Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: aWpIv+l3vM7GTY3myaaXsWV3rjp0igyFNZDIJJcJ93s=
Subject key identifier: 0B:1B:1A:AD:68:F2:A2:E9:BC:7B:1C:E0:8B:9D:19:B8:05:BF:B3:50
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019CE7EDB0CE705158E1EAB923DAE2C22174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 1287
Signing time: Fri 13 Mar 2026 16:00:40 +0000
Manifest this update: Fri 13 Mar 2026 16:00:40 +0000
Manifest next update: Sat 14 Mar 2026 16:00:40 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: H1JlN19g7xQztK+NTVjgodMbsWsCDPpA07UNYgukNEw=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:b0:ce:70:51:58:e1:ea:b9:23:da:e2:c2:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Mar 13 16:00:40 2026 GMT
Not After : Mar 14 16:00:40 2026 GMT
Subject: CN=0b1b1aad68f2a2e9bc7b1ce08b9d19b805bfb350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:84:cf:44:07:88:2a:59:8e:05:7c:f8:4a:
73:4b:ad:17:05:e6:b9:94:df:a6:23:4d:58:14:4f:
77:9c:f8:39:cf:aa:29:2f:07:51:cd:2f:87:5a:8b:
57:16:23:f7:2c:e2:f5:5d:43:8e:84:80:8c:7b:4b:
c3:5c:c3:52:14:35:84:cb:0d:59:92:de:83:a1:12:
1e:7a:f9:49:3d:fa:ef:27:5f:41:0f:9b:cb:c7:f8:
cf:4c:02:f3:bf:04:e0:3e:1b:53:67:21:d0:d0:79:
f9:02:fe:ba:29:dc:c0:c6:71:59:8b:f9:ad:50:a5:
b0:f8:3c:f7:29:ea:a9:ed:d5:b5:c6:8e:10:d1:85:
ec:62:91:ee:a2:b0:35:17:62:6c:c9:6c:73:52:b2:
ed:8b:e1:89:18:ed:72:41:cd:f7:11:60:13:52:b8:
83:8f:47:42:27:e1:a4:c9:b0:d1:eb:6d:af:8f:0e:
4f:9d:b3:a2:5b:82:f5:3a:c4:81:23:07:2c:4c:27:
29:cd:bd:07:ce:d8:2f:b4:16:6c:00:ec:6e:78:76:
64:06:60:2d:92:61:d7:09:a1:3b:4d:0e:57:7b:f4:
5c:77:10:1e:64:a8:83:02:3a:ba:d0:60:04:00:91:
b1:5f:07:59:27:58:45:12:81:c9:ca:ac:97:7f:5c:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:1A:AD:68:F2:A2:E9:BC:7B:1C:E0:8B:9D:19:B8:05:BF:B3:50
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b5:82:67:c8:b0:22:e5:06:ba:37:6e:bd:88:03:b7:be:34:
b4:bc:b4:ed:55:61:dd:3b:e6:07:33:0c:da:ee:c4:8b:a9:25:
57:b2:b6:8c:c5:7b:78:83:16:d8:b1:13:93:49:d3:a4:b0:73:
aa:7b:67:39:3b:25:c4:56:6b:68:05:40:9f:b9:9c:86:06:95:
6f:c5:3f:f4:5b:5e:a0:64:51:9c:4b:54:31:ab:6a:c3:c3:6a:
df:7a:be:bf:90:73:73:c2:15:85:36:61:cf:4b:4b:6b:76:4a:
2e:f0:f2:57:ea:a2:bb:78:1f:e4:53:2a:ab:6c:fd:52:14:93:
74:d3:f2:cc:55:3b:c3:2e:2f:2d:80:51:7f:c3:89:83:cb:80:
87:8a:08:6d:0f:85:24:f9:e9:68:1d:28:9e:23:da:03:7f:b7:
5f:a8:dd:50:9b:3c:56:0d:40:9e:ac:03:45:45:cd:88:2f:ea:
a9:dd:42:58:50:8f:98:3f:2b:ea:66:c1:87:f3:76:89:33:c1:
dc:c2:a9:fd:53:df:1f:f4:f4:26:c5:01:95:dd:35:e3:e0:b5:
22:6f:9d:ed:08:0f:10:69:7d:2c:85:d1:8d:fd:26:65:65:4f:
26:f7:c9:a7:1b:6f:de:59:42:c7:40:2c:18:c4:4f:2f:19:45:
8d:53:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:27:21 2026 by rpki-client