Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: 7CnzNv5PVRfCGmC18S6qYKNaVYmj5h199zFnYJ2nib8=
Subject key identifier: D7:DF:BB:83:7B:6E:D0:89:B2:F2:55:CD:88:9F:5C:C4:19:14:B9:CA
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 019D2A050BFF39EA9C5E2D60A77B77096F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 12:01:06 +0000
Manifest this update: Thu 26 Mar 2026 12:01:06 +0000
Manifest next update: Fri 27 Mar 2026 12:01:06 +0000
Files and hashes: 1: FOZyNBk5qscMis-9FzsyuX10OZ4.roa (hash: o+pJe9mj3hblMbWE+RFJ1FoJSPltMRx3Pyr1PBvX55Q=)
2: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: VJS7AaL0UPDNLk3Zb03veujj0Hni0oS8RvGC9rdgvqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:0b:ff:39:ea:9c:5e:2d:60:a7:7b:77:09:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Mar 26 12:01:06 2026 GMT
Not After : Mar 27 12:01:06 2026 GMT
Subject: CN=d7dfbb837b6ed089b2f255cd889f5cc41914b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:9d:ec:36:ad:02:8e:54:e2:04:6d:60:2b:
a9:51:e8:90:9d:45:66:41:1a:95:94:64:58:93:3c:
23:c8:90:c1:37:37:f4:bc:41:a1:70:0e:6a:7c:80:
6f:e4:8c:03:c6:55:fc:61:3f:56:58:80:3a:2a:e9:
e3:c3:5e:6d:99:c1:18:a2:17:3a:be:8f:39:6d:01:
87:d6:10:7b:10:17:5f:8e:96:0d:2d:e8:57:ba:fe:
39:1e:0a:b1:f0:5d:64:42:64:e0:4c:a8:be:09:2f:
a9:21:c9:df:e6:82:de:96:d2:5a:5f:d8:c1:da:4b:
bc:d1:c9:11:91:67:f1:43:90:67:80:53:e4:9c:62:
b6:b0:a5:7e:f7:c3:3a:3b:7e:1c:7d:75:f7:65:da:
bf:e8:f0:7b:e0:3f:94:1d:04:0a:a8:ee:30:61:ea:
83:e8:2c:64:8c:2c:ed:6e:a8:26:7c:70:a8:49:dd:
35:93:20:e8:e6:2e:cb:c5:77:ff:d9:94:75:f3:e9:
31:aa:4f:cd:ed:a8:0b:2d:a5:02:fe:ed:f1:27:74:
f5:2f:be:6a:b6:cc:c6:69:77:c7:02:b4:41:10:41:
34:6e:64:30:c5:f5:de:03:2d:15:f8:0f:58:24:0c:
16:b8:8f:08:46:91:31:af:39:eb:93:67:cc:63:3c:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:BB:83:7B:6E:D0:89:B2:F2:55:CD:88:9F:5C:C4:19:14:B9:CA
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9b:99:cb:03:68:37:fd:f6:60:28:b5:55:96:72:92:e9:6b:
19:46:26:66:b4:fd:5b:77:06:ce:ea:3a:e9:56:63:fc:47:70:
30:3e:3a:20:30:04:ae:a1:f8:a7:fa:1e:ee:1b:e1:09:72:a4:
e7:23:33:a2:ff:ec:59:f9:26:01:5b:61:ea:91:48:a0:99:f3:
d6:8e:79:62:00:94:99:99:df:9c:9b:6c:7b:3a:7b:cb:fd:63:
64:5a:ef:24:0a:14:ca:d3:0b:ef:54:1d:2a:b6:23:cc:df:f1:
6c:5a:39:1a:ad:6c:44:aa:3d:79:aa:8a:a7:39:19:34:52:8b:
56:56:db:26:0b:e4:ae:eb:59:f3:a2:b8:a7:6c:26:b0:0e:88:
24:5f:27:7f:fc:2b:52:dd:ef:18:59:59:95:25:95:6e:51:4e:
5d:ca:04:0a:b9:09:f0:f0:1f:7d:5e:df:b5:ae:8d:32:17:8a:
e9:e7:6f:03:6b:33:69:a8:7c:11:57:c3:c7:d7:b1:4a:1f:54:
d1:c5:e2:15:96:68:46:7a:59:02:97:72:2d:98:a3:ef:0a:69:
7f:51:32:1e:0a:4c:62:61:22:02:c4:b8:82:89:de:bd:da:a7:
29:4f:7e:0e:e8:e6:a8:1b:2b:8f:c2:c8:c6:88:97:d0:f6:f1:
17:5c:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:41 2026 by rpki-client