Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: 3usU/MiQ4GsGX6t9nauJROb1MgKUmnREPX0So7vpcGc=
Subject key identifier: A1:D7:4A:6E:76:A5:87:20:EE:F3:73:47:E3:FC:C1:00:FC:11:E8:19
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019D2A3C40667AF6C8355957FEEF06E6EF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 0650
Signing time: Thu 26 Mar 2026 13:01:24 +0000
Manifest this update: Thu 26 Mar 2026 13:01:24 +0000
Manifest next update: Fri 27 Mar 2026 13:01:24 +0000
Files and hashes: 1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: 2v9QaJhHxO3JQw60M0LQsO1u1P3/Yjs+B1Bz931uN4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:40:66:7a:f6:c8:35:59:57:fe:ef:06:e6:ef:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Mar 26 13:01:24 2026 GMT
Not After : Mar 27 13:01:24 2026 GMT
Subject: CN=a1d74a6e76a58720eef37347e3fcc100fc11e819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:e4:1c:62:d3:e0:14:4b:1c:af:7d:54:35:
2b:4e:3e:7d:f0:f6:23:a7:fc:ed:e4:ba:74:15:12:
41:7c:9f:e8:a8:42:c8:84:8f:4c:58:59:da:fa:72:
98:ab:a1:40:49:3c:db:dc:86:ef:24:09:dd:f9:4b:
11:7f:d8:25:19:8d:9a:1e:38:a4:74:d8:79:4d:7f:
da:be:2b:24:af:fa:1e:ef:ec:0f:28:b5:7c:f2:3b:
39:16:16:a4:e2:13:24:94:25:68:c1:2c:7b:72:7e:
d1:de:3a:ec:20:a3:52:77:54:ce:c2:1e:0a:9f:f8:
61:ba:17:a1:90:19:57:f0:67:ea:cc:f5:61:ee:43:
e2:73:8f:4a:4a:61:75:39:bd:08:f4:32:42:a9:f2:
25:8a:01:78:34:50:af:ee:fe:47:7e:ff:47:7d:b6:
c2:d9:0d:4e:46:cc:5c:26:07:3e:ab:14:10:b4:a2:
75:62:2b:cd:15:c8:64:5e:1f:30:21:ab:c4:7b:96:
c1:76:e5:d4:6a:d0:4d:9d:75:b8:70:39:7d:b5:71:
bd:6c:73:22:2d:ac:06:f6:ba:2e:0d:6d:3a:86:c6:
ed:30:dd:07:b7:11:81:8c:83:36:b6:38:39:6c:f4:
9e:84:e3:45:08:e7:21:d6:c9:65:d0:8a:da:d6:0f:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D7:4A:6E:76:A5:87:20:EE:F3:73:47:E3:FC:C1:00:FC:11:E8:19
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bc:6f:29:55:a7:15:92:e3:bc:55:43:f5:b9:72:b1:1b:e1:
94:14:8b:a1:9c:e3:56:ab:08:9a:00:ea:04:9c:18:22:79:93:
25:08:1c:de:cf:fa:71:59:9e:26:54:a9:bb:04:2d:69:43:1d:
0a:74:59:72:73:b4:ab:8a:10:5c:43:17:e2:df:03:e9:4f:43:
c8:cd:fc:64:66:d2:b1:2e:18:c0:5d:9a:35:86:01:f3:a1:cb:
56:73:0f:43:d4:ee:ab:69:54:9e:15:e5:1d:25:52:ab:31:45:
ee:6a:9b:34:7e:32:d5:71:c7:99:9d:20:00:60:7f:3e:4b:48:
3c:98:f7:e7:2e:52:9b:97:97:86:f9:25:54:71:4b:a7:7b:40:
e6:db:88:08:f8:12:50:3b:78:0e:26:ff:30:8e:f5:e4:30:cf:
2e:2f:2e:98:18:7e:f6:6c:aa:d6:07:0d:70:05:b9:4b:32:cd:
b5:f7:83:04:6d:6b:58:83:44:9e:5a:8b:bb:28:31:a1:d4:11:
b8:b4:f5:af:d2:75:e2:93:fa:a4:d3:f4:01:3a:99:6e:a0:e3:
ac:ae:75:4d:fa:2f:e8:1f:f2:47:95:ad:63:60:5d:d5:72:8d:
b6:a6:8e:16:1d:69:6d:89:da:f9:3d:89:ba:00:8d:57:91:5d:
35:36:a9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:49 2026 by rpki-client