Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: w48kw0qq2UMCCCoXPLEgxE4L/Q8pFCIxm7IjSotGiz8=
Subject key identifier: 8E:D0:70:5E:F6:84:F8:C8:F6:CC:88:8F:37:AB:9D:F8:65:29:AE:32
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01A1035AEB29B8BBD28ED3242A53C1E14903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 14A8
Signing time: Sat 03 Oct 2026 20:00:52 +0000
Manifest this update: Sat 03 Oct 2026 20:00:52 +0000
Manifest next update: Sun 04 Oct 2026 20:00:52 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: RjlIuKRu9mOjy38qSWvLUY2+s4YfSN3PtdBvaNp3D5o=)
3: aqxIqajmYQ1_CMiZ7_GwMKxbii8.asa (hash: DHOAQoYQMdjCMW3lkrZBHQJ7lJDnJKHVKvRbqH3Nq5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5a:eb:29:b8:bb:d2:8e:d3:24:2a:53:c1:e1:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Oct 3 20:00:52 2026 GMT
Not After : Oct 4 20:00:52 2026 GMT
Subject: CN=8ed0705ef684f8c8f6cc888f37ab9df86529ae32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:04:3a:a2:02:c0:30:57:55:0b:39:8e:e1:
ac:35:c2:51:e4:ae:a2:9f:a6:b2:3a:26:aa:7f:c3:
5e:c8:96:9e:48:08:ae:24:a8:dd:5d:eb:68:7c:37:
3e:d4:ce:1c:09:44:9e:7a:36:b6:0b:7d:cf:7c:36:
63:87:2b:79:dc:82:29:17:f3:a8:d8:73:1b:bb:9f:
f9:d3:3e:39:79:5b:02:f0:44:f8:c2:97:51:0c:34:
ce:ab:62:ac:ed:c2:3f:13:60:fe:90:ef:b9:7c:c6:
dc:c7:61:8a:58:bd:85:79:7a:3a:b6:d3:09:f1:bc:
9b:43:1a:33:fe:da:6f:1f:56:4a:e4:10:59:a6:4a:
63:9f:d2:1f:d1:a4:71:e8:4a:24:c5:69:f4:fa:fa:
1f:62:37:9a:b0:26:d8:42:8e:c2:c8:7c:de:9d:67:
45:86:39:de:13:1f:2f:b0:8f:27:4f:ca:ca:45:be:
82:c7:6a:71:4b:34:0d:cc:5d:e1:67:ce:56:87:4f:
88:79:5f:f3:a2:1f:91:37:c3:72:6c:c6:38:b3:f6:
73:02:f5:54:03:ec:c2:55:cb:34:4c:de:99:28:71:
f1:07:62:9e:70:62:3d:3f:24:40:7f:ed:78:54:61:
63:3f:81:57:5d:6b:2e:23:42:62:d2:83:cc:b5:52:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:70:5E:F6:84:F8:C8:F6:CC:88:8F:37:AB:9D:F8:65:29:AE:32
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:6c:8c:e5:a5:49:f5:66:11:29:77:6b:5b:ba:68:69:5c:
d3:e5:34:e9:b4:7f:c6:73:bb:76:9c:6b:fb:62:9a:5b:8e:f4:
d2:b9:d1:88:c6:d9:46:d5:3f:7f:63:7d:df:9b:4e:3f:eb:3a:
1d:86:d9:8a:70:24:ad:9c:70:5f:cb:5b:f7:09:d1:23:14:ab:
f2:5c:fd:b9:87:1c:de:02:0c:b3:ee:0e:a4:d2:ad:be:45:9c:
50:3c:f8:5c:eb:68:00:a6:5e:ed:93:80:75:76:b9:dd:51:d8:
ea:58:7c:a0:63:ed:be:2e:9b:08:c9:22:5a:61:97:07:b8:19:
6c:0e:42:bb:cb:c4:cf:ea:8b:96:96:9a:2d:fc:3e:02:fa:b2:
b5:1e:19:d9:56:a6:fe:ae:96:e1:8a:6c:86:72:3e:ef:80:40:
6f:06:0b:a0:04:66:36:c5:b3:4e:43:ee:b6:74:4b:ed:76:7c:
40:4c:80:b9:9a:cc:c7:60:1a:fb:0a:cc:61:e2:ba:37:76:95:
f4:92:fe:16:0f:a2:16:05:c2:db:d7:3c:71:00:ae:56:93:d3:
9e:2d:98:59:35:2d:b9:a1:97:a1:e3:9a:04:33:ba:3b:2f:66:
4f:80:14:6c:63:31:52:52:c8:25:89:3a:c1:b8:1a:37:55:51:
ea:c4:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:48 2026 by rpki-client