Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: 5Q0ExPD1feqOXkBzNtTbCLJwqdA7rZi3fYeLOkPN/S4=
Subject key identifier: 74:BB:6D:D9:FD:4C:3F:0F:CC:38:AC:C2:3D:88:D9:60:D8:B3:AA:38
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019D3940C5F554B6DD57FB05F97385523379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: HFcUupJao1clIrOYCN7JAZINCMXjGQEvPtvk/tqB4M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c5:f5:54:b6:dd:57:fb:05:f9:73:85:52:33:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=74bb6dd9fd4c3f0fcc38acc23d88d960d8b3aa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:93:91:3a:0c:56:bc:a0:d2:e1:43:8f:1a:
77:bf:e4:aa:eb:cb:8d:0d:67:9f:6d:87:e8:84:4b:
aa:43:8f:7a:27:c8:1d:b7:83:b7:42:db:ba:09:e1:
f7:51:8c:8b:a2:ca:4f:e6:4d:39:88:ee:be:34:6e:
0d:5a:d6:5b:9a:fe:2c:84:e3:32:a4:fa:ba:4a:75:
99:49:23:93:7b:63:a0:9b:39:55:df:09:42:b0:c6:
1e:fb:13:3c:fa:cf:11:fa:21:95:84:c3:74:a1:74:
c9:d1:39:e1:22:94:11:cb:53:0b:e8:dc:ea:52:18:
71:ff:31:96:bd:df:f5:a1:ae:60:a1:9e:ca:5e:be:
cd:a4:d4:f6:1f:69:38:f6:83:43:32:82:48:e1:31:
51:1c:27:f1:44:e6:1d:5c:79:b6:82:35:43:b1:94:
d8:57:60:a6:c7:2d:33:0d:4a:8b:54:17:6c:a8:a7:
df:26:88:76:2d:7a:27:c2:42:b5:62:bc:26:8e:76:
38:76:c6:fb:6b:de:91:61:2d:ba:3e:80:09:53:c1:
25:83:a3:51:45:3e:3c:6f:a7:e1:1b:1f:2e:b3:17:
fe:de:2d:f9:1d:b0:40:92:e3:d9:ff:09:16:e9:5c:
54:6b:49:f8:68:37:47:7d:c6:81:03:d6:02:14:14:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BB:6D:D9:FD:4C:3F:0F:CC:38:AC:C2:3D:88:D9:60:D8:B3:AA:38
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:c0:3f:53:c0:ca:1f:51:b1:ad:4a:af:9e:52:57:77:92:
a8:a5:76:29:d7:3d:b0:0c:1b:0b:fb:50:62:c1:25:57:66:42:
6d:91:e7:6c:60:8a:d8:44:3f:70:2b:73:e0:f9:fa:8b:90:4b:
b4:87:8a:51:78:44:c7:75:f3:e4:7c:57:a0:ad:fb:b5:43:4b:
60:ab:53:32:48:d0:09:cd:8e:c2:21:b3:19:60:5f:42:fd:d0:
8c:d2:ef:c0:e0:e1:58:83:35:25:2a:03:b4:5a:e2:b6:46:66:
94:b4:0c:68:81:a4:40:70:f0:03:d3:95:6a:8e:27:cc:02:a5:
3b:99:0d:0f:12:13:ed:97:7e:fe:80:0b:fe:81:66:b2:52:65:
49:8d:40:fc:9f:0f:a8:23:9a:06:11:d8:79:9e:8e:07:3e:a2:
eb:2d:64:41:7f:f6:d9:fb:2e:11:62:2b:ff:e8:46:d1:44:ab:
a9:af:e7:b1:cf:24:29:15:71:b4:53:8c:e4:b5:b5:de:88:aa:
db:be:3c:f6:41:f5:76:b2:d3:13:eb:5e:33:1e:65:e9:60:4f:
f9:94:9e:30:e5:a7:1c:58:ec:2b:86:63:90:85:16:3b:59:7d:
b3:fe:29:18:0e:39:ae:14:75:38:57:68:41:71:df:f7:bd:02:
d7:d7:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:53 2026 by rpki-client