Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: kiL41Wie2rr+CQmunYJzOfzFepNiXFlc/quCk3o8ylI=
Subject key identifier: 39:27:72:9F:2C:20:16:E4:91:CC:00:46:4A:AF:08:43:E6:F9:22:5A
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 01A08A1EB16A64A1F9E4EAD70BE102BD8416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0307
Signing time: Thu 10 Sep 2026 07:01:02 +0000
Manifest this update: Thu 10 Sep 2026 07:01:02 +0000
Manifest next update: Fri 11 Sep 2026 07:01:02 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: DQBA27W9m644hOM8+kC5Qfff28e3iIpqkyD7+Fd4M3g=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:b1:6a:64:a1:f9:e4:ea:d7:0b:e1:02:bd:84:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Sep 10 07:01:02 2026 GMT
Not After : Sep 11 07:01:02 2026 GMT
Subject: CN=3927729f2c2016e491cc00464aaf0843e6f9225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:68:74:98:bb:bf:e3:49:91:a3:d5:dc:0c:
ca:34:13:92:f4:e1:77:bf:8b:29:ac:b5:ca:b9:81:
b7:c5:da:28:80:ec:20:35:78:1d:5b:a5:00:87:7f:
eb:91:85:4e:4d:3a:c2:45:79:26:03:13:5c:2a:92:
94:56:a3:d0:2e:af:1d:59:96:82:6f:53:0e:2a:e9:
9f:70:8d:d4:a3:ce:16:41:8e:37:39:50:42:1b:8b:
6e:44:6a:50:7b:36:0c:e2:08:f7:d9:91:6a:7c:4b:
50:b4:93:75:f9:6f:10:49:22:3c:38:f0:e6:54:00:
15:cd:b2:80:e4:4b:17:4b:b3:c9:da:d6:69:69:25:
ef:99:a2:99:ff:f5:09:f2:52:4a:cf:6e:54:3a:02:
21:a7:f6:53:70:b7:49:92:48:f0:4e:e4:83:17:4c:
ba:28:ed:4b:02:b0:d4:04:c0:ac:52:da:38:d5:8c:
89:e2:3f:93:e0:a9:f4:d8:e9:57:01:ca:ce:d3:e6:
e8:cd:55:23:4d:98:91:aa:60:38:5d:b5:df:30:57:
c4:86:35:d6:9b:52:c1:b7:15:84:82:c8:d0:60:f0:
f7:88:5c:0f:40:e1:0b:1f:07:86:e4:4e:84:e1:e3:
1e:af:48:19:60:d4:44:01:5f:fc:10:86:04:8f:aa:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:27:72:9F:2C:20:16:E4:91:CC:00:46:4A:AF:08:43:E6:F9:22:5A
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:b7:b3:06:30:53:11:b5:c3:ea:c9:f4:45:c9:8e:af:28:
fe:6b:69:4b:47:d6:47:27:c1:43:62:78:31:fa:ba:44:4f:15:
ba:2c:79:28:5c:39:9c:3c:08:89:ce:10:cd:f1:9f:b7:08:0f:
94:0c:4e:b8:da:d7:83:df:ed:4f:5f:e8:49:77:e7:bf:7a:78:
28:3a:7f:26:31:60:1c:50:a5:11:b7:38:fd:6d:7a:8f:f8:4e:
e3:93:b7:b7:69:e5:9e:bd:af:ed:3d:91:93:f0:91:e4:09:53:
90:e6:4f:a1:58:60:14:40:c9:24:3c:ce:c5:96:22:ae:45:d7:
da:d4:3e:5c:37:5c:f5:7d:19:1c:dd:ba:dc:25:05:80:9e:3a:
b0:22:6e:cb:d5:51:db:69:c4:b3:17:23:4c:25:78:da:88:22:
b9:29:62:5b:7e:3c:f2:ca:38:c9:2b:b5:46:c5:72:38:63:0f:
83:bd:c3:99:d1:6e:0f:5c:05:7a:66:af:f7:bc:7a:2d:a9:dc:
64:dc:b6:a2:5f:68:ce:57:6c:32:5f:ee:2c:f1:2b:5b:dd:2f:
08:1b:30:a7:24:68:24:4c:76:e1:8e:73:f1:d4:3b:22:a1:a5:
ba:fc:75:36:38:c7:43:ef:9d:b9:5c:10:1a:c7:19:66:e3:84:
f2:4a:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:13 2026 by rpki-client