Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
File: RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json)
Hash identifier: l8G+yLS5bWK9HQNM/4drD4+w0uZS9p3TztQfQtBJwEw=
Subject key identifier: D5:F1:47:B6:8A:FA:ED:0C:82:16:0B:F0:9E:77:FB:BF:7C:A4:6F:5E
Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
Certificate issuer: /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Certificate serial: 019E1E352673873FE63524BDC63A8BD2F627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
Manifest number: 014B
Signing time: Tue 12 May 2026 22:01:00 +0000
Manifest this update: Tue 12 May 2026 22:01:00 +0000
Manifest next update: Wed 13 May 2026 22:01:00 +0000
Files and hashes: 1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: 4fHWvYSSRq3nomT0v4USSxmTkXlfXgnx9ie1qf1NKfo=)
2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:26:73:87:3f:e6:35:24:bd:c6:3a:8b:d2:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Validity
Not Before: May 12 22:01:00 2026 GMT
Not After : May 13 22:01:00 2026 GMT
Subject: CN=d5f147b68afaed0c82160bf09e77fbbf7ca46f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:49:5c:b3:4e:48:d8:93:a4:01:84:2b:30:
88:8b:6d:36:89:f0:53:08:1f:67:e7:40:69:0b:e2:
d0:c8:cf:6c:ef:e9:d6:aa:39:80:43:2f:35:7b:ee:
f8:d1:59:5b:63:b9:76:2b:7d:4f:d5:ac:66:26:64:
62:b5:69:a0:4e:88:6b:c0:57:31:2a:29:df:49:67:
12:79:91:36:48:40:d8:60:3d:0a:95:2d:91:29:8f:
fb:be:01:d9:a8:11:fe:3f:bf:22:06:2f:e8:91:48:
07:c8:3e:e0:a8:f3:e7:80:c4:78:df:39:8f:98:de:
46:34:b8:31:34:0d:55:98:8b:90:e8:16:07:0c:12:
c8:bb:ec:b2:96:41:30:e2:b3:2a:9a:56:e4:77:1e:
15:55:bd:3f:62:70:9b:72:da:15:d9:14:51:08:4e:
71:95:01:e8:a2:49:86:02:bf:38:65:3f:78:01:8a:
15:92:0b:8b:e1:cf:dc:c1:34:45:a6:7f:69:2c:01:
82:f5:2c:b8:d9:e3:14:99:47:ed:f3:0f:70:f6:a9:
cd:d6:36:2a:5f:cc:31:7c:7a:8b:ab:ef:5f:33:af:
c6:d0:77:3e:e3:3c:5a:f5:da:40:d4:cf:9f:a7:44:
17:7b:a0:1f:4d:34:87:70:8c:10:d7:e7:77:8e:50:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:47:B6:8A:FA:ED:0C:82:16:0B:F0:9E:77:FB:BF:7C:A4:6F:5E
X509v3 Authority Key Identifier:
keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ae:4a:b3:ce:f0:d9:90:5a:40:16:25:7e:3e:a0:de:2c:01:
81:06:6b:ee:21:fb:a4:bc:a6:f6:a5:0a:cb:7a:83:43:14:36:
08:fc:47:f8:38:59:f2:e2:f7:f6:05:16:be:f5:a3:43:52:ca:
ba:44:96:3e:08:79:b6:04:43:8b:cf:2b:c6:91:41:de:0a:fe:
65:a6:7d:fd:5c:1f:20:bb:4d:40:20:76:ce:0e:9c:e3:bc:34:
aa:d8:59:44:e0:e4:a8:99:5f:e6:5d:ad:a3:a6:df:fb:da:d1:
a0:fe:13:37:54:2c:36:4b:ce:2e:4d:bd:78:a7:ec:79:bc:f7:
b8:41:54:f9:c4:e5:86:c1:11:be:eb:c6:89:e6:dd:03:f5:c6:
66:1f:b3:6c:1c:dc:15:fd:46:61:d1:40:b0:35:19:e9:40:e8:
f6:34:9d:18:aa:bb:19:c6:0e:19:59:7b:8d:95:b4:43:24:47:
ad:82:1b:f1:03:5b:71:a7:d8:51:cf:c2:75:67:ff:85:ef:de:
1f:64:3c:82:ab:91:7e:28:54:f7:06:90:f9:13:ed:82:fb:2b:
91:55:34:49:a4:bd:5a:a1:28:93:95:4c:aa:cf:be:9d:b9:48:
36:68:7a:1c:b3:30:66:a1:ed:87:82:92:23:66:45:4a:2f:8b:
77:5a:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:16 2026 by rpki-client