Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: nf/eUDSLkIN/4o1qLfPLjUSsui9jjev5mM9a/JnNWkg=
Subject key identifier: 6D:95:1D:D6:02:36:5A:0A:2C:E2:01:41:88:BF:57:F5:C3:98:8E:A7
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019D25BAAA827082F8B530E7857F5D474E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 12A7
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: 3nPJSJ4ibUPaR3U7+xiOaKTLwX2wYGTNUk3JGRkztKc=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:aa:82:70:82:f8:b5:30:e7:85:7f:5d:47:4e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=6d951dd602365a0a2ce2014188bf57f5c3988ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:c7:cc:6e:b3:23:a5:a0:bd:62:1d:16:b0:
24:9f:f4:5e:d6:7c:b7:04:12:1d:1d:ca:9a:bd:5c:
f9:c1:fc:b3:f9:26:20:51:09:17:a8:ec:8b:95:48:
32:b1:db:50:1f:02:f3:d9:66:29:63:5e:a7:50:17:
2d:87:ce:a7:1a:bd:fa:87:99:86:3c:04:57:06:78:
0b:b8:5e:57:d2:c0:cf:5a:2d:25:49:09:ef:ed:be:
07:e1:fd:1a:22:47:9f:19:47:3c:d7:68:ab:8f:28:
87:32:7d:56:8d:e8:b5:47:a5:58:5d:28:a6:06:b7:
84:32:3e:30:a2:ff:b5:0a:48:69:5f:f2:ab:2e:7c:
8a:c3:44:71:26:68:63:17:4a:b5:cc:ee:e4:b0:08:
70:35:bc:12:8b:2c:64:da:fe:9c:ad:8c:63:fa:dd:
bf:68:2f:0d:ea:5e:bb:75:7b:9e:10:bf:7b:e4:0f:
45:98:56:21:6c:5b:2f:18:cf:44:f7:4a:51:48:69:
13:a4:16:76:db:c7:12:f3:a7:88:83:0a:6f:fa:25:
c5:2c:c7:80:0f:e3:ad:4f:d8:ae:08:2c:a3:3b:b9:
3a:3c:be:4b:e2:a7:8b:e4:a6:1d:38:33:42:ae:04:
65:77:aa:00:ac:bd:30:20:73:c2:2d:9c:f5:12:a9:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:1D:D6:02:36:5A:0A:2C:E2:01:41:88:BF:57:F5:C3:98:8E:A7
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1d:c2:4d:9c:b7:27:31:96:3e:7e:44:e8:34:86:b9:a2:f6:
10:98:73:67:42:4f:99:17:e3:5a:1b:89:a4:9a:41:31:28:fc:
d8:0f:d3:e6:54:fa:e1:3e:96:25:54:19:4f:b1:f3:4a:8a:91:
ef:ba:df:eb:0e:3a:1b:7c:cb:bf:e0:38:7d:fd:df:10:36:dd:
af:f9:5b:27:f9:65:22:78:e6:9d:a5:01:3f:9c:e5:65:88:83:
ae:4c:1e:7a:88:69:7c:cf:d3:0d:fc:b9:38:f3:64:b7:78:42:
e9:0a:de:5a:0a:c1:0e:ea:27:9e:08:d4:08:3d:1a:5b:16:98:
ed:ca:77:0a:b7:a2:90:6f:c3:ee:0f:44:1e:a5:2b:ef:98:e1:
3c:cf:e4:1b:2a:30:62:6c:58:b6:e2:98:7e:7e:65:0c:b0:a1:
8e:fc:4b:58:55:b1:51:37:9a:45:75:af:d1:8c:7c:92:06:84:
55:74:ff:2a:30:12:ff:c5:8a:62:0d:3d:c9:a8:6d:de:69:cf:
4f:55:5b:fc:2e:47:70:17:c2:ba:b7:b5:b1:d4:d0:55:4c:d0:
99:93:35:e8:53:52:77:65:3b:07:8c:83:1c:ac:a5:89:27:bc:
0b:60:20:55:23:76:91:43:91:1e:93:cb:ff:16:87:12:81:46:
11:b3:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:23 2026 by rpki-client