:9e:12:02:d1:fb:
00:9a:53:02:8a:e0:1f:70:45:83:2f:3b:bf:47:83:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:65:91:AB:F0:1D:1E:A7:98:D2:59:DE:00:9A:DB:B5:5B:17:C7
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:a0:36:6e:0c:cb:84:74:56:f7:4e:b6:81:0d:88:ae:dd:
aa:34:c4:39:6c:b9:49:0a:b2:84:c0:5a:6b:c5:0a:30:10:3b:
6c:fe:37:1e:a6:bf:bb:57:91:71:20:c3:2d:87:db:7a:09:13:
44:89:e7:50:e3:88:d7:05:b8:75:f2:6c:7f:54:ef:c5:0b:f7:
a9:f8:2e:cb:af:c6:d6:5c:f3:19:32:69:d4:13:5a:04:0d:de:
5e:43:a0:98:cc:c2:4f:dc:d7:7f:7c:5d:4e:b3:08:e6:c1:f9:
61:23:e5:f9:44:e1:a6:02:23:2e:bc:cf:63:6f:b7:52:87:e6:
f9:86:9a:64:5f:a3:b2:fc:06:61:12:d0:fc:c2:47:bc:95:a4:
b0:f3:f1:36:33:0d:47:40:1a:e8:04:23:8d:f9:a8:64:93:a6:
81:6f:8d:c6:e6:ab:fd:b8:ca:01:94:a8:0b:72:6a:0a:e1:53:
e7:34:8a:07:7a:b8:a4:0c:3a:1f:18:76:6a:d3:28:a7:15:bc:
2b:ff:ac:10:20:99:e7:62:56:2d:9d:2e:e3:09:82:91:e6:f5:
61:86:f3:0b:47:6b:e5:80:84:f1:af:e2:4a:05:be:92:58:93:
10:ab:8f:b5:ce:c9:ec:88:ad:4d:35:89:62:e5:b3:d7:4b:c1:
c1:03:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:37 2026 by rpki-client