Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: GyFcoNY2XHps5fr+kki2o3mQJdW/FYOZoCi39Mn1C+Q=
Subject key identifier: FC:1E:46:DF:67:99:F3:E9:4B:45:DB:73:CC:1E:85:FB:C4:1D:B1:39
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 01A0009314D98005E42BBC43E7F8FAA20190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 1895
Signing time: Fri 14 Aug 2026 14:00:34 +0000
Manifest this update: Fri 14 Aug 2026 14:00:34 +0000
Manifest next update: Sat 15 Aug 2026 14:00:34 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: GBC0MRY9z9dtdAUSYxgAiHZdHcV7bflWwKN/BJCXLkU=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:14:d9:80:05:e4:2b:bc:43:e7:f8:fa:a2:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Aug 14 14:00:34 2026 GMT
Not After : Aug 15 14:00:34 2026 GMT
Subject: CN=fc1e46df6799f3e94b45db73cc1e85fbc41db139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:da:7e:09:07:75:79:c4:8b:b2:f4:51:f9:
83:be:4f:c0:89:9b:02:9a:a0:c1:19:ac:8a:df:9b:
45:33:f3:79:98:0b:35:95:78:fb:11:d7:fc:66:a6:
54:0e:fb:34:0b:af:de:03:ea:ed:8b:04:d7:2b:25:
fe:97:16:61:d8:6a:22:98:b5:a3:6a:ae:87:73:55:
bf:52:e9:27:0d:14:60:31:2d:28:c1:3f:74:70:13:
62:5c:1f:02:5a:84:b1:3b:9d:a5:44:0f:23:18:14:
e8:b6:af:82:df:58:fa:02:09:82:ee:11:28:51:b3:
06:34:53:b0:dc:f1:46:98:50:c4:8e:e0:2a:79:46:
2b:46:bd:73:89:53:70:22:92:10:e7:47:f1:99:9d:
9a:bb:4e:51:cd:e2:a6:cb:4a:26:87:74:a2:d4:39:
68:7a:43:2a:7f:bf:48:73:82:44:e6:1a:f1:91:76:
ac:cd:2a:38:d3:57:fe:92:43:bd:2e:ec:e2:bf:0b:
2d:c8:d5:e1:ee:d8:48:be:11:a9:c4:02:7d:17:9d:
df:96:4d:ec:72:b5:17:6e:b8:bd:fe:3c:74:5c:fa:
28:e4:92:a2:dd:24:15:d2:b0:6d:8e:e0:95:4b:51:
bc:38:06:13:8e:85:34:8b:5a:3a:95:99:ee:03:7f:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1E:46:DF:67:99:F3:E9:4B:45:DB:73:CC:1E:85:FB:C4:1D:B1:39
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cc:ce:8e:e8:48:e3:4d:4e:50:a7:cd:43:4e:1d:bb:58:5a:
bc:3a:38:59:55:a5:58:ba:23:6d:59:05:8e:1f:77:e2:35:14:
1a:09:c7:a8:a7:91:31:c9:ed:56:08:36:3e:2c:ca:1b:46:75:
d1:61:3b:1c:6b:c8:30:91:9e:fd:fb:97:10:d4:c9:86:02:ed:
04:ff:01:03:d7:e6:57:0b:1f:18:8b:e2:f0:c6:62:b7:c2:af:
68:bd:4d:61:8a:2f:94:6a:e8:44:78:57:ca:af:cc:89:0f:29:
6a:58:b8:06:66:1e:ef:3b:e9:e8:1e:ce:90:31:1b:21:20:42:
b5:cd:5a:b7:e9:fb:c2:21:8f:41:57:b3:d1:a1:26:03:e5:28:
d2:24:b7:93:69:a2:c7:2d:9e:64:b0:9e:37:dc:6c:cd:b5:b4:
ac:47:d6:ef:85:dc:f3:d0:f1:bc:cd:89:27:b5:a3:8a:a1:f3:
35:38:8f:bb:a4:03:de:ec:db:fe:d0:5e:f8:a1:8f:19:0d:c9:
1f:cf:d1:13:e6:05:a5:04:41:26:8f:f7:7f:ea:d4:80:9e:f9:
17:ae:7d:de:86:c6:67:b3:df:19:63:d2:40:67:93:7b:13:43:
4f:e5:33:42:77:b8:17:a0:bf:48:23:71:ff:9e:51:29:b6:8c:
4e:2d:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:23 2026 by rpki-client