Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: vwzywcZGDWXISfgJuqcXMHsEShiYQMBaR8uE4iOI9/w=
Subject key identifier: 9E:14:52:36:E7:3E:E9:A9:2D:64:19:07:78:29:EB:9C:A5:3B:27:BB
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019CE55B02E77CF32714DEDE89E36658244D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0124
Signing time: Fri 13 Mar 2026 04:01:12 +0000
Manifest this update: Fri 13 Mar 2026 04:01:12 +0000
Manifest next update: Sat 14 Mar 2026 04:01:12 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: ygF1/vnP7PkFAgOhnJ2LI4OntRwi2kekmuquX599n48=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5b:02:e7:7c:f3:27:14:de:de:89:e3:66:58:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Mar 13 04:01:12 2026 GMT
Not After : Mar 14 04:01:12 2026 GMT
Subject: CN=9e145236e73ee9a92d6419077829eb9ca53b27bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:85:17:2c:e0:44:a2:31:34:7d:23:78:cb:
b3:1d:ea:89:ab:48:01:f7:fe:a4:52:7f:47:1b:fd:
53:eb:88:e7:33:99:48:08:4e:14:c7:60:94:99:b5:
16:1a:1a:1b:3e:89:60:cb:b3:4d:92:75:d8:b6:69:
50:87:83:97:29:73:e2:3d:18:0c:27:f2:7a:99:5e:
94:94:39:df:f8:84:d0:02:8f:bc:97:1b:f7:4b:46:
57:64:20:95:87:38:a5:b8:97:53:9d:df:95:b5:5a:
d6:6d:e6:8a:bd:9e:ac:36:35:dc:a1:d8:c3:c1:0f:
0b:e1:d7:9f:51:48:f7:06:3b:e9:35:6e:6d:32:48:
5e:0f:a9:f2:48:a9:27:d1:cf:8c:ef:f3:ef:7c:63:
40:21:7c:69:0f:27:d9:0d:35:27:a4:b9:c7:9c:8d:
eb:02:71:33:61:91:49:c1:56:ba:2f:b3:b9:a7:6e:
c6:78:f8:c9:ab:af:50:e3:82:85:af:e1:ae:12:f0:
e4:8b:bf:22:02:50:de:a7:00:4e:05:d1:c2:d3:2d:
c6:fc:25:20:88:54:3f:42:ea:32:c9:27:66:ee:e8:
92:73:3a:27:2c:3d:d3:17:40:91:fd:bd:f9:56:91:
60:84:1e:c4:6f:2a:b3:7c:d9:83:bd:e6:d9:22:f7:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:52:36:E7:3E:E9:A9:2D:64:19:07:78:29:EB:9C:A5:3B:27:BB
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c3:19:43:9f:74:5c:0d:5e:67:d0:55:02:74:1b:f7:52:04:
3a:61:e1:a4:b8:11:d9:e3:a3:e1:cc:63:4a:a9:88:24:42:59:
44:47:a0:bc:97:96:1b:9d:20:63:4b:54:eb:a7:a2:5a:a3:2d:
3f:27:e8:66:d4:cb:05:0f:e6:31:a1:c4:d9:83:8a:b2:69:db:
60:83:6f:cf:47:7a:fa:04:40:16:39:42:1f:8f:3d:30:58:33:
31:c7:46:85:5c:7e:03:91:8d:77:a5:34:54:f4:40:61:06:80:
20:0e:93:f4:62:f6:a5:91:6c:99:40:89:b2:9e:b6:df:5f:58:
8c:29:f5:d3:56:7c:cf:04:f7:1b:86:cf:b1:d3:1d:56:25:09:
d8:6a:2b:f3:2a:69:ed:98:4e:08:c1:ab:69:f7:6c:18:85:47:
8f:21:bf:48:51:a2:f6:f4:5a:45:09:39:7d:10:dc:41:ec:6b:
f3:fe:62:5b:df:c4:37:1c:fa:bf:c3:ac:e1:d5:17:34:2d:e7:
de:d7:7f:0f:a8:f2:59:eb:ae:a6:66:48:65:36:86:78:a6:10:
4a:fd:0f:49:0d:03:05:56:93:2d:87:f6:0e:e3:40:28:34:f6:
a8:4d:8b:05:2a:ee:70:6a:aa:cc:36:b9:4e:18:c2:27:41:7c:
76:a3:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:48:43 2026 by rpki-client