Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: Uy3xBLeQ6b7vhTl0yX4beYiPDG5hAKMjonF5EOym2RI=
Subject key identifier: 99:3C:ED:FB:9E:63:7B:9C:CD:7E:11:46:04:00:41:AF:76:34:B0:B8
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019DCF07D054707222F25E9AC73947A5A974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 019D
Signing time: Mon 27 Apr 2026 13:01:28 +0000
Manifest this update: Mon 27 Apr 2026 13:01:28 +0000
Manifest next update: Tue 28 Apr 2026 13:01:28 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: 9849TIpbp6Kny4KqIP2hj6WJqqKTev3x16xiAcskQg8=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:d0:54:70:72:22:f2:5e:9a:c7:39:47:a5:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Apr 27 13:01:28 2026 GMT
Not After : Apr 28 13:01:28 2026 GMT
Subject: CN=993cedfb9e637b9ccd7e1146040041af7634b0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:10:3b:c5:13:81:12:fe:31:63:82:11:e6:
b5:f9:3d:e8:ec:02:34:c2:a3:e6:2e:92:e0:aa:c0:
f9:11:5d:69:4d:b4:a1:68:49:c8:09:d0:73:39:36:
f8:9d:48:d6:1c:69:e5:b1:1f:66:1d:d0:1a:27:26:
0c:25:e6:fb:0d:1e:08:06:15:f1:17:1c:ca:06:01:
e5:09:19:81:df:e9:77:4c:23:ff:b2:6d:8f:87:73:
8d:39:ae:8a:db:f5:2c:87:7a:e0:c0:bb:c6:3c:f1:
a1:88:76:43:9f:94:d2:c6:f8:be:ff:d6:02:fb:23:
d0:dd:9b:53:4e:7f:4c:8c:2f:a7:d2:51:d3:a6:f3:
74:78:c8:ed:7e:b3:06:81:f9:b6:d2:5b:c4:f6:ed:
74:48:69:3b:76:60:12:0a:c2:2a:0a:7a:0e:5b:ce:
76:49:55:c9:c9:77:91:66:7d:3d:54:a8:7d:aa:29:
26:15:25:bf:40:0d:75:42:47:2f:9f:e9:e3:d8:94:
1a:db:c3:21:5b:8e:e8:26:91:ca:7b:6b:e5:be:b8:
c6:d9:58:69:ef:c0:b5:26:5b:bc:a5:ed:02:90:ff:
d6:f8:c2:ba:cd:bb:26:62:6a:69:d0:af:30:6d:32:
48:0f:0a:a5:0a:1c:58:c8:c6:18:6f:0a:2a:4f:73:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:ED:FB:9E:63:7B:9C:CD:7E:11:46:04:00:41:AF:76:34:B0:B8
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e7:ee:82:08:bc:4d:82:86:d9:48:77:eb:7a:b5:f0:3f:1d:
d9:36:e5:d5:9e:f4:81:ed:49:d2:98:c2:c9:be:73:07:6c:89:
a2:f5:ea:29:25:d8:60:eb:17:3c:16:b9:33:60:c3:6a:9f:a8:
b8:0e:38:da:ca:3d:c6:73:1f:70:be:d5:31:f5:02:b9:ca:65:
6f:f4:b8:f8:cc:fc:ad:62:70:07:30:b9:a3:b3:33:97:7d:e4:
0b:e7:4a:52:9c:28:d9:dc:0a:ab:fa:51:17:59:ae:c4:f1:79:
d1:cd:46:45:80:7c:1a:ec:10:41:ed:3f:05:4d:d0:4d:ca:2c:
2f:da:8d:9b:55:70:f4:d8:30:77:30:19:28:85:ea:15:16:fb:
9e:74:71:77:5e:02:f7:a2:46:67:f1:b2:27:83:28:c3:73:79:
19:b1:91:ff:b4:d4:ca:88:7f:27:ed:35:17:73:26:5b:fd:b5:
cc:80:0f:ca:16:47:52:a5:6b:49:e9:96:19:b0:af:01:85:c0:
8f:93:3b:08:1b:a9:7c:5c:46:54:20:c0:9f:27:93:bc:c3:26:
17:bd:ca:c4:b8:2c:54:07:0d:72:f2:4c:2c:50:b7:e1:92:85:
42:dc:18:98:95:fb:1a:24:1c:73:ac:d3:df:e1:4d:b0:9a:92:
12:b3:b2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB9BUcHIi8l6axzlHpal0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh
MDEzOTAwHhcNMjYwNDI3MTMwMTI4WhcNMjYwNDI4MTMwMTI4WjAzMTEwLwYDVQQD
Eyg5OTNjZWRmYjllNjM3YjljY2Q3ZTExNDYwNDAwNDFhZjc2MzRiMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KYQO8UTgRL+MWOCEea1+T3o7AI0
wqPmLpLgqsD5EV1pTbShaEnICdBzOTb4nUjWHGnlsR9mHdAaJyYMJeb7DR4IBhXx
FxzKBgHlCRmB3+l3TCP/sm2Ph3ONOa6K2/Ush3rgwLvGPPGhiHZDn5TSxvi+/9YC
+yPQ3ZtTTn9MjC+n0lHTpvN0eMjtfrMGgfm20lvE9u10SGk7dmASCsIqCnoOW852
SVXJyXeRZn09VKh9qikmFSW/QA11Qkcvn+nj2JQa28MhW47oJpHKe2vlvrjG2Vhp
78C1Jlu8pe0CkP/W+MK6zbsmYmpp0K8wbTJIDwqlChxYyMYYbwoqT3NVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk87fueY3uczX4RRgQAQa92NLC4MB8GA1UdIwQY
MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt
YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl
LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+fuggi8
TYKG2Uh363q18D8d2Tbl1Z70ge1J0pjCyb5zB2yJovXqKSXYYOsXPBa5M2DDap+o
uA442so9xnMfcL7VMfUCucplb/S4+Mz8rWJwBzC5o7Mzl33kC+dKUpwo2dwKq/pR
F1muxPF50c1GRYB8GuwQQe0/BU3QTcosL9qNm1Vw9NgwdzAZKIXqFRb7nnRxd14C
96JGZ/GyJ4Mow3N5GbGR/7TUyoh/J+01F3MmW/21zIAPyhZHUqVrSemWGbCvAYXA
j5M7CBupfFxGVCDAnyeTvMMmF73KxLgsVAcNcvJMLFC34ZKFQtwYmJX7GiQcc6zT
3+FNsJqSErOyaA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:03:30 2026 by rpki-client