Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: R2ny77FR66YjP2TjaUvbXSJJP27bxCBAM2W3gFcvT4E=
Subject key identifier: BF:8B:65:EF:91:F6:B2:A1:56:73:8C:5C:44:A5:44:92:30:91:8F:53
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 01A0E2F4A00D327FCB275F572BAE22297DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0335
Signing time: Sun 27 Sep 2026 13:01:17 +0000
Manifest this update: Sun 27 Sep 2026 13:01:17 +0000
Manifest next update: Mon 28 Sep 2026 13:01:17 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: fA5o4fF79bw38HiLzDni+bJ6jU+MRh1lj1Y853vrs0w=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:a0:0d:32:7f:cb:27:5f:57:2b:ae:22:29:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Sep 27 13:01:17 2026 GMT
Not After : Sep 28 13:01:17 2026 GMT
Subject: CN=bf8b65ef91f6b2a156738c5c44a5449230918f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:35:ba:7d:7a:5d:24:f1:98:b8:e2:10:86:
d0:17:44:47:49:62:30:f5:a2:ec:68:5e:8e:ab:8e:
d2:0e:2d:cf:53:bf:58:98:8c:b1:d4:31:f9:61:43:
a1:2e:ed:6c:7a:17:09:60:fd:1a:bd:eb:c3:c3:e5:
b1:14:7c:8b:c9:df:07:e3:77:a7:64:bf:e5:93:48:
e5:d3:3c:fb:0e:6c:ad:cd:28:b7:9d:79:57:a8:80:
a5:23:78:95:9c:6d:56:49:7d:b6:48:68:1d:80:c4:
4b:89:8b:ee:b5:7f:9c:59:08:d2:0f:bf:d6:51:11:
eb:3c:2e:7d:34:7d:b4:f1:28:2c:56:ec:29:7e:05:
87:31:a9:53:b8:28:70:a9:25:d6:5e:a1:08:db:50:
0e:8d:a1:f7:bb:70:24:50:bb:95:cf:8b:51:b8:73:
c3:c0:ed:3f:7d:1e:3a:4a:d6:59:71:6d:97:d9:ca:
f2:fa:4c:18:44:23:7b:2e:f7:c1:71:6d:0e:26:e9:
9b:fd:2a:e7:b5:79:6b:31:f6:62:76:56:0b:0c:d0:
44:c8:40:c6:44:52:95:5f:fe:76:22:26:90:72:e2:
1e:9b:50:29:50:c8:04:12:55:68:c0:7f:ae:9a:a5:
2e:7d:85:9f:57:b7:dd:86:c5:29:7f:51:84:4a:fe:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:65:EF:91:F6:B2:A1:56:73:8C:5C:44:A5:44:92:30:91:8F:53
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:77:8a:69:f4:9f:ac:99:48:3b:36:3b:90:65:38:b1:d3:82:
3d:60:44:3b:c3:08:25:d7:d6:ca:58:1d:a2:73:56:ed:78:ba:
85:8b:18:ca:0a:94:88:9b:da:32:41:79:15:2f:d5:fa:fe:9c:
fd:4f:cc:09:17:a7:74:63:4f:91:c2:7f:43:1d:bf:5e:52:3d:
88:d8:69:a7:07:bc:95:86:79:54:2c:f9:68:b0:49:57:6f:25:
2e:02:78:de:d2:38:4c:e2:73:a0:1b:18:f0:56:bc:e4:41:c4:
a9:04:2a:90:6d:f9:65:70:7b:2e:73:ca:22:38:37:c7:c1:42:
94:d8:9e:46:1c:11:50:ae:80:f3:08:8d:c7:78:6a:cc:53:07:
45:c2:88:f7:3c:60:3c:26:0e:e0:04:b9:c2:88:3d:d6:1f:1c:
c6:68:05:28:40:38:42:69:f9:89:ee:01:d2:ff:1a:8e:5e:4b:
ad:04:f2:98:9e:2d:34:ce:5a:46:87:51:5f:8f:4d:68:c4:4b:
87:ab:3e:46:59:a7:e3:f5:6e:c9:89:b8:92:89:d1:ff:07:0b:
79:f8:6f:17:b3:4a:4c:bc:14:72:e6:15:ad:bf:ad:40:75:5a:
03:ed:21:35:2e:2b:c1:9d:d2:fc:99:fc:39:c1:be:88:ba:a3:
5c:7f:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:16:42 2026 by rpki-client