Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier: bgbqnCTVZGgeWg7OVikyC5ki85QxvsXtlyS39KDY+D8=
Subject key identifier: 13:C8:20:C8:56:BF:6D:C4:B4:B4:E1:73:FB:70:2D:A1:91:10:43:6B
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 019D2A727D004FC5BDD236CA137555589A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number: 0D18
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: 2PauL5UkJaxEeIMJNe6JbMk9Q5ExG6NZe8bFsvRxokg=)
2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7d:00:4f:c5:bd:d2:36:ca:13:75:55:58:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=13c820c856bf6dc4b4b4e173fb702da19110436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:df:1a:3c:16:03:8a:25:91:fc:11:99:ba:
21:12:cf:36:b6:f2:9b:35:69:4b:04:df:70:dd:14:
a7:35:b8:ad:43:96:d6:27:f0:94:16:27:19:1c:df:
19:bc:f7:36:f6:7a:e1:69:38:86:2c:fe:f2:73:ab:
b5:54:bd:56:96:4a:8a:ee:9f:e8:d2:eb:91:18:80:
28:3e:34:c6:ab:da:4f:39:7f:27:87:f5:fb:b4:1e:
44:6b:d0:da:24:c9:55:24:02:53:a5:81:88:a1:fa:
e1:fc:1d:bf:f4:90:15:58:d8:f8:2e:16:ae:92:c0:
2f:e5:10:3d:fa:80:dd:81:89:3c:52:c1:2d:ac:ee:
77:3d:8a:01:bb:29:3d:2c:ad:c7:31:25:f6:d5:0c:
97:66:96:aa:14:48:82:31:14:4b:68:ae:51:1a:05:
a2:20:fd:01:9c:f5:86:ac:fb:dd:bc:bc:b9:c7:81:
1b:a8:2f:6e:42:d7:17:8f:e5:a0:ce:b1:c0:d7:23:
db:d6:7e:96:66:6b:4c:12:82:e0:25:91:0a:37:7e:
85:28:c1:8d:07:37:7f:ad:f0:73:fd:72:d8:da:d5:
ca:26:dd:1d:1c:23:b9:79:57:fd:3a:34:31:b6:38:
27:a6:4c:1d:b8:08:a5:48:44:85:23:db:4c:83:3c:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:20:C8:56:BF:6D:C4:B4:B4:E1:73:FB:70:2D:A1:91:10:43:6B
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5a:4a:62:93:1f:64:3a:b1:ec:e4:34:db:9c:35:f4:64:76:
80:57:81:ff:99:fa:2a:f1:5c:8a:f8:f6:25:09:82:9b:f1:81:
8c:3d:1a:e8:3a:82:87:4d:c9:9a:05:74:55:56:a9:53:ac:dc:
89:f1:34:70:b6:5e:8f:b8:7a:b5:9a:e3:12:6c:21:fa:8a:6d:
24:41:d5:fb:e2:73:75:43:8b:29:f1:4f:c4:83:d0:92:69:84:
3d:2c:30:ad:f7:c7:40:f5:da:21:98:08:9c:a3:20:b5:7c:a1:
e5:aa:d9:dc:78:5d:5b:4b:39:97:20:cd:56:5b:5d:a5:19:41:
ab:1d:da:be:96:a3:8b:1d:d3:ae:3c:7c:df:40:05:3b:84:1b:
7f:10:3e:2f:60:66:bf:40:d8:40:19:86:c5:7d:4c:d5:39:ee:
51:08:7f:fb:64:29:4b:63:05:d1:4a:e4:e6:ab:02:ef:94:f7:
1c:e6:9d:c3:14:db:b6:84:e4:d1:62:4d:a5:df:0e:4d:28:7a:
67:98:20:8f:f8:9f:ee:81:ed:32:8d:ff:f9:57:21:7e:fd:86:
c6:58:e5:a7:b8:af:d9:84:15:ab:dc:49:6a:cf:c7:c3:b5:cf:
71:7f:99:14:fe:8b:a1:92:4e:25:21:80:ec:c6:c8:91:cb:c1:
f5:98:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:38 2026 by rpki-client