Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: O6IDxToX94kAVLT2viqjdISWY47HrkRtz3yhQpoaYKw=
Subject key identifier: F7:17:C3:91:C4:F1:4C:9F:CF:F7:8E:1B:C8:66:5D:51:73:76:D1:62
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 019D2A7246A2C2489270C6A65083D748D4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0DE1
Signing time: Thu 26 Mar 2026 14:00:25 +0000
Manifest this update: Thu 26 Mar 2026 14:00:25 +0000
Manifest next update: Fri 27 Mar 2026 14:00:25 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: o+TioiVxSAOB72M/Us5Vv2j69AN7TWE5WyBqkp69RwE=)
2: nmFsMibkUkc4eLEyHsZSOh33hiM.roa (hash: UIbhcnO6tinapdLdEyBhk1W1C6XNYeMhFMwzbq1oLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:46:a2:c2:48:92:70:c6:a6:50:83:d7:48:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Mar 26 14:00:25 2026 GMT
Not After : Mar 27 14:00:25 2026 GMT
Subject: CN=f717c391c4f14c9fcff78e1bc8665d517376d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:2a:56:68:0a:6c:0b:34:1b:4c:f3:30:ed:
68:37:d5:93:92:6c:e3:d0:cc:6a:20:67:d4:bd:8a:
9c:b3:22:dc:0c:5b:09:07:b1:49:77:51:72:b7:b6:
27:84:02:48:79:ce:be:bd:8a:2b:a5:0a:61:eb:4b:
e2:de:f7:c8:20:ea:38:af:82:99:00:c9:b6:7b:23:
7d:92:4e:b4:02:6e:2c:5e:a4:ae:35:7a:41:b5:76:
a1:9d:eb:d9:a3:f8:92:75:53:1f:64:30:28:1d:f8:
8d:34:3c:d1:3c:7e:14:a6:f0:d9:8a:8c:3b:65:09:
15:ae:5d:dc:a0:cf:ae:1a:87:54:63:81:12:45:de:
69:80:ef:dd:0d:90:e2:c0:61:ff:d9:2c:06:03:4a:
ad:93:e8:12:7b:20:a5:22:be:0f:f1:d0:67:db:cc:
54:73:10:54:13:20:02:52:d1:e8:68:b3:b7:a3:4c:
42:88:93:76:92:82:f9:ba:43:67:34:54:40:0e:2b:
47:bb:89:ad:05:0b:0d:7b:51:50:61:79:5a:8f:34:
31:06:b6:49:47:57:34:a5:8b:01:fe:cc:40:e7:8b:
ce:ef:81:36:93:5d:4a:f3:cd:67:53:14:ea:e0:0d:
a2:59:e6:f4:02:c6:7d:19:bb:36:57:ee:e9:34:c2:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:C3:91:C4:F1:4C:9F:CF:F7:8E:1B:C8:66:5D:51:73:76:D1:62
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:61:d1:28:1f:ea:c8:68:1f:9f:69:c3:4c:fa:b5:c8:50:
17:25:b6:c4:da:d3:a5:f1:1d:7b:26:5e:cc:64:c5:e2:d5:c2:
e9:7f:8f:55:c7:b2:b5:1f:70:58:83:b4:52:a3:50:28:fe:db:
79:e8:53:46:e3:4b:44:72:f1:c6:e5:51:ca:52:bc:1e:cf:99:
da:25:82:9f:43:65:29:a8:b9:df:9c:22:75:ec:28:c4:83:f6:
74:22:4c:71:f4:01:66:d6:21:c4:d7:58:17:f6:8f:2e:52:fc:
23:4b:c1:37:ac:e7:9c:b2:f7:22:9c:d1:25:a5:c8:60:ad:14:
4f:7e:8b:c7:a9:3e:86:0a:e3:71:16:9f:a2:05:bc:40:d6:81:
8c:61:81:7e:72:91:b2:59:12:eb:e6:14:02:b7:5b:db:f8:76:
b7:eb:a1:4e:ac:2f:d5:96:e0:59:7c:a5:02:3d:41:3c:d5:08:
96:17:bd:e0:bd:7f:48:56:3b:c9:e2:02:73:78:4c:b2:05:d7:
48:5b:9c:c4:02:ba:bf:cf:97:b8:2a:41:bc:67:d8:3d:51:24:
1f:52:41:9f:8c:a5:a8:94:f3:3d:6e:f1:45:ac:29:af:b8:6b:
db:4d:ca:57:1b:f7:e7:06:bf:30:87:dc:9d:34:98:12:80:20:
2b:92:da:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qckaiwkiScMamUIPXSNSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYTg5OGJhMTI1MGM4OTg5Y2M3NmQ5ZjhiNTNkMWRiYzYy
YjI4OTAwHhcNMjYwMzI2MTQwMDI1WhcNMjYwMzI3MTQwMDI1WjAzMTEwLwYDVQQD
EyhmNzE3YzM5MWM0ZjE0YzlmY2ZmNzhlMWJjODY2NWQ1MTczNzZkMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkYqVmgKbAs0G0zzMO1oN9WTkmzj
0MxqIGfUvYqcsyLcDFsJB7FJd1Fyt7YnhAJIec6+vYorpQph60vi3vfIIOo4r4KZ
AMm2eyN9kk60Am4sXqSuNXpBtXahnevZo/iSdVMfZDAoHfiNNDzRPH4UpvDZiow7
ZQkVrl3coM+uGodUY4ESRd5pgO/dDZDiwGH/2SwGA0qtk+gSeyClIr4P8dBn28xU
cxBUEyACUtHoaLO3o0xCiJN2koL5ukNnNFRADitHu4mtBQsNe1FQYXlajzQxBrZJ
R1c0pYsB/sxA54vO74E2k11K881nUxTq4A2iWeb0AsZ9Gbs2V+7pNMIhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcXw5HE8Uyfz/eOG8hmXVFzdtFiMB8GA1UdIwQY
MBaAFOOomLoSUMiYnMdtn4tT0dvGKyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMt
NzMwMzgzMjExZjI1LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMtNzMwMzgzMjExZjI1
LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhNh0Sgf
6shoH59pw0z6tchQFyW2xNrTpfEdeyZezGTF4tXC6X+PVceytR9wWIO0UqNQKP7b
eehTRuNLRHLxxuVRylK8Hs+Z2iWCn0NlKai535widewoxIP2dCJMcfQBZtYhxNdY
F/aPLlL8I0vBN6znnLL3IpzRJaXIYK0UT36Lx6k+hgrjcRafogW8QNaBjGGBfnKR
slkS6+YUArdb2/h2t+uhTqwv1ZbgWXylAj1BPNUIlhe94L1/SFY7yeICc3hMsgXX
SFucxAK6v8+XuCpBvGfYPVEkH1JBn4ylqJTzPW7xRawpr7hr203KVxv35wa/MIfc
nTSYEoAgK5LaCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:12 2026 by rpki-client