Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier: /jGv7aq09pepD8jxXMkxHZnFwlVdZtIf7E/4IHIZFKk=
Subject key identifier: 93:B9:CE:5C:74:11:48:97:81:67:92:9A:9C:7E:75:F2:83:51:1B:B0
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 019D322BC8857C4384177AF7B5D855E67D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number: 0C99
Signing time: Sat 28 Mar 2026 02:00:23 +0000
Manifest this update: Sat 28 Mar 2026 02:00:23 +0000
Manifest next update: Sun 29 Mar 2026 02:00:23 +0000
Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: tpILPLjG1TCdLTQY1JzCZxv9S8L3RkfH7Ycb4E99lB0=)
2: _0n4FH1o6sJL4P8QXU-ZAykRuQQ.roa (hash: NZVSea9jvUOffSyWCHRvNjbYhkJDAkXWayZMBQQWEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:c8:85:7c:43:84:17:7a:f7:b5:d8:55:e6:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Mar 28 02:00:23 2026 GMT
Not After : Mar 29 02:00:23 2026 GMT
Subject: CN=93b9ce5c741148978167929a9c7e75f283511bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:d2:42:7d:d6:86:fc:07:a7:65:ac:c3:ed:
e5:81:ae:8b:06:b4:9c:cb:6e:cb:ec:ee:38:8c:7e:
6d:04:0b:8d:2a:f4:17:18:34:52:fb:9d:09:34:07:
d7:f5:64:37:2d:be:0b:02:38:4f:fb:cc:d4:68:f1:
91:32:0e:02:ff:65:6e:e0:e3:81:e7:2d:84:8f:56:
ed:ce:82:e9:c7:81:06:98:93:af:ed:df:cc:9a:8e:
46:21:2b:e2:e1:c1:f1:a7:d7:10:51:c7:11:5e:15:
78:05:45:5a:ed:de:6b:12:7c:46:c9:b9:e0:cd:60:
00:39:01:8c:b8:6e:05:a7:85:0a:5c:84:ee:1c:89:
21:d7:96:c2:95:2a:15:96:3c:81:0d:bb:d8:0a:06:
1c:35:d4:fb:bf:82:c3:8d:e8:ea:cc:92:83:7b:31:
d7:e5:fb:d7:51:bf:a6:a3:fe:e3:1b:d3:9c:5d:d2:
38:78:16:f5:c0:47:8c:9c:89:3e:d4:34:85:62:f3:
db:8e:ea:13:5e:c7:f9:89:a9:ec:7f:a4:cd:c8:2e:
7e:94:29:be:7f:4a:1d:ef:de:3f:ce:4f:d3:d4:f7:
33:34:5c:a5:12:8b:c9:53:3a:d2:79:38:67:a5:6d:
25:aa:ca:f7:27:5f:ce:48:61:ed:a0:6c:f1:c9:c4:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:CE:5C:74:11:48:97:81:67:92:9A:9C:7E:75:F2:83:51:1B:B0
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:48:eb:5d:52:c3:2d:10:a8:10:f3:c9:f0:c8:35:bc:c2:3a:
f5:4c:8b:e7:a9:10:73:23:0a:83:6f:a0:25:18:19:d5:69:fb:
81:8b:3c:90:06:8e:de:ec:91:02:64:c1:b7:14:ee:79:ea:bf:
f9:7d:89:36:2a:b3:55:8f:5d:49:cd:57:42:29:18:cb:bf:22:
b3:0a:6d:f2:dd:45:7b:cb:90:a8:4f:ef:a8:fa:b7:3e:96:31:
59:a0:40:df:8e:ad:3d:40:4b:26:bb:82:73:e8:c2:e6:bf:70:
40:af:4f:b9:fb:f4:cf:0b:11:f6:ab:85:e8:22:a6:38:16:45:
b4:57:0c:36:95:22:33:a1:9c:45:e1:46:40:73:db:0b:c7:13:
4c:29:67:a6:97:23:ce:e6:ab:c8:ed:91:f4:49:4d:f6:74:76:
e9:16:e7:2a:8c:43:60:01:a4:06:99:4f:26:0f:7e:b3:c8:3d:
35:75:01:23:28:d2:7e:40:1c:26:cd:c4:0a:37:6a:67:f4:1b:
90:e4:52:1c:26:25:da:4f:22:f0:d2:d0:67:3b:28:f9:62:4f:
e4:20:31:3d:7f:a6:50:60:39:91:92:ef:3e:f9:11:76:64:98:
8a:2f:6d:11:84:94:ce:89:cf:51:26:be:c7:be:4c:fb:14:71:
ed:38:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:16 2026 by rpki-client