
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: sNKOslQgGkuOtgoBsAe+Rvyb8/BFEQDKiPSfnDN48aE=
Subject key identifier: 5E:6B:B1:13:1A:A8:D6:04:E1:CA:13:5E:B3:DB:43:63:64:3A:B9:7A
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019EB8B458A2380E7384B34DB79D5C2819C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0216
Signing time: Thu 11 Jun 2026 22:01:27 +0000
Manifest this update: Thu 11 Jun 2026 22:01:27 +0000
Manifest next update: Fri 12 Jun 2026 22:01:27 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: JksPDkY5iJ4OAKduFONwodV3O+kw/KitvwLZ8dVDjWg=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:58:a2:38:0e:73:84:b3:4d:b7:9d:5c:28:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Jun 11 22:01:27 2026 GMT
Not After : Jun 12 22:01:27 2026 GMT
Subject: CN=5e6bb1131aa8d604e1ca135eb3db4363643ab97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:11:66:8c:0a:c7:ca:93:b9:75:ec:16:50:
80:b3:83:c1:d5:88:83:28:85:e7:2c:3d:b1:21:7d:
a0:59:2c:8e:f6:5b:8a:be:79:d3:87:85:3a:c5:67:
05:70:fb:d1:27:af:10:64:d2:09:6c:13:98:03:17:
36:31:3b:b4:61:86:a3:39:0d:37:38:1d:95:eb:a3:
ff:e2:3d:88:97:eb:78:48:46:b7:7d:70:30:a9:4b:
ed:d9:cd:cd:83:89:ac:f3:26:11:fc:63:9d:8f:9f:
4b:b1:29:48:2f:ca:05:96:5d:4d:61:54:86:0d:90:
eb:12:69:83:7e:4a:c4:b7:9f:e9:89:39:4e:da:78:
a0:82:1b:a2:7e:eb:dd:de:44:15:26:b4:32:9c:b9:
18:03:ab:aa:b9:94:97:60:5e:fc:01:b7:43:2a:bf:
a1:f1:58:e3:40:ba:43:e9:1a:e8:fe:aa:b1:c3:d4:
c1:f9:f8:21:85:aa:4d:39:89:3d:10:e1:1e:91:68:
28:9e:30:7b:d4:10:1a:bb:7e:2b:53:59:8f:3d:93:
72:76:8f:ff:fd:aa:04:f5:7c:5c:1d:51:62:b6:58:
73:f8:73:a4:89:65:df:d5:08:d2:ca:84:90:84:f5:
ad:b2:73:5b:ba:cc:bb:39:c0:7c:5e:8a:6d:ad:bc:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:B1:13:1A:A8:D6:04:E1:CA:13:5E:B3:DB:43:63:64:3A:B9:7A
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:27:bc:17:fd:85:21:f2:9b:fa:50:0d:65:6f:8e:90:bb:
cf:60:51:bf:c2:4e:77:8e:01:21:b1:c8:06:f1:28:4d:97:c7:
7a:76:5a:19:20:eb:a7:02:ba:9b:58:a7:fd:6d:ac:e1:a3:b1:
c4:35:c6:94:43:8d:1d:f5:cb:bd:fc:95:7f:97:c3:ea:a5:44:
ce:54:a9:23:a2:e1:a3:b0:69:73:b2:97:85:5a:f1:33:e5:40:
c5:e5:75:0d:36:a7:f5:d5:d3:ef:88:7a:5c:43:10:f2:e9:85:
40:4f:46:fb:b6:f4:fe:c1:95:18:d5:d6:a5:7a:32:b3:b8:bb:
9c:0a:0e:a0:1a:53:72:68:b7:62:cf:55:2b:91:44:7b:aa:cf:
47:b3:ec:a5:51:5e:1d:0a:7f:96:75:56:ea:94:bf:a6:9a:31:
de:1f:26:b6:9c:34:79:77:ce:80:30:7b:46:54:f6:c8:69:15:
f3:fb:cd:99:90:c3:58:15:d7:6a:36:32:7c:68:43:a0:11:bd:
3e:c1:85:be:36:50:b5:58:7e:21:89:3c:81:82:1f:4c:fc:41:
bd:2b:59:2d:38:80:f2:1a:8c:97:e9:56:0b:e2:56:b1:e7:cd:
de:18:4f:6a:f8:7b:9b:d7:7c:2d:e0:a7:2e:0d:64:9e:2c:6a:
d4:e2:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:44 2026 by rpki-client