Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: GJaVAkTfJytcoeKmbu21Ajs8IVW8K/ESG5RpuzGN68o=
Subject key identifier: E9:A7:8D:58:94:B8:4A:25:E2:A4:17:DE:B1:47:6A:0B:2F:B0:0E:55
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019D27A9111E48B268EA2CF85F8548A294B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 12A8
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: 4akZ7s4qgmaLV56kYvQUGT1LtPKOCpGmzo6k8E9Mdjw=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:11:1e:48:b2:68:ea:2c:f8:5f:85:48:a2:94:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=e9a78d5894b84a25e2a417deb1476a0b2fb00e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:62:7f:9b:87:dd:1c:09:cf:31:13:f9:75:
f9:3f:ea:36:01:6c:d9:73:f5:b5:6a:2f:8d:49:f6:
04:65:c1:ad:41:47:4f:8c:c7:b3:08:57:68:62:58:
f9:0f:9b:aa:e7:ad:d3:b4:02:6a:4c:40:78:9b:bc:
a4:f2:c2:25:82:14:73:00:7e:21:12:59:4c:fa:1f:
b4:08:3b:a4:4d:3c:73:2b:49:66:dc:7c:7a:4b:63:
93:d8:b3:74:f7:b9:04:e8:cc:90:d6:56:f5:d4:9f:
7a:73:bb:42:a7:cd:ea:64:48:c3:be:32:8f:1d:8e:
ec:fc:81:83:05:62:3e:36:fb:54:50:45:5b:50:b2:
9b:a6:e8:b4:86:43:a8:c5:1d:b0:b4:f7:c1:46:24:
e8:d0:28:f1:15:b9:e1:88:6b:9a:9e:f5:2d:bf:37:
82:6a:68:4b:1c:20:7d:01:b9:13:0a:19:da:fe:df:
24:2f:61:dd:1a:0c:5f:71:22:41:b6:d5:c0:8e:12:
c7:bc:e7:0d:b5:a4:b1:55:e8:bc:c7:45:0d:3b:16:
aa:bc:e6:ac:e5:d7:7a:7d:19:bd:84:e4:c1:d2:cf:
e2:02:e4:6c:e3:54:43:24:56:85:2b:d7:59:27:87:
17:78:83:1c:4f:90:bc:b2:1f:0d:e3:96:d2:c2:e3:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:8D:58:94:B8:4A:25:E2:A4:17:DE:B1:47:6A:0B:2F:B0:0E:55
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:b3:54:24:2f:69:5b:69:97:1e:8c:b7:66:34:29:85:76:
75:6a:e8:d6:0b:b4:a4:64:63:ea:98:e9:99:d0:38:73:8a:44:
20:86:ce:ff:bb:aa:02:a9:18:53:b1:1e:6a:08:b6:f4:36:8b:
2f:21:79:27:fe:05:11:e6:5c:5a:f6:3d:8c:01:03:29:dc:cf:
9b:96:6a:8f:ba:4e:f0:54:2d:be:c6:e2:4b:be:e0:24:7c:2c:
07:20:17:af:66:35:8d:18:db:6e:72:d9:50:87:11:03:d7:2b:
75:ff:a1:6b:8e:8e:ac:29:67:96:8d:0d:fb:4c:82:dd:ff:dd:
0f:bb:58:94:bc:e9:c3:7a:bf:af:c3:3f:4f:5f:27:ad:79:fa:
a0:42:ec:dd:73:69:be:7d:76:b4:06:74:a2:16:39:e8:46:dd:
90:6a:45:a3:3a:dd:34:f0:6f:a1:30:15:e1:03:c9:76:ef:61:
de:12:52:76:2c:6a:34:4f:67:3c:0e:5c:73:f3:54:3e:d9:19:
ec:7e:8e:aa:88:e7:2d:1e:68:3c:ad:52:69:91:d0:21:26:69:
4e:ea:22:c1:18:df:22:a4:44:a8:a3:e3:83:13:cd:e5:6f:7b:
c4:b7:e4:c9:8c:6d:25:8a:cb:f3:5f:06:35:93:21:31:d9:30:
15:5a:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:43 2026 by rpki-client