Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: BXDai0wlpMQWl9XBuVEGUb9o4RsQr4jI7cnUSNal4y4=
Subject key identifier: 91:FD:3F:4E:7F:38:AD:04:58:92:D5:44:D8:88:BB:DA:B5:FE:25:7C
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 019CACB52DDB20FFCCD06ABD4B14923AE32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 159C
Signing time: Mon 02 Mar 2026 04:01:20 +0000
Manifest this update: Mon 02 Mar 2026 04:01:20 +0000
Manifest next update: Tue 03 Mar 2026 04:01:20 +0000
Files and hashes: 1: Rj99-jmr9OLsds1gjtYoMoahzWE.roa (hash: BerfWWa8JJTTIBBejFshsYqyyv1vjZIv4evRBKzTHSU=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: DjtXZO0zsdZ2AfENsTduxO5TOrCPVyHxOX+Q1ZmnEZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:2d:db:20:ff:cc:d0:6a:bd:4b:14:92:3a:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Mar 2 04:01:20 2026 GMT
Not After : Mar 3 04:01:20 2026 GMT
Subject: CN=91fd3f4e7f38ad045892d544d888bbdab5fe257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:79:a4:c8:c8:ba:bc:73:c8:5a:f5:0b:b5:
ca:23:8b:45:aa:98:2a:d7:f5:d2:41:ae:6a:7f:45:
51:4c:19:fe:02:ac:4f:4a:7f:48:e2:60:66:7e:fc:
fd:35:2e:b8:35:38:50:79:95:fd:ec:c5:0e:51:4b:
37:0f:b4:22:18:db:3e:57:f8:ff:95:ce:63:07:1a:
fb:99:ad:99:a4:5b:0a:3c:6f:fd:b4:b7:29:45:50:
74:a2:5f:40:73:67:03:50:2c:4e:30:37:0b:9f:5d:
c3:d0:a8:da:fa:8c:f2:31:9a:aa:a6:95:05:6d:67:
c6:e8:49:bb:b1:b8:ce:82:96:9e:f0:4f:a8:a7:83:
ab:0e:56:57:e3:63:d0:da:ce:7f:7b:5d:dd:5c:b8:
1c:36:fc:7f:b4:90:3d:3a:13:39:7e:95:83:1b:65:
0d:33:9e:19:b7:3a:66:c8:24:55:b8:30:c3:eb:2b:
e1:72:64:a1:e4:f3:cb:9b:34:48:63:86:55:b4:23:
8a:40:68:c5:6d:b1:a1:e6:f4:0f:b8:ec:11:94:92:
62:47:fd:3e:c5:79:08:52:38:e5:85:99:49:41:7c:
25:6f:7f:aa:aa:e6:c7:39:ef:8e:73:09:5c:d0:b2:
25:72:b6:ef:f6:17:9f:1b:7a:35:22:6a:cb:d7:07:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:3F:4E:7F:38:AD:04:58:92:D5:44:D8:88:BB:DA:B5:FE:25:7C
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:07:c8:a2:a3:31:26:24:c1:ad:34:15:6d:98:8e:ad:56:8f:
c7:5e:ef:60:c5:6b:86:3a:db:4d:f5:87:20:47:f8:a6:e9:4f:
f3:f9:1c:ec:58:51:9a:3d:9a:16:39:df:70:27:4d:26:6d:b5:
cb:22:7a:1c:d6:ae:b0:17:82:09:e8:3e:40:99:ec:63:f7:8a:
68:75:a9:37:c4:c0:7c:77:3d:09:a0:12:23:1c:69:05:43:21:
2d:84:a6:08:90:88:8b:dd:71:c1:40:a9:c7:03:7a:1f:68:3e:
e2:e5:84:f8:5a:09:f9:a0:12:af:71:22:e0:62:12:4f:8e:d7:
36:52:71:92:a3:96:1c:3f:60:06:86:b5:b3:6b:8d:9e:24:57:
d0:eb:60:c4:e9:46:ec:52:57:d2:a4:69:cb:c3:c8:66:a0:57:
16:d4:81:8a:4d:03:3f:9d:83:66:d0:e1:d8:0e:e3:af:a3:1a:
c4:d9:69:28:f1:74:6b:fe:20:ad:25:9f:49:07:a3:64:a6:b6:
d1:18:fc:18:55:49:76:43:1b:5c:8e:c0:7f:b4:92:b4:65:82:
fe:f1:44:8f:6d:1b:19:37:cd:91:55:73:60:4a:31:7c:0c:84:
48:d2:10:f0:e1:17:b2:fd:82:f7:79:9b:a0:9c:19:4f:95:da:
8e:f9:bf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:49 2026 by rpki-client