Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
File: RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json)
Hash identifier: Pld6qsPvzN9WC2eyYscNVADWi78Vv4GIvP4RuaB7ylI=
Subject key identifier: 4B:05:E4:89:57:EB:4D:31:6F:64:B2:00:51:F9:34:C1:F2:B5:12:D1
Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
Certificate issuer: /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Certificate serial: 019D28F23689BBC2BA9FDFEA74827EF6C11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
Manifest number: CC
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: Vkp62Ya/2Itr8jXIXi13yEiFjBxzywzP/488Agn9SE4=)
2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:36:89:bb:c2:ba:9f:df:ea:74:82:7e:f6:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=4b05e48957eb4d316f64b20051f934c1f2b512d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:bb:77:6a:90:ac:3f:65:7a:c3:cf:50:a7:
56:65:40:51:5d:40:fa:be:4d:36:3b:51:3f:4d:ed:
5f:ef:3a:05:aa:a7:28:ad:fe:9e:47:e3:ef:c5:db:
bf:60:3f:86:df:7d:4c:16:b7:e9:f0:3b:63:97:9b:
fe:17:62:38:4b:eb:06:82:e3:13:d5:e9:5e:81:0a:
ab:f6:13:b0:f3:d9:f1:77:70:d4:2e:5e:9d:65:28:
46:26:23:c5:20:2a:35:8b:cc:c6:8a:f9:fc:1e:0c:
2c:08:5d:2e:48:87:d6:63:f8:68:9d:4d:58:32:6b:
95:af:ed:89:1d:e9:8b:7f:b4:c9:73:86:a8:6b:fd:
35:21:93:a3:bc:e3:10:f2:a7:cf:3d:38:9e:c5:86:
cc:b3:f5:f2:71:3a:37:19:3a:6a:96:c9:44:e1:90:
aa:3a:6a:15:8f:eb:c1:9b:57:40:22:f5:10:c4:8b:
35:42:e1:b0:9d:0c:75:a3:e5:6c:ff:a1:4c:b6:a6:
46:4b:4b:65:13:56:42:ad:4e:37:f6:04:b4:53:b2:
94:5e:25:94:82:d5:79:15:5c:08:d3:11:9c:77:b5:
ac:b0:9e:5a:b0:46:e6:40:35:7d:98:98:64:84:6c:
07:04:57:e3:08:90:cf:ea:d8:34:84:57:3c:e6:ee:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:E4:89:57:EB:4D:31:6F:64:B2:00:51:F9:34:C1:F2:B5:12:D1
X509v3 Authority Key Identifier:
keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ad:67:b9:f3:61:76:63:18:55:c1:e1:e4:84:87:50:f5:b9:
68:75:c4:fe:29:43:1e:11:ec:54:30:8b:63:6f:9d:76:18:7e:
bf:d1:8f:c1:1f:88:3c:43:58:42:e2:87:ac:3c:84:02:81:0c:
9c:53:64:1d:d9:8d:0e:8d:f7:33:1e:63:3a:b1:bd:be:cd:09:
e2:80:6d:c6:52:dd:d0:cc:b8:31:1c:1a:d9:50:a1:f7:8f:8e:
0d:20:5b:19:41:47:e4:aa:ed:1f:50:a2:8b:1e:c5:fc:b3:f6:
67:aa:a8:76:ae:e4:6e:05:6f:e1:50:cc:99:15:d4:7b:f2:f7:
49:f7:95:af:dd:2a:17:dd:0d:6f:cf:fc:d6:0d:13:cd:b3:94:
1e:18:69:0d:72:5d:0c:37:4d:a8:08:0f:c9:f8:a2:f8:45:dd:
d2:75:5c:e8:2b:9b:16:02:b7:96:ce:28:00:19:0a:f3:c8:a2:
e4:25:f7:7f:ef:0c:23:8c:0a:e5:c3:42:7e:6a:ea:ee:b9:90:
12:07:62:f9:49:fb:b3:28:c2:95:66:95:04:e5:cb:7b:fe:eb:
f0:47:31:79:a7:8b:e1:c9:d8:43:8e:f3:88:ef:c0:c3:8d:17:
36:ed:71:ab:18:c7:67:df:4c:80:57:60:97:ee:f6:2f:13:ba:
e5:0f:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:24 2026 by rpki-client