Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: Uieh7caeXE8NFLFj5YejWSt+wo/7eUvP35JxtDXhxX0=
Subject key identifier: 3A:E9:95:9B:D2:5A:A3:DD:A9:5D:A8:5E:7A:92:E8:CE:BC:7B:FA:F9
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 019D39779A2DBAB2DF1C9A492CCF9A53C4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: FOZyNBk5qscMis-9FzsyuX10OZ4.roa (hash: o+pJe9mj3hblMbWE+RFJ1FoJSPltMRx3Pyr1PBvX55Q=)
2: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: +nKtpxDhTlk5fGziawo/mW3BmUV5yWzCr34o852NMfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9a:2d:ba:b2:df:1c:9a:49:2c:cf:9a:53:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=3ae9959bd25aa3dda95da85e7a92e8cebc7bfaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:89:c2:0f:b3:eb:37:26:9f:72:57:f4:af:
03:ce:0b:35:47:d5:d8:73:eb:28:fd:51:d6:50:07:
76:e5:2b:f9:96:89:63:27:0b:79:2f:81:a5:10:30:
d4:cc:75:fd:24:ed:c2:85:19:53:92:81:b6:68:5a:
d8:c8:92:1c:cb:c4:8d:ad:3e:4a:5d:db:d5:25:4f:
6a:4a:c3:de:d3:47:1c:a6:65:11:d5:9d:08:82:7a:
c3:0b:08:e7:04:be:77:e4:ed:b6:75:26:6e:d7:51:
d9:de:11:78:59:d6:03:e8:35:0a:51:35:2d:69:c5:
2c:a4:bb:a1:03:58:da:d2:99:f5:2b:57:3c:1a:76:
0d:c1:73:d9:17:5c:40:79:1f:da:2b:f7:90:04:95:
c6:42:eb:5a:ce:84:d9:53:a1:38:ab:70:d7:26:db:
c1:a9:15:c1:43:b2:a5:4d:6c:74:37:15:fc:96:2e:
26:f4:4f:3e:46:1f:44:28:f2:2c:ce:27:81:2c:d3:
cb:be:10:7d:76:c2:a1:4e:f1:dc:1e:c5:3f:5a:6c:
1c:32:b5:0b:57:c7:0b:3a:f3:0d:c2:2e:8e:51:08:
eb:8e:a8:5a:5e:bd:2e:c2:14:cd:83:db:24:f3:06:
5d:07:7f:06:d2:f2:e8:7b:30:04:f6:b3:0f:03:c8:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:95:9B:D2:5A:A3:DD:A9:5D:A8:5E:7A:92:E8:CE:BC:7B:FA:F9
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:59:b4:ba:5b:18:56:4c:0a:70:41:7e:91:00:85:62:3c:
4e:97:e0:b1:ec:1d:28:77:91:39:57:17:9c:5e:2f:76:88:03:
63:5f:f3:47:5d:7a:64:c3:8f:0d:03:b1:30:c6:d8:05:46:43:
ba:48:42:fd:8b:a9:c6:5d:4f:f0:f7:76:90:9a:8b:e9:ec:86:
c3:d1:0e:8b:1a:d7:aa:0b:92:d7:99:17:79:3d:ea:f1:41:33:
9e:2e:07:a7:63:06:a1:ea:16:86:f3:99:27:58:dc:4c:e4:ef:
c2:05:e5:bc:93:e3:bc:a8:eb:4b:8b:3f:7a:95:71:7a:27:00:
43:f0:0a:26:6d:72:a9:d4:79:7a:ed:b1:4c:f7:a8:f9:5c:0b:
6c:46:d7:c1:de:c9:fd:15:9a:41:af:65:39:58:ea:01:f7:fe:
71:37:36:9c:77:04:48:fe:cf:75:2a:2d:3a:ce:86:0d:bb:db:
61:ee:16:65:62:f7:1c:07:08:d4:40:3c:75:3a:03:9b:c6:42:
d5:37:3c:bd:1c:f4:05:9b:0c:96:22:2f:38:72:96:3b:94:45:
4d:00:d2:64:26:8a:f8:39:85:5b:93:56:19:56:23:e5:07:54:
2c:1d:5c:d9:46:4c:32:65:63:17:87:ba:46:36:be:37:0a:a5:
37:90:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:42 2026 by rpki-client