Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: WYdibP3jvfCXRcI7vRZ3KpyKlIfcOPzhufjELMV4B6M=
Subject key identifier: 83:52:49:A1:7F:42:DA:E1:39:A8:11:A6:2A:16:C4:CF:D9:F7:0A:5A
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019E2A3991B9B41D56EB9F080F97DFD8FB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 0573
Signing time: Fri 15 May 2026 06:01:16 +0000
Manifest this update: Fri 15 May 2026 06:01:16 +0000
Manifest next update: Sat 16 May 2026 06:01:16 +0000
Files and hashes: 1: 7f1HjHk-QuYdyKPRtRTB6zRtniI.roa (hash: JfV00R7e1ilZPLpfLYf2At7NSLWNCp/ArWaOcO/+rJ4=)
2: RVbKYNsXkpigrW8bpc1iUTS3mgI.roa (hash: IrBHJsse41bdExiPxgQe3tLrqVamrKp11wXC487m10U=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: IpdR5Ccl3QwDxmdaPORLyW8eJJ0iTW3neQny6fMf5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:91:b9:b4:1d:56:eb:9f:08:0f:97:df:d8:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: May 15 06:01:16 2026 GMT
Not After : May 16 06:01:16 2026 GMT
Subject: CN=835249a17f42dae139a811a62a16c4cfd9f70a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:09:28:28:09:53:c4:19:85:1f:fa:a1:c6:
bb:cc:41:5a:a8:4c:01:a0:04:b1:3c:2e:f8:09:f8:
f1:a0:53:bd:65:57:b0:6f:ee:96:6a:f5:e6:86:45:
e7:fb:29:52:df:ba:bc:bd:50:4f:42:ea:b6:b5:a7:
74:e1:52:e8:8c:1c:ca:ee:e8:7f:39:18:27:93:95:
bc:63:95:54:9d:a5:22:8c:5c:ad:7b:27:8c:69:c0:
6b:4e:0c:29:45:4d:cd:16:73:84:44:9d:d1:ca:d9:
79:64:2c:83:5c:a4:a5:7e:12:3b:74:95:ca:4f:a0:
20:a5:e2:cc:45:4d:fb:4d:08:a8:53:a5:34:c7:b1:
a9:e5:3d:c8:f0:07:ae:48:c6:57:42:4b:53:9f:ec:
fe:48:40:23:f3:9b:96:f0:d6:de:d3:df:37:dd:31:
9e:fe:67:8a:03:a3:f8:d5:90:e1:d2:a1:08:a5:b5:
47:9c:ca:b6:b7:9d:a1:c5:86:b1:ef:e7:09:93:84:
80:e6:67:fe:2b:cb:cb:4e:4a:82:eb:86:10:6d:79:
41:51:28:78:cc:22:88:91:ff:7e:2f:eb:04:33:ba:
b3:3d:93:d6:8c:fb:4d:91:01:2f:55:4d:4c:28:99:
86:aa:dd:d9:58:ff:6d:79:f9:41:c9:49:9e:d9:33:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:49:A1:7F:42:DA:E1:39:A8:11:A6:2A:16:C4:CF:D9:F7:0A:5A
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9f:d5:5a:9b:71:6e:65:aa:33:25:1a:70:3d:28:91:b2:e6:
17:9d:35:d7:7b:06:7b:18:ae:19:52:5d:cb:0f:5b:3e:d7:5a:
39:64:bc:a4:c8:c6:e3:9f:fb:c7:e0:ae:9d:b8:5b:9f:24:c6:
74:ec:a4:09:2e:29:d0:9b:91:3e:27:4a:35:95:51:db:ac:e8:
25:a2:d6:c2:b7:4c:02:23:48:55:f4:9f:ac:84:27:c5:55:6d:
3c:55:58:ff:f8:af:00:8a:78:0a:72:f5:a6:01:f5:ff:dd:c9:
f8:b4:20:bf:67:14:6f:00:00:b9:f9:89:4d:4d:20:dd:fb:18:
67:97:18:82:52:41:cc:a4:c4:5d:58:56:85:16:1d:b1:92:af:
89:4f:e2:53:bd:0e:c7:c0:0d:37:c3:7e:40:d7:b0:b7:48:67:
2b:7d:af:58:54:6b:71:a7:51:6d:eb:89:4a:b1:4d:a0:20:24:
86:86:d2:8c:04:f4:fe:e0:e9:03:29:70:d0:45:e3:f1:c5:dc:
ce:39:3a:ee:a9:32:34:6d:63:a9:7a:50:0d:7c:b6:33:8d:30:
68:c3:ea:e9:cf:fc:3c:ed:44:da:72:df:b0:4a:04:4b:54:35:
8d:fe:c9:f2:28:56:69:85:e3:25:da:d0:2f:6d:8a:78:1f:a7:
2b:57:12:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOZG5tB1W658ID5ff2PsnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmJjZmMxM2Q0ZDVmZjZkMzdjMjI2ZjExZTEyMTIwNGMz
NjdkMTcwHhcNMjYwNTE1MDYwMTE2WhcNMjYwNTE2MDYwMTE2WjAzMTEwLwYDVQQD
Eyg4MzUyNDlhMTdmNDJkYWUxMzlhODExYTYyYTE2YzRjZmQ5ZjcwYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4poJKCgJU8QZhR/6oca7zEFaqEwB
oASxPC74CfjxoFO9ZVewb+6WavXmhkXn+ylS37q8vVBPQuq2tad04VLojBzK7uh/
ORgnk5W8Y5VUnaUijFyteyeMacBrTgwpRU3NFnOERJ3Rytl5ZCyDXKSlfhI7dJXK
T6AgpeLMRU37TQioU6U0x7Gp5T3I8AeuSMZXQktTn+z+SEAj85uW8Nbe09833TGe
/meKA6P41ZDh0qEIpbVHnMq2t52hxYax7+cJk4SA5mf+K8vLTkqC64YQbXlBUSh4
zCKIkf9+L+sEM7qzPZPWjPtNkQEvVU1MKJmGqt3ZWP9teflByUme2TOE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINSSaF/QtrhOagRpioWxM/Z9wpaMB8GA1UdIwQY
MBaAFEb7z8E9TV/203wibxHhISBMNn0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2It
ZmFjYTBlYjMzNTdkLzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTkzNWItMjM0MC00ODA2LWIzM2ItZmFjYTBlYjMzNTdk
LzEvUnZ2UHdUMU5YX2JUZkNKdkVlRWhJRXcyZlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5/VWptx
bmWqMyUacD0okbLmF50113sGexiuGVJdyw9bPtdaOWS8pMjG45/7x+CunbhbnyTG
dOykCS4p0JuRPidKNZVR26zoJaLWwrdMAiNIVfSfrIQnxVVtPFVY//ivAIp4CnL1
pgH1/93J+LQgv2cUbwAAufmJTU0g3fsYZ5cYglJBzKTEXVhWhRYdsZKviU/iU70O
x8ANN8N+QNewt0hnK32vWFRrcadRbeuJSrFNoCAkhobSjAT0/uDpAylw0EXj8cXc
zjk67qkyNG1jqXpQDXy2M40waMPq6c/8PO1E2nLfsEoES1Q1jf7J8ihWaYXjJdrQ
L22KeB+nK1cSyQ==
-----END CERTIFICATE-----
Generated at Fri May 15 11:15:36 2026 by rpki-client