Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: Uo5GeCmoul9VaYpxOxTNokqByNnBIohtHLGgf2pvz78=
Subject key identifier: 65:A5:16:26:08:46:C5:59:9E:31:EC:D9:F8:AF:E4:61:EB:2C:17:2A
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019DCFE3B846B2B6DBA324559D4A01D81B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 1365
Signing time: Mon 27 Apr 2026 17:01:40 +0000
Manifest this update: Mon 27 Apr 2026 17:01:40 +0000
Manifest next update: Tue 28 Apr 2026 17:01:40 +0000
Files and hashes: 1: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: IQUoiEIgGVgGgCysNPNDCQSFjDgJ8GFSfuMg3WQMn6Q=)
2: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (hash: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs=)
3: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (hash: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:b8:46:b2:b6:db:a3:24:55:9d:4a:01:d8:1b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Apr 27 17:01:40 2026 GMT
Not After : Apr 28 17:01:40 2026 GMT
Subject: CN=65a516260846c5599e31ecd9f8afe461eb2c172a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:6f:a3:82:a4:65:c6:d3:10:12:7c:2d:a7:
f1:15:0a:50:1a:d5:ed:36:1e:e2:58:f5:35:2a:ce:
c1:e9:f9:b1:4b:c8:e7:dc:ef:87:92:30:5b:02:c1:
5c:f2:8d:d2:f6:e8:6a:b3:35:e2:21:0d:3a:a3:02:
d0:70:b2:e1:1c:09:f3:b4:39:2f:bc:0f:27:27:92:
61:b3:84:4e:b3:82:54:8d:2a:ee:7e:ce:92:fb:f3:
d5:0a:9f:0e:26:85:e1:18:36:be:a1:e9:05:ea:be:
83:ec:65:40:e7:b5:06:0c:6e:a3:0a:45:a8:0f:3d:
7f:07:ba:7b:49:6f:38:f6:81:dd:03:86:15:5d:01:
82:68:3b:09:30:db:e4:d2:05:26:6e:79:1b:b5:a6:
37:25:2c:b4:14:93:47:af:aa:8f:12:34:92:ac:99:
28:ee:40:8f:e1:b2:55:58:f7:fc:d9:13:65:30:d1:
e2:e2:01:22:fe:f4:4b:94:a2:7b:ac:9b:18:5c:ec:
71:fc:cc:f0:20:d8:16:e9:f1:68:0d:e1:1b:27:59:
3e:bc:e7:8e:87:c3:cb:cc:67:83:43:6e:97:8b:f6:
87:f3:44:1d:7a:2f:64:ee:6f:4e:9a:36:ff:7d:fb:
e3:ef:e0:9a:28:c7:eb:4c:50:0a:0d:50:8c:19:bf:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:16:26:08:46:C5:59:9E:31:EC:D9:F8:AF:E4:61:EB:2C:17:2A
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:62:f1:cb:ab:b6:f3:f3:94:19:fe:e3:6b:e6:98:0e:c5:
37:c7:71:76:73:81:95:b9:46:28:61:12:e8:95:64:95:77:61:
d6:e0:06:5f:5d:35:90:c5:1c:8c:12:d4:47:52:60:1c:d4:29:
1b:50:24:be:77:82:40:79:99:38:1b:2e:32:da:db:9f:fc:b7:
53:be:8d:ca:7c:47:cf:f8:54:eb:ca:b5:86:1b:41:65:1a:18:
bc:91:32:41:0d:e7:7e:29:bd:e9:89:c9:b7:04:dd:ee:f3:35:
85:18:8e:b6:eb:68:3f:c2:64:7d:76:2b:6e:13:e7:6c:45:a1:
f1:0f:da:ed:91:b8:b2:35:2b:cd:9c:98:2a:27:32:b1:d1:9e:
16:fb:25:a9:60:3d:8a:f9:6f:a4:e7:ed:0e:dc:1a:9d:48:8e:
96:a9:19:09:cb:86:80:40:b5:4c:c9:b2:04:06:e7:a3:c1:3d:
65:5c:b4:31:79:73:ed:8b:86:a5:e3:03:0a:27:7e:5a:23:07:
77:04:47:ef:bc:00:2e:cb:bc:41:f9:cd:29:76:ab:06:57:b3:
df:12:7a:df:23:b0:a1:45:ad:a1:9d:f9:df:42:94:f7:65:f8:
44:18:f4:fb:c4:53:b9:4b:54:39:b9:b2:a8:6e:96:b9:2a:c2:
be:11:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:22 2026 by rpki-client