Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier: Bpc9tGhK1h+WqyNEco34QfeaBoZNXHC1S8/tw+Sumo8=
Subject key identifier: 87:8D:CE:F0:0C:50:2A:9C:95:E2:CC:B5:09:48:C9:76:37:61:EB:CE
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 019D37F72A08B8EC94CCC349D6FF67D2334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number: 0D1F
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: PL1NLKNLAw8LoVFbrNk8+Tk/TZzdTJFYJzzK1+iuwAI=)
2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2a:08:b8:ec:94:cc:c3:49:d6:ff:67:d2:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=878dcef00c502a9c95e2ccb50948c9763761ebce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:c6:b1:7a:55:02:d8:94:6c:55:fd:41:ff:
89:7e:28:b5:c2:85:d3:57:a3:df:37:80:c5:32:b0:
88:7f:df:cc:e8:0b:dc:24:2e:bd:ed:f7:2f:46:d0:
cd:ec:c8:26:d0:65:cd:44:1d:c0:96:bc:6b:b8:05:
b9:25:1b:03:2c:76:f3:15:0b:9c:93:d9:5c:93:fb:
88:ef:47:a4:55:0d:db:d6:2f:aa:9a:59:66:6c:3b:
82:88:c2:20:14:93:8f:47:7e:ca:0a:e3:67:9b:32:
4e:b1:35:8e:85:d8:73:4b:c4:b1:bd:ff:c0:47:4f:
f9:e8:76:71:b9:a5:85:10:37:1e:fe:f7:f3:32:0a:
0b:8c:22:8f:c0:7e:49:59:a0:4d:e0:4d:25:8e:51:
5a:2d:b8:00:e9:26:23:ce:26:1b:7a:8d:9b:23:e6:
bd:1e:75:1d:63:d3:53:d7:8e:9e:74:26:0b:e9:bb:
b2:bc:ab:25:09:9c:cc:5a:4d:56:56:09:32:5d:dd:
92:1c:6f:6c:2d:80:36:32:6f:1a:1e:f5:75:84:a1:
82:bf:22:8f:97:88:4e:d6:9d:51:a9:91:ed:8f:cf:
bc:d6:98:3d:41:33:e8:50:a2:26:cf:ae:f8:e5:4c:
1d:92:0a:73:52:2f:d7:4c:b5:15:ae:02:74:81:50:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8D:CE:F0:0C:50:2A:9C:95:E2:CC:B5:09:48:C9:76:37:61:EB:CE
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:34:11:02:d3:ec:8e:a7:87:10:4a:93:7d:25:d6:ee:17:f7:
6b:3a:c5:a1:5c:1f:b0:45:45:d6:33:32:e3:34:11:5b:b4:ed:
e5:45:02:0c:89:86:eb:68:1f:c3:c8:7e:56:00:1f:21:70:b7:
a5:ee:35:2e:bb:a1:8a:30:f8:4c:c4:bb:32:90:52:83:5b:9b:
f8:36:4a:90:e1:28:17:83:a4:52:77:eb:f5:c9:27:49:50:39:
5c:03:a2:3f:63:c6:b7:ea:a6:c1:6d:50:5b:b4:8d:6e:4a:8c:
d3:f7:ac:f8:ef:be:38:62:fa:cf:89:6c:64:f9:ed:53:6b:1a:
22:01:49:cd:ad:63:09:d8:02:1c:cb:9b:48:cb:87:4b:2a:69:
1b:c5:58:ed:87:07:4a:1d:ab:df:9e:60:8b:d1:76:a6:2f:8a:
24:b1:2c:7f:e0:49:6a:9a:83:e9:0f:8a:aa:05:54:3a:b1:09:
23:a3:df:ac:9a:fe:2a:43:37:02:ca:47:41:f1:8b:79:92:7f:
da:27:1b:b9:81:aa:1f:e9:dd:56:ed:15:c5:1e:bf:01:c5:b3:
5e:7f:84:de:9f:c1:a2:ed:66:46:1f:ea:35:1e:90:f9:8d:3d:
63:37:37:85:1d:53:ea:7d:4e:96:b3:4e:2a:4a:a9:68:d8:bf:
70:be:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client