Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: DUBzAsTwVzCJaE1SERIoVazvCAHjFwlq+OfVYkEji+0=
Subject key identifier: 04:54:E4:7F:AF:18:85:C6:05:24:44:8C:CE:1D:5E:A2:61:0D:5E:E6
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 019D28167807E5C679D44423223B4958E48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0BD3
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: 8uNFN32xYNFXQNRKceOgpsSGcUPa57/TDXNyOvoNnUI=)
2: ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa (hash: WcjDPDlk98u+n1T1FkRZjQvHjiER+xJZpFWL/kzuHtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:78:07:e5:c6:79:d4:44:23:22:3b:49:58:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=0454e47faf1885c60524448cce1d5ea2610d5ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:cc:5d:2f:c9:13:4b:5a:6f:e2:4d:34:57:
13:ca:52:41:f6:3d:44:28:81:95:21:a7:96:ce:46:
27:46:69:8a:32:6d:77:85:c0:06:95:39:1d:48:1a:
2d:18:a7:4c:f9:7b:6b:25:95:af:85:b0:66:10:3b:
58:a3:20:45:a6:d3:9d:52:0d:64:d4:8b:4a:18:3e:
e5:0d:94:93:00:6d:c2:4f:15:a6:8a:3b:7a:15:8f:
e8:0d:38:f2:46:27:ce:d7:8c:b8:a7:c5:28:92:95:
16:00:f6:0b:29:00:2f:4a:f4:ad:66:8a:4d:5f:97:
d2:e0:68:3b:ff:4b:36:d2:a8:d9:cd:c0:20:94:b4:
da:6c:2f:21:ee:a4:68:45:db:5d:1d:6b:59:2a:d4:
8a:ec:ac:bf:09:aa:51:9f:37:8f:89:0e:c3:1e:ef:
b2:a1:66:6e:a2:ba:ba:9d:8d:34:73:30:14:55:4c:
dd:b6:71:64:03:e3:51:e8:4d:67:7a:c3:c4:4c:3a:
0f:23:b4:b7:cb:70:3a:c3:bd:37:57:57:7e:d1:47:
93:9e:10:d9:fa:38:f1:0d:34:3b:38:ee:c1:15:53:
4e:28:41:93:57:0c:8a:ef:0e:25:6c:75:d6:04:75:
c9:51:04:70:60:5a:b0:97:9e:67:4f:34:da:6f:a2:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:E4:7F:AF:18:85:C6:05:24:44:8C:CE:1D:5E:A2:61:0D:5E:E6
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8b:c0:0b:df:ca:c8:23:73:da:b2:de:24:84:57:ee:f5:2e:
65:35:6a:79:b0:e9:db:55:84:27:8e:16:86:a5:d4:6b:01:26:
32:ae:9c:73:b0:ca:27:24:1b:51:78:8a:7b:86:00:2f:43:64:
0d:df:55:85:f9:0a:87:98:bc:c9:6b:22:9f:6e:34:44:a1:78:
d6:ce:50:4e:97:ab:47:9a:55:69:0f:03:a1:35:99:0a:b1:8d:
ca:87:c4:ba:ab:64:b7:55:a4:1c:2a:1c:b3:fa:68:32:52:b4:
0b:d2:01:19:e6:7d:2f:93:cd:8f:00:1d:92:42:53:4c:fa:20:
50:c0:83:72:49:4a:d3:d9:52:df:cd:9b:62:aa:c5:b8:22:8e:
6b:14:11:c0:e5:fd:dc:c2:f6:5d:df:29:63:79:d0:ff:61:14:
b0:3d:bb:98:d7:ed:e8:0b:8c:28:6f:b1:20:21:92:a8:5d:37:
c6:8e:1c:64:53:a1:eb:1e:51:13:2e:b8:36:fe:49:4d:56:11:
ff:3a:64:93:df:82:f5:cf:7c:da:cb:15:03:6e:7b:5c:99:f0:
b6:47:db:ce:1f:bb:c5:d0:f5:fd:ec:34:be:01:ff:82:4e:f3:
8a:d5:55:59:82:3f:db:74:60:bf:a2:b6:57:08:e2:8a:d6:26:
f5:14:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:53 2026 by rpki-client