Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: ZrKFJxU/t2pgyHM3t9B+7k9jURLYydAIV4/zge7KuEY=
Subject key identifier: D9:7B:7F:6F:45:82:C2:E3:02:C0:5C:49:A6:30:B5:7B:CF:4E:01:87
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019D38D3C6DBFA70A2A84000B1E7E51B87A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 04F6
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: 7f1HjHk-QuYdyKPRtRTB6zRtniI.roa (hash: JfV00R7e1ilZPLpfLYf2At7NSLWNCp/ArWaOcO/+rJ4=)
2: RVbKYNsXkpigrW8bpc1iUTS3mgI.roa (hash: IrBHJsse41bdExiPxgQe3tLrqVamrKp11wXC487m10U=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: 7rLqa+n0OWCIvXW4NA+8pb+ELalwnSK2JocqsRk3jkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:db:fa:70:a2:a8:40:00:b1:e7:e5:1b:87:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=d97b7f6f4582c2e302c05c49a630b57bcf4e0187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:ca:1b:02:25:67:93:4c:66:c0:6c:da:43:
32:1f:a0:5b:55:db:6a:4e:d3:b3:d7:70:15:0d:44:
87:63:e5:d7:49:fe:9f:75:d9:fa:a1:1f:d0:92:5c:
28:0c:52:38:0d:d7:eb:16:cc:0d:06:b5:07:bc:71:
55:e1:2c:ea:44:3a:bc:29:e9:2d:a7:19:af:3a:b6:
ed:78:68:99:8b:16:57:de:1a:65:07:39:92:19:9e:
61:01:fc:ad:73:0d:21:15:21:70:97:46:c1:5e:82:
da:e5:dd:42:81:69:d0:42:35:99:10:10:c4:b2:16:
ec:f7:3d:81:cc:a8:64:21:94:e0:74:79:0d:62:b1:
64:30:fa:e2:26:9c:b3:f6:10:18:30:c5:71:78:92:
a7:9e:4d:fd:e8:87:3b:9c:07:e7:f9:df:a8:ca:a5:
a8:74:ac:59:d8:f7:31:4b:fe:66:d0:68:99:66:4b:
9a:ba:b1:bf:d4:96:e7:ac:ea:5c:4e:54:cb:4a:4e:
46:db:0e:aa:f7:b9:aa:df:ae:53:dc:8f:99:8b:6a:
15:c3:bb:7d:13:f1:d9:96:07:a2:25:36:38:88:0d:
7b:c1:e8:e8:ec:59:76:bd:72:fb:1b:75:56:54:dd:
1a:61:f0:2f:33:10:d3:f0:be:94:27:70:30:42:de:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:7F:6F:45:82:C2:E3:02:C0:5C:49:A6:30:B5:7B:CF:4E:01:87
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:a4:d3:51:ef:c1:55:d6:e9:b9:24:46:c0:42:b3:39:2c:
41:6c:5a:77:a6:af:ff:32:22:5b:89:80:a4:fb:65:29:ff:58:
8d:0b:dc:b7:3d:2b:20:8b:a9:d3:67:f3:22:f9:43:95:98:d2:
b6:d1:c1:01:a3:82:86:eb:8e:81:f1:41:52:28:82:a1:2e:2d:
80:ae:08:00:50:6d:26:0b:e4:a8:6f:74:81:4c:9d:0f:d8:60:
82:cf:83:a7:bf:80:e5:6a:ea:2f:9a:78:69:58:04:41:45:72:
91:2b:89:87:00:74:db:e2:27:28:fd:f3:4a:19:ad:9d:af:7a:
67:cb:1e:09:87:4c:63:11:3a:ae:ac:66:3b:09:27:5b:c9:12:
0a:94:9a:b1:4a:7b:72:e5:e1:9c:2e:af:27:8e:3e:6b:43:9f:
7e:cd:36:d7:ad:49:7d:00:ce:dc:00:68:a6:7f:09:4d:12:39:
95:8b:4c:f1:d6:23:f9:9b:85:65:4a:35:f8:2e:d7:8f:1d:c5:
ae:35:2e:9e:46:c0:c3:d4:9f:57:d3:cb:e3:24:c4:47:a1:84:
ee:97:f2:59:3b:f6:1f:51:9d:11:29:df:c9:6c:fb:a4:aa:be:
9e:52:6a:3f:3e:31:00:05:48:9b:64:77:9a:93:33:a1:58:f9:
2b:db:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:54 2026 by rpki-client