Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: bsduRmelxuX2Ufi6QIEWfWCLf2uS1U/WfaBer2Pp0sk=
Subject key identifier: E8:53:18:6F:C0:F2:24:F9:F3:4D:E1:A4:38:18:9F:09:51:B3:0C:69
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019D2AE1360CB8641CF143B8BE6FC3AD868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0148
Signing time: Thu 26 Mar 2026 16:01:35 +0000
Manifest this update: Thu 26 Mar 2026 16:01:35 +0000
Manifest next update: Fri 27 Mar 2026 16:01:35 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: 8YmFLpK1B4OI0g+CEzx3mIqL4PdnR4Ko35bDj84hCZk=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:36:0c:b8:64:1c:f1:43:b8:be:6f:c3:ad:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Mar 26 16:01:35 2026 GMT
Not After : Mar 27 16:01:35 2026 GMT
Subject: CN=e853186fc0f224f9f34de1a438189f0951b30c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:d1:3e:44:5d:9a:67:ac:22:d4:40:3f:8d:
4d:eb:df:36:2c:5c:0e:82:90:a3:8d:28:ad:a7:38:
cd:4c:69:2e:c8:5a:46:8f:46:a9:ec:ff:7e:95:e7:
42:c8:22:9e:8d:5a:ac:de:f1:e9:e6:db:de:98:6a:
47:52:96:19:12:e7:f7:fd:0c:d5:5c:79:95:c4:f4:
33:c5:8a:8e:a3:c9:65:56:e7:ff:2e:ae:f3:5e:de:
c3:0c:b4:01:e3:d8:9d:ec:4a:c1:9b:6d:1c:6e:2a:
6f:a8:7b:9a:6a:6f:82:b1:90:3a:17:b3:cc:e2:c2:
8c:60:5f:f6:4b:01:bc:f7:44:b2:cb:1a:73:bc:f2:
81:aa:32:13:cb:c8:10:b4:ca:3a:c2:c9:98:dd:b9:
4f:f9:b2:01:79:ce:c4:40:b8:9d:2c:7a:3a:59:a2:
36:26:31:06:60:d2:f8:b8:cc:e5:7c:83:9a:c0:7e:
ce:c1:d8:34:ce:4d:54:ea:35:12:58:2f:59:5f:01:
00:49:cc:99:c7:1d:d3:46:1f:07:42:11:23:5d:64:
14:8d:d0:3e:36:fe:6b:99:78:9a:26:22:b4:b8:dc:
41:43:9d:64:53:53:77:69:76:89:4c:ae:41:b0:af:
9c:68:23:63:7e:15:82:15:f0:be:02:39:a2:3b:82:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:18:6F:C0:F2:24:F9:F3:4D:E1:A4:38:18:9F:09:51:B3:0C:69
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:ce:22:9b:d4:92:4b:53:68:4b:67:b0:3f:bd:56:d1:ea:
03:b2:58:2a:e9:e6:b0:e6:20:5c:53:fe:69:b9:73:3e:da:bf:
fc:a2:2d:e5:71:53:dc:d2:b4:1f:6f:2c:10:64:d1:8d:27:3c:
ba:bf:dc:78:33:48:f9:a7:c0:d3:05:e2:ca:6b:08:e0:e5:58:
db:cc:2f:fe:04:eb:d0:7f:44:30:5f:2a:e0:00:c5:e1:69:0f:
ba:86:9b:62:b0:24:a8:fe:81:da:15:1d:0e:53:e5:bf:0c:1e:
56:5f:73:b9:06:d2:f5:47:0c:08:d1:36:0a:22:5e:44:0b:59:
77:db:ba:b1:c1:ec:62:a2:6c:0c:a4:00:53:87:a5:3b:20:73:
84:cb:bd:a6:ad:8d:de:35:7a:47:2b:d8:48:6d:50:65:45:db:
7d:fb:76:6f:32:c7:a8:a4:03:5f:4c:11:c1:60:6c:b6:89:1b:
f4:18:e8:87:9d:e3:f8:5b:00:18:64:15:4c:0d:57:2a:ee:9e:
f3:b7:a5:63:ac:b6:3f:97:9d:48:bb:d1:58:51:4b:88:5e:fb:
d8:ad:aa:c8:ec:cd:d0:a1:4f:92:0f:4a:2e:d8:6f:f7:25:f8:
c0:e9:66:9f:b5:80:03:d7:55:70:05:03:bb:58:f4:ad:88:8a:
4f:f8:88:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4TYMuGQc8UO4vm/DrYaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh
MDEzOTAwHhcNMjYwMzI2MTYwMTM1WhcNMjYwMzI3MTYwMTM1WjAzMTEwLwYDVQQD
EyhlODUzMTg2ZmMwZjIyNGY5ZjM0ZGUxYTQzODE4OWYwOTUxYjMwYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjTRPkRdmmesItRAP41N6982LFwO
gpCjjSitpzjNTGkuyFpGj0ap7P9+ledCyCKejVqs3vHp5tvemGpHUpYZEuf3/QzV
XHmVxPQzxYqOo8llVuf/Lq7zXt7DDLQB49id7ErBm20cbipvqHuaam+CsZA6F7PM
4sKMYF/2SwG890SyyxpzvPKBqjITy8gQtMo6wsmY3blP+bIBec7EQLidLHo6WaI2
JjEGYNL4uMzlfIOawH7Owdg0zk1U6jUSWC9ZXwEAScyZxx3TRh8HQhEjXWQUjdA+
Nv5rmXiaJiK0uNxBQ51kU1N3aXaJTK5BsK+caCNjfhWCFfC+AjmiO4IHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhTGG/A8iT5803hpDgYnwlRswxpMB8GA1UdIwQY
MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt
YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl
LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG7OIpvU
kktTaEtnsD+9VtHqA7JYKunmsOYgXFP+ablzPtq//KIt5XFT3NK0H28sEGTRjSc8
ur/ceDNI+afA0wXiymsI4OVY28wv/gTr0H9EMF8q4ADF4WkPuoabYrAkqP6B2hUd
DlPlvwweVl9zuQbS9UcMCNE2CiJeRAtZd9u6scHsYqJsDKQAU4elOyBzhMu9pq2N
3jV6RyvYSG1QZUXbfft2bzLHqKQDX0wRwWBstokb9Bjoh53j+FsAGGQVTA1XKu6e
87elY6y2P5edSLvRWFFLiF772K2qyOzN0KFPkg9KLthv9yX4wOlmn7WAA9dVcAUD
u1j0rYiKT/iI4w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:29 2026 by rpki-client