
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: 9LtvWP6+SjfEomHYqOFbah2PrLcjbwk3uwQ8LG02b78=
Subject key identifier: EF:03:58:4F:48:6E:C3:5E:15:61:F8:DD:41:C5:05:F5:DB:BD:AD:80
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019D27E067473C613BB6AE7B8D894E8559F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 130E
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: xbsdWMSQgtxF63AXUwZAL4EA8rsfexLBSwUdlbK4xVI=)
2: UxsbNkBxV5Z06pGcubFBR8uKdLw.roa (hash: tbWLve0j2n3BjQjOZ6pgmALHAdTE4wxSO/sJbmSQFxs=)
3: tTQT4HsHlUWlBxRkYb49ZrBAWtY.roa (hash: +00YrVjwsl/7FXL7Et4Om6euiIMwhs1ab+9m+Zkr+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:67:47:3c:61:3b:b6:ae:7b:8d:89:4e:85:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=ef03584f486ec35e1561f8dd41c505f5dbbdad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:1a:49:97:90:bd:ac:5b:fd:44:86:c8:9f:
ba:08:c1:5d:1c:f9:49:ff:d2:1d:ef:b8:75:1b:69:
d8:e9:9b:d5:76:1e:79:d5:a6:61:5f:cf:5e:f2:26:
97:ab:90:e3:db:26:84:c4:0d:e0:9f:99:18:24:0d:
f5:ac:f0:ad:f4:0a:f0:4d:23:3c:f8:a9:a7:de:fb:
c8:a2:8f:93:82:49:7f:58:c3:7e:e0:fc:4c:38:f1:
24:86:a1:85:29:16:a2:8d:e9:1d:90:36:28:42:76:
42:c2:49:74:5e:a7:47:9d:ae:3f:f0:c4:96:47:e2:
48:dc:a4:49:ae:e4:12:eb:5b:2d:0c:57:30:a8:15:
20:71:5c:1d:35:3a:ca:cf:dc:ae:08:42:40:bf:ff:
8c:2e:c0:0e:e0:e0:b8:22:fe:b4:3e:db:0b:c2:89:
6b:93:15:7c:07:32:0a:60:90:00:aa:5b:15:bb:0e:
1d:5b:f2:a1:4e:fd:f4:c7:6b:07:14:bf:64:97:95:
13:f2:71:c2:08:c3:c2:8b:86:49:7b:d6:00:a0:30:
6f:c3:96:75:88:87:7e:fc:53:28:7b:b9:ac:2b:5c:
8c:3c:d6:8c:29:6e:74:f6:5b:45:2e:f3:1b:15:ff:
d3:3e:e2:61:f0:df:54:0d:de:f5:43:a6:c9:bb:a1:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:58:4F:48:6E:C3:5E:15:61:F8:DD:41:C5:05:F5:DB:BD:AD:80
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f3:9e:0b:c5:a9:f2:5e:33:9d:46:2a:c5:54:fd:cb:4e:8c:
ba:2c:56:e9:5b:7d:e6:36:90:0a:22:05:b3:7b:1d:0a:20:e8:
8d:46:8b:76:b8:58:f5:b2:09:9f:a2:d6:98:bd:da:c2:a6:15:
4b:66:a0:ef:99:b4:95:3e:29:60:39:8d:b4:04:5b:f6:98:96:
93:39:30:6d:92:e2:bf:f4:c8:40:6a:d4:61:21:5e:7b:03:14:
e8:8d:e6:19:f8:77:bf:a2:6b:80:3a:e6:fd:56:69:cf:92:c5:
da:b4:32:42:75:dd:7f:d1:9a:30:a2:ed:3b:45:b7:c7:71:2f:
fb:ce:af:5e:0d:2b:5b:da:81:5b:49:34:3e:ba:6c:37:09:d7:
76:86:d8:7e:69:b9:c5:9d:49:cb:02:9c:41:77:c6:7a:ae:97:
e3:7c:4f:1c:8b:2f:c5:81:c8:33:9d:bc:7e:ab:c6:73:12:53:
9a:d6:0d:c5:1f:8c:10:a6:c1:bd:e8:44:c6:a2:d6:61:56:d6:
85:9f:dc:ad:11:63:3c:de:88:b7:14:22:59:84:a6:5a:e1:b0:
b6:5e:de:d6:46:e0:f4:a2:94:27:86:d9:a1:8f:1e:ce:cd:52:
f4:da:f5:58:3a:d9:18:b9:6c:7d:19:6e:09:71:4a:d5:d9:20:
ef:09:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:33 2026 by rpki-client