Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: TvtKA7WeDSf0tu3E4t3/ygZ+tDgqoIO0CisMb9vqPEo=
Subject key identifier: 98:2D:EE:C2:EA:9B:08:91:F4:B7:71:D7:73:27:6F:E5:23:A8:EB:60
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 019E1CEC10DF61C4767815C7646E6A06527D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 1327
Signing time: Tue 12 May 2026 16:01:33 +0000
Manifest this update: Tue 12 May 2026 16:01:33 +0000
Manifest next update: Wed 13 May 2026 16:01:33 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: EHIixO5HP2IgDAZBFL1NuDeJCf/ts62rXf9eSGx+/sw=)
3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:10:df:61:c4:76:78:15:c7:64:6e:6a:06:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: May 12 16:01:33 2026 GMT
Not After : May 13 16:01:33 2026 GMT
Subject: CN=982deec2ea9b0891f4b771d773276fe523a8eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:65:b9:b7:e2:a1:d0:36:80:37:d0:21:4a:
0b:8e:56:33:99:bf:53:97:15:36:a5:47:5b:12:5b:
4a:72:96:96:28:ba:24:66:49:62:05:ee:25:97:22:
10:a0:12:bf:ae:57:80:05:0b:86:b8:c2:a3:35:cd:
1c:ef:33:91:b8:cb:75:12:6d:39:85:91:44:e4:1e:
d2:66:0c:3f:63:2d:30:5f:f8:2b:28:d3:88:67:0d:
ac:2e:a6:bb:a0:bb:3a:50:7d:5a:ad:ae:31:28:30:
d5:69:41:25:63:ff:4a:0f:2c:2c:87:ed:b8:3a:f8:
3f:84:b0:ba:b1:d1:fa:09:cc:37:2a:01:4f:12:00:
81:4c:17:1d:18:cd:49:2d:37:1a:6e:d0:07:aa:1b:
c7:d9:fe:f1:46:98:53:f6:52:11:84:ac:5b:c5:fb:
c8:fb:5b:e3:2c:eb:77:0c:82:aa:7e:12:cf:ca:e4:
5a:ee:fb:e4:ed:24:84:0d:ee:84:2d:99:56:e8:86:
64:da:25:fe:a9:d8:5e:c9:90:de:f5:30:5a:ce:7d:
4e:ed:46:fb:0b:44:82:79:bb:d4:25:3e:e5:d2:1f:
a6:0a:c7:d4:30:24:8a:a6:3a:33:12:52:dc:3c:2f:
20:2a:0f:df:d4:24:5c:0d:67:a2:18:ac:f2:31:c5:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:EE:C2:EA:9B:08:91:F4:B7:71:D7:73:27:6F:E5:23:A8:EB:60
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:17:fd:f6:04:e5:ee:44:73:ed:d9:ff:80:70:50:4a:3a:
2b:3b:30:48:4c:51:18:68:4b:f2:7c:4b:28:6a:2e:04:05:91:
e8:0a:9b:1e:96:d0:12:fe:70:6a:8f:8c:67:76:1e:6a:1e:55:
4c:95:7f:28:47:2e:4d:b9:fe:29:5f:63:cd:15:0b:58:b8:a6:
42:ba:e5:92:31:1f:6b:a5:b2:2e:7b:19:3d:fa:dd:50:6f:2f:
78:5b:6a:68:fa:aa:19:df:a4:ee:08:86:2c:57:eb:51:19:4b:
5a:f8:b8:75:84:b6:66:dc:e5:78:26:71:49:ba:a9:20:f5:4c:
78:11:fe:a7:03:e4:78:7c:70:ad:41:9f:b5:61:df:50:69:59:
c0:e6:b2:79:55:63:85:69:1c:d8:e7:99:d2:10:0e:30:a8:20:
7f:5a:db:42:92:89:10:5e:2f:b6:2f:44:7f:a1:7c:eb:68:64:
2e:ac:5d:19:11:00:05:c9:a7:0e:60:59:3e:11:aa:1c:d7:8e:
c5:f8:d9:68:22:e4:34:4e:de:5a:f4:64:d8:82:b1:5e:c4:95:
e5:3f:ab:6b:05:e6:c4:cb:fd:14:fb:f4:49:e7:b9:0f:af:50:
aa:b0:16:be:d8:82:95:d5:1b:24:d8:fe:70:a8:be:80:3e:72:
fe:d6:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:23 2026 by rpki-client