Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: Fb7cs4M9fSZ0y5h2BAtDdsOAl4xKgXWJrfdfDaCPk4Q=
Subject key identifier: CE:2E:6D:07:05:12:7E:8F:D5:F1:B6:81:65:75:D3:DE:3D:46:98:8A
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019D29CE22F10A29D4D6191DD06ADD7AF010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: O4SQLRKmHZHpuHP9zPBB5O9muL+0tWoZFJemAGQaeHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:22:f1:0a:29:d4:d6:19:1d:d0:6a:dd:7a:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=ce2e6d0705127e8fd5f1b6816575d3de3d46988a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:b9:8f:d9:d5:53:70:71:2c:94:76:a9:23:
d6:7b:37:ab:7a:31:aa:cd:95:bb:4a:45:d2:1e:e6:
ed:3e:56:3b:2d:3e:05:64:0f:4e:fc:fa:df:25:f1:
2b:08:66:a3:d8:33:9e:4a:af:48:80:f0:96:c9:d0:
75:c3:fa:2e:f7:79:0c:10:8b:8d:92:82:1b:d8:0f:
c2:7b:5d:31:87:aa:9f:7c:0f:9b:1c:95:6e:cd:18:
52:fc:90:4c:e4:53:e4:0f:73:59:00:9a:5c:24:15:
3d:40:0c:28:7e:97:bb:b5:de:c2:a2:b5:24:bd:c9:
1c:81:25:cb:81:9f:fc:37:d2:34:9b:08:76:87:d2:
ed:91:0d:9e:a6:7e:41:51:fc:6f:f6:5b:f7:cc:a1:
f5:7e:ba:15:d2:1e:9d:5c:18:65:94:cd:b0:79:9b:
ad:9c:03:fa:e2:ef:e0:93:b9:28:a1:db:57:75:7c:
f9:6f:26:26:83:23:9e:84:59:68:cd:d4:83:10:0b:
87:99:32:d5:05:0c:58:bb:38:f3:e7:90:ff:18:16:
d7:62:8c:f4:1c:de:ba:ee:39:a7:35:33:4d:7a:d7:
f2:d1:19:a4:10:39:05:c5:fd:03:be:15:6d:75:d2:
1c:38:e4:0e:60:d7:de:68:c8:22:a0:1b:93:cd:f5:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2E:6D:07:05:12:7E:8F:D5:F1:B6:81:65:75:D3:DE:3D:46:98:8A
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:ca:6a:d0:5a:ae:b1:9b:11:c0:22:8f:26:a7:f9:a4:f6:
a7:cc:97:89:0e:69:61:5e:5d:8a:07:c7:0a:2b:aa:28:fa:9e:
6b:50:18:61:7f:1c:18:dc:73:12:e2:60:60:90:e1:a5:a3:e3:
d5:ee:b1:5c:a0:07:17:20:b2:17:74:e5:f0:65:06:97:e7:13:
52:c7:b3:3e:3c:4f:28:ef:1e:0b:ca:4a:8a:68:1f:4c:59:31:
95:14:d1:4c:72:72:99:13:52:53:1a:83:02:0d:a9:f5:50:56:
d7:7b:46:2b:0d:5f:b5:16:59:18:d2:6e:f1:98:2e:6b:c6:38:
c4:48:cf:2f:1b:43:41:46:6e:da:e1:55:92:e5:86:e1:87:d1:
43:03:73:71:38:f7:f0:95:45:74:ea:5b:1e:65:66:31:82:82:
2b:76:c3:8d:c6:15:1b:91:d0:f6:81:5a:2f:30:2a:10:ab:c7:
96:c6:eb:dd:08:83:51:c1:0f:ae:36:11:bf:7c:38:e1:5a:b1:
dd:c7:2a:75:15:48:7e:7c:e6:c5:26:01:4a:ed:ba:d8:ba:32:
4d:21:db:c4:20:f9:c6:eb:87:c6:83:c0:17:3b:c1:4b:dd:68:
50:a7:4b:4d:1f:d3:b3:a6:d2:58:20:d2:ad:7e:e3:45:95:b1:
37:87:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:54 2026 by rpki-client