Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: eqSQt7/usNdf68Gt8sOepxVxuUkTceoSXYJE9o2e+KA=
Subject key identifier: 6A:24:FC:68:D7:BE:99:65:3A:43:91:5F:E0:21:A1:5A:9A:48:76:85
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 01A1833EFB12D2976A42DDAB7C2A226B50EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0388
Signing time: Wed 28 Oct 2026 16:01:44 +0000
Manifest this update: Wed 28 Oct 2026 16:01:44 +0000
Manifest next update: Thu 29 Oct 2026 16:01:44 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: A+9TmyFPsZxqjZcCfXhUv+VNiI0Ez09iAh3c4uVxuxk=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:fb:12:d2:97:6a:42:dd:ab:7c:2a:22:6b:50:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Oct 28 16:01:44 2026 GMT
Not After : Oct 29 16:01:44 2026 GMT
Subject: CN=6a24fc68d7be99653a43915fe021a15a9a487685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:35:50:6d:a3:51:ec:24:31:b7:47:a5:eb:
8d:a7:46:09:29:13:22:ee:2c:d5:d7:c0:61:18:07:
e1:1d:bf:83:58:47:f7:21:07:43:80:73:7c:56:69:
98:6d:d7:48:4f:df:00:bf:e6:5f:b6:31:ec:44:6f:
52:08:b3:e6:ce:80:be:da:f8:e1:cf:b7:ab:f2:d6:
06:46:31:c8:f2:74:0c:99:4e:6b:7a:ce:1b:9b:99:
c0:3a:52:cb:e7:8e:cc:f1:00:d3:a8:33:82:1b:ee:
8e:dc:e1:c7:4e:bb:a4:c1:94:b5:c8:62:cd:24:63:
d6:67:a8:fa:62:8f:15:13:20:c4:bf:4c:22:1c:6e:
1b:f9:ff:b9:c9:78:e6:b8:71:df:88:2f:9d:bc:39:
6c:27:23:0b:7e:77:e0:60:6d:c6:ed:7a:3a:53:c9:
5f:b2:1a:2d:23:09:07:ac:0f:54:5b:8b:2e:84:dc:
95:82:49:be:65:08:45:86:f5:02:4d:bb:f1:4f:3c:
d1:4d:d5:92:b0:5c:c3:98:ca:75:77:e6:17:06:9f:
72:3c:38:cd:67:a3:f8:9a:06:e4:10:40:b4:c1:c7:
e1:53:95:b1:ae:9a:14:68:d6:8f:55:34:17:4d:34:
14:ef:a1:8a:da:b7:f9:94:4d:74:b9:cb:a9:fb:4a:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:FC:68:D7:BE:99:65:3A:43:91:5F:E0:21:A1:5A:9A:48:76:85
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:b0:e5:b4:fb:57:c9:d7:00:c9:87:d4:11:b3:ac:cc:7b:
0a:f3:ce:83:f5:4c:d6:94:ab:63:b2:70:5f:c8:e6:3d:4c:82:
f1:8a:3f:5b:20:ab:66:e0:6e:ee:dc:14:aa:b5:b5:e2:77:1e:
58:82:65:ee:2e:fb:6e:f9:35:a9:2c:d9:84:13:7a:97:aa:03:
30:51:4c:08:75:2c:46:ef:8d:fd:a4:76:3b:25:64:ee:20:0b:
ff:3c:d9:f6:5f:45:e6:6b:2c:f8:90:79:07:3a:9e:04:ea:b1:
d4:7f:7b:41:3a:7a:32:26:4e:40:e0:26:87:b8:e9:d2:d5:ce:
83:3c:c6:69:10:d4:5a:de:07:51:84:cd:7d:84:5f:c3:ac:d7:
bf:11:81:a8:e1:7c:d8:f5:47:9c:46:10:36:75:15:c4:62:ca:
6b:8b:19:1a:3f:b7:d9:bc:c7:36:87:05:eb:0b:63:d7:5c:76:
63:4e:ae:75:60:a3:04:ff:e0:d9:d6:92:f5:e3:9e:97:33:c7:
fc:f9:19:a4:ae:20:4f:80:39:74:ba:4d:47:da:fe:62:30:9b:
59:3b:f2:b3:a0:8d:d1:7d:8d:f9:86:30:9e:36:21:43:34:7e:
e4:a5:80:f7:87:de:e7:64:4d:bf:a6:cd:1c:2d:87:e0:ec:48:
dd:31:e2:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPvsS0pdqQt2rfCoia1DrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh
MDEzOTAwHhcNMjYxMDI4MTYwMTQ0WhcNMjYxMDI5MTYwMTQ0WjAzMTEwLwYDVQQD
Eyg2YTI0ZmM2OGQ3YmU5OTY1M2E0MzkxNWZlMDIxYTE1YTlhNDg3Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUw1UG2jUewkMbdHpeuNp0YJKRMi
7izV18BhGAfhHb+DWEf3IQdDgHN8VmmYbddIT98Av+ZftjHsRG9SCLPmzoC+2vjh
z7er8tYGRjHI8nQMmU5res4bm5nAOlLL547M8QDTqDOCG+6O3OHHTrukwZS1yGLN
JGPWZ6j6Yo8VEyDEv0wiHG4b+f+5yXjmuHHfiC+dvDlsJyMLfnfgYG3G7Xo6U8lf
shotIwkHrA9UW4suhNyVgkm+ZQhFhvUCTbvxTzzRTdWSsFzDmMp1d+YXBp9yPDjN
Z6P4mgbkEEC0wcfhU5WxrpoUaNaPVTQXTTQU76GK2rf5lE10ucup+0pmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGok/GjXvpllOkORX+AhoVqaSHaFMB8GA1UdIwQY
MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt
YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl
LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq6w5bT7
V8nXAMmH1BGzrMx7CvPOg/VM1pSrY7JwX8jmPUyC8Yo/WyCrZuBu7twUqrW14nce
WIJl7i77bvk1qSzZhBN6l6oDMFFMCHUsRu+N/aR2OyVk7iAL/zzZ9l9F5mss+JB5
BzqeBOqx1H97QTp6MiZOQOAmh7jp0tXOgzzGaRDUWt4HUYTNfYRfw6zXvxGBqOF8
2PVHnEYQNnUVxGLKa4sZGj+32bzHNocF6wtj11x2Y06udWCjBP/g2daS9eOelzPH
/PkZpK4gT4A5dLpNR9r+YjCbWTvys6CN0X2N+YYwnjYhQzR+5KWA94fe52RNv6bN
HC2H4OxI3THihA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:17 2026 by rpki-client