Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: EsTrGben4ZXc2kdSQV3J7/CrXYox5X47eW6Irj8CvVQ=
Subject key identifier: 62:99:93:D7:E3:59:5F:ED:A3:73:2F:7E:F3:5C:D7:BB:0A:5D:12:36
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01A0EE1D2A773FE13624A6E922D23ECF5F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 149D
Signing time: Tue 29 Sep 2026 17:01:23 +0000
Manifest this update: Tue 29 Sep 2026 17:01:23 +0000
Manifest next update: Wed 30 Sep 2026 17:01:23 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: IJXBXYnXDB+ZHtdZHkAECqUgkeTvgkIODl5NzhCFo4Y=)
3: aqxIqajmYQ1_CMiZ7_GwMKxbii8.asa (hash: DHOAQoYQMdjCMW3lkrZBHQJ7lJDnJKHVKvRbqH3Nq5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:2a:77:3f:e1:36:24:a6:e9:22:d2:3e:cf:5f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Sep 29 17:01:23 2026 GMT
Not After : Sep 30 17:01:23 2026 GMT
Subject: CN=629993d7e3595feda3732f7ef35cd7bb0a5d1236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:16:3b:96:9b:cc:0c:a8:10:d7:7e:7f:19:
7a:15:60:04:04:96:c0:80:ce:33:3e:0f:eb:17:9c:
6c:62:f0:84:a6:46:a9:a1:18:d5:0a:80:f3:5c:2b:
7a:32:aa:8c:77:26:9d:4a:25:68:2a:ca:be:91:fa:
77:d1:50:c7:ad:8d:95:0c:55:05:b7:44:9d:73:11:
2e:f4:01:cd:e2:e3:f1:f1:3d:26:75:ec:ae:a0:a8:
ee:3d:9e:aa:73:7b:f6:59:ad:51:b0:d0:a0:3c:15:
7b:ab:34:25:97:33:5a:16:80:d9:48:a2:9d:d9:f0:
6d:09:b1:20:4c:4e:bd:8c:d9:c0:7d:4c:8b:5e:67:
e5:d0:9c:fa:92:08:50:ab:a6:70:52:ba:e3:ff:d9:
40:3b:81:bf:c3:5c:e0:1e:6d:8c:4e:f8:17:d6:3e:
25:5d:ba:b9:aa:dc:39:69:4a:e6:e1:13:bf:1e:77:
18:7e:3e:73:50:ee:d1:74:b2:35:bd:4f:9b:7e:92:
36:23:5c:d4:12:bb:37:fb:21:32:04:a9:9f:1e:f0:
c2:40:73:a3:73:ec:41:43:6b:dd:7d:4a:b4:18:3e:
d3:72:69:85:db:8c:7a:eb:95:bf:a7:0c:25:4c:c9:
9a:16:f5:65:d4:c8:f4:fc:d5:47:3d:0f:20:cf:9f:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:93:D7:E3:59:5F:ED:A3:73:2F:7E:F3:5C:D7:BB:0A:5D:12:36
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:7b:23:d0:8b:e8:f1:02:35:3e:c1:b2:a7:af:f7:6a:ef:
de:03:d7:d3:9b:f1:27:e0:bb:4c:f2:52:c1:85:1c:0e:1c:df:
27:2d:69:bb:3b:f9:5d:2b:80:8d:98:b9:26:9b:f9:1b:8b:dc:
54:16:07:57:c6:04:ef:06:41:a7:08:66:16:02:e7:87:76:31:
63:9c:56:9a:ac:b5:79:1c:65:8f:f5:f3:59:67:e8:13:ee:38:
07:2c:78:45:0c:bf:96:88:8f:a9:73:93:3b:74:3f:d8:aa:f7:
41:ea:31:f4:0c:47:f0:92:d1:65:8c:44:e8:cb:a1:32:a4:b9:
f8:49:02:44:f1:4c:fd:12:fc:f5:95:36:ca:e7:21:80:a6:fa:
26:c0:41:da:dd:b6:62:c3:ac:9a:c2:7f:bd:e2:0c:b0:a5:a1:
61:03:74:c9:eb:da:eb:2f:95:fe:a0:d9:bb:12:47:2c:2b:96:
7b:ae:ba:3e:a9:2f:2c:22:b5:20:7d:56:ea:68:8c:47:d5:1b:
23:70:ef:51:48:d5:8b:2e:19:41:18:f7:26:d8:d2:66:e6:24:
4e:06:51:9a:be:53:17:9d:3a:f3:b7:1a:09:10:14:b9:19:48:
85:dc:44:fc:1f:72:99:26:04:2c:df:53:88:ac:cd:c0:68:db:
a3:26:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 22:36:11 2026 by rpki-client