Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: B7z61bKjLfdPTQj8S8Nq3pW9iornQIx7WEOGeXsesbg=
Subject key identifier: 96:BB:FF:91:FE:D1:30:9F:14:3E:22:B3:DE:6E:C1:C4:19:3C:DB:9C
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 019D29614BC68CD8AF5118A7ED33E22A7B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 08FE
Signing time: Thu 26 Mar 2026 09:02:15 +0000
Manifest this update: Thu 26 Mar 2026 09:02:15 +0000
Manifest next update: Fri 27 Mar 2026 09:02:15 +0000
Files and hashes: 1: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: 2wXO4xw3Phe8HAs4F0rIx/oNYrY6sM5kXINvkiz5g98=)
2: v-7IGItX2vWlgw_6szj3vzKNbn4.roa (hash: ziLYn2+2odOsQ2gscP24iW1EJ2eDq8mEnY99Q2B6Rfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4b:c6:8c:d8:af:51:18:a7:ed:33:e2:2a:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Mar 26 09:02:15 2026 GMT
Not After : Mar 27 09:02:15 2026 GMT
Subject: CN=96bbff91fed1309f143e22b3de6ec1c4193cdb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:df:04:11:3e:83:3b:c9:be:05:91:88:c4:
92:5b:11:19:22:42:da:04:18:84:09:cf:e9:a1:ce:
db:c4:dd:5d:74:5e:16:8a:97:49:cd:b9:de:19:5b:
a6:b2:69:5b:c9:89:30:47:2e:4c:a7:f5:0a:ee:83:
b6:37:81:c8:60:4d:23:94:16:a4:b5:e4:9b:af:5a:
f5:6d:a4:0a:ae:ea:ac:2e:aa:c8:ce:65:9f:d9:d4:
30:17:22:c1:bf:a5:48:52:f5:9e:04:b7:ef:be:2b:
99:4a:2f:6c:03:b6:ce:59:8d:1d:bd:df:1b:b6:c0:
d7:f1:c8:c1:06:a1:ed:a3:57:76:c7:17:7e:44:fb:
21:50:03:82:eb:e8:50:45:af:c9:f4:30:93:1e:bf:
e8:7a:26:df:38:0b:2b:36:2f:3a:b3:f9:d0:4d:95:
55:46:15:f6:e6:2e:53:ae:b2:7c:aa:47:cc:50:29:
18:d8:0d:42:12:24:98:2d:0a:6b:16:62:52:a5:5f:
10:91:ce:6d:83:fb:a1:f5:1b:aa:82:bc:46:5a:e5:
2c:5a:bf:33:7c:ad:15:db:bc:e1:f4:bb:2e:a8:9e:
ad:9a:47:03:90:a1:2b:cb:0b:c2:3a:f0:60:26:d1:
1b:22:c6:41:cc:5a:71:03:28:fa:9e:86:bb:23:67:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:FF:91:FE:D1:30:9F:14:3E:22:B3:DE:6E:C1:C4:19:3C:DB:9C
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fd:8b:50:00:71:b4:48:13:4e:21:55:8f:f5:2b:4c:c0:ff:
da:53:7c:e7:90:7b:4f:bc:c4:41:a7:f7:92:f3:8e:45:0c:cd:
c0:76:f6:04:2f:ad:46:36:41:c8:93:7d:5b:38:e2:c0:22:24:
b2:53:00:ab:b8:eb:5c:36:50:8c:53:ad:b9:27:41:8f:c2:d8:
de:8b:2d:35:f4:23:c9:bd:1a:76:d9:9c:cd:ab:92:a4:3a:e9:
89:9f:46:0c:33:f6:81:1c:d2:bc:55:cc:bb:5b:bf:2d:c9:a0:
20:db:65:11:e8:05:0d:b6:3f:d5:88:f9:c1:4b:8d:62:c0:f9:
28:3e:0c:3f:23:06:04:80:69:ba:13:6a:ab:5b:61:d4:4f:85:
b8:d0:67:26:ee:5b:a7:a7:32:44:51:da:49:19:57:6d:ca:68:
8a:75:54:cb:56:e2:ad:ea:b7:1a:49:55:b2:f1:80:3e:fb:fe:
30:5e:12:ad:d2:53:e3:d9:a6:8b:82:47:79:3b:db:c3:e8:bd:
ab:8e:05:60:d2:7e:18:54:32:8b:8a:87:fa:58:ee:78:42:b5:
c3:de:4d:dd:26:68:c0:90:fe:ef:29:4c:15:d5:1a:8a:a4:d6:
a8:24:20:f2:c4:52:5b:7e:c3:2b:db:26:82:93:19:ff:ea:4f:
80:be:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:01 2026 by rpki-client