Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier: V/ZJzmTeTkhTFVWHEds+AoYnsX/DOXTndIszOOPE/QM=
Subject key identifier: 30:8A:95:A4:10:9A:44:D7:A5:7F:48:13:B2:C4:47:C0:36:CA:E2:C8
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial: 019D25BA35FF1734D3850E82C745AF904082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number: 08C6
Signing time: Wed 25 Mar 2026 16:00:53 +0000
Manifest this update: Wed 25 Mar 2026 16:00:53 +0000
Manifest next update: Thu 26 Mar 2026 16:00:53 +0000
Files and hashes: 1: Ak9vOxGpJOtM5ZM2WAZaWA80hJ0.roa (hash: eWX9AMTey3Vg1fgVIDxnxj6ffwC52UU2QqjvGjmMTlQ=)
2: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: IKI3IkzeU+H6c4SQVbv+5xlenbiWubJHRAV9cs5TiBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:35:ff:17:34:d3:85:0e:82:c7:45:af:90:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
Validity
Not Before: Mar 25 16:00:53 2026 GMT
Not After : Mar 26 16:00:53 2026 GMT
Subject: CN=308a95a4109a44d7a57f4813b2c447c036cae2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:56:2e:e9:63:f1:c4:73:a7:b2:aa:14:a6:
4a:52:7f:ba:95:4d:b4:fa:54:91:19:8a:64:ea:84:
63:28:36:ad:8b:f7:23:ef:33:af:c2:a9:64:3b:0e:
76:6d:ca:93:5a:15:19:5c:18:63:db:f6:c6:54:a8:
03:7f:63:32:ce:de:d8:c7:0a:92:70:ec:54:c2:b7:
e4:c0:89:96:48:d7:7b:50:40:97:a7:66:07:17:f3:
cf:48:07:f1:9b:b0:61:a8:63:0e:c9:e9:14:e9:74:
9f:bc:6e:04:00:d5:fa:aa:33:40:df:a1:46:39:7d:
fa:9b:74:d2:6c:ba:b9:80:fa:80:84:80:17:ae:59:
43:08:6a:1c:41:5d:42:01:02:19:d1:87:71:f2:7c:
40:29:3a:8a:34:3a:0c:31:63:f9:a0:f1:a0:93:b7:
a9:eb:bb:a7:d0:36:4c:d1:05:9b:6e:e1:e1:84:5e:
c9:6f:d7:03:58:65:77:99:5e:5c:93:9e:79:87:1d:
11:f2:2b:81:76:33:d9:2a:45:ac:0a:74:14:ff:93:
cc:e0:97:13:a5:48:7b:88:ff:3d:9c:f6:67:fc:d2:
3f:d6:5f:a5:dd:96:0d:92:ac:dd:1a:0f:66:3a:d5:
a8:9f:f1:d9:71:73:37:20:37:01:f7:60:3b:8f:0d:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8A:95:A4:10:9A:44:D7:A5:7F:48:13:B2:C4:47:C0:36:CA:E2:C8
X509v3 Authority Key Identifier:
keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:a2:9e:7d:33:09:22:09:79:03:18:b9:29:c0:d0:ee:af:
af:1e:22:79:fd:37:26:00:54:42:36:9f:7c:f3:22:84:f9:8a:
f5:39:6a:37:36:1a:47:5d:4e:59:fb:1e:a2:54:9b:6d:4b:50:
02:ad:ec:08:d5:ce:f6:51:ac:06:e2:9c:1b:eb:f5:56:b3:9f:
80:69:63:7b:0e:eb:1a:fe:6f:34:16:37:8b:76:77:0d:1e:bd:
16:1a:e1:37:6d:98:74:55:a4:a7:35:91:b2:68:9b:39:00:f4:
a2:84:0f:62:6e:d5:cc:63:ac:d6:72:09:24:6f:93:b5:dd:0a:
ae:99:da:ee:17:b5:eb:f6:c8:fe:0c:73:78:7a:f8:ed:83:a5:
47:0f:6a:76:21:f9:dd:82:2d:75:b8:2a:db:30:e4:4b:18:1a:
8e:b0:73:ee:16:4a:01:c1:fc:00:d9:1e:7d:13:67:4c:36:0a:
44:06:1d:0a:22:fc:5d:a2:b6:43:31:67:78:0c:8b:45:5e:48:
bd:f0:0d:3d:df:0c:2b:71:61:e4:c2:00:39:37:c6:bb:76:ca:
74:87:34:7f:99:e2:7a:d7:db:5c:5f:0b:49:64:ab:f5:bd:a4:
f5:21:d1:95:3f:69:d8:6c:9c:e3:c2:35:b2:be:a1:57:0c:e1:
77:12:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:57 2026 by rpki-client