Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: 1CTb2HBP5RWMlXZwCiTOt7AaLQzcUs7GUWwlNnyo/U0=
Subject key identifier: 9D:FB:45:59:28:A7:A7:6C:98:3E:0F:56:78:C6:12:74:AB:4C:E1:D3
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 019CADC7C6214E0517F4628ECB2CD0A50EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 13B3
Signing time: Mon 02 Mar 2026 09:01:16 +0000
Manifest this update: Mon 02 Mar 2026 09:01:16 +0000
Manifest next update: Tue 03 Mar 2026 09:01:16 +0000
Files and hashes: 1: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: 9/7ztFNv+j13QglVa05xcL3hdzTY9dIXOl9jq3TI8pI=)
2: abv9rWoa4hyIv9tqrFHF_b8F0JY.roa (hash: LIv9WGzH0KXzQv/Kg1sz7/kVRe9FXifI/ssFCscX5ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c6:21:4e:05:17:f4:62:8e:cb:2c:d0:a5:0e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Mar 2 09:01:16 2026 GMT
Not After : Mar 3 09:01:16 2026 GMT
Subject: CN=9dfb455928a7a76c983e0f5678c61274ab4ce1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:3e:5b:51:6b:a6:a7:e0:7d:6b:f5:f3:cb:
e8:28:0c:ee:55:a8:51:bd:2c:12:f8:d0:b8:b7:98:
be:c1:93:7b:ee:1b:5f:81:ac:08:8a:50:36:06:7c:
08:ad:3c:11:b6:c9:04:5e:74:25:99:9b:74:f9:2f:
ef:a8:3b:b2:28:9e:1c:64:19:d5:e7:02:3b:58:4a:
70:0e:3b:16:bb:97:32:c5:23:59:e1:fd:a4:fb:8f:
0b:70:05:0b:d6:30:a6:c9:79:b3:08:f2:bb:b2:d8:
c4:74:05:ff:d1:38:06:a2:0e:38:2f:72:fd:12:85:
c9:52:f0:e6:70:30:03:1a:da:7a:94:7c:e7:09:87:
ed:99:3a:62:4d:d0:e7:5e:05:3e:59:fd:54:bb:12:
e6:ca:a3:6c:7e:60:5f:56:e4:71:30:11:d0:85:9f:
8d:a2:77:96:1c:b6:6c:05:6b:56:e9:67:55:5b:da:
e9:4e:ff:fb:e0:84:8c:82:5d:5a:e3:2f:cd:1a:c2:
c2:f7:b0:f7:f6:1f:5b:38:b0:43:b9:2e:97:36:f3:
6b:c3:43:eb:c9:ca:93:3d:a6:e2:fe:16:1a:78:b0:
77:f2:70:0f:d2:ad:ca:46:93:25:31:00:17:cb:62:
82:e4:7d:37:b8:76:17:8c:26:21:61:e9:0a:e3:8d:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:45:59:28:A7:A7:6C:98:3E:0F:56:78:C6:12:74:AB:4C:E1:D3
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:27:13:25:49:1f:c1:c3:d8:72:b9:0c:bc:3b:69:53:a7:93:
32:54:c6:91:27:5f:ac:6c:8a:25:81:7b:fd:eb:34:57:c4:46:
7d:d6:d8:7b:b7:6a:97:4e:6b:5f:11:af:fe:90:9f:eb:0d:19:
90:19:0b:6f:5a:32:52:54:ac:0c:67:20:87:7d:8d:70:41:6b:
4d:61:4e:cb:59:8b:72:25:42:51:5a:44:b8:25:7e:6f:52:b5:
a8:1b:32:12:ce:2d:3b:5e:c9:98:93:1e:4f:4f:6b:5d:1e:d2:
f1:46:0d:6d:05:9b:df:7f:11:68:d7:58:82:0e:e0:c0:df:b1:
01:9f:a4:82:51:d2:af:90:46:ec:6e:0d:64:75:3f:e3:7e:c3:
b2:91:e2:53:ee:f5:ee:e9:ad:1e:1b:67:16:64:f0:dc:ab:1a:
fe:3e:4e:01:ba:ff:79:93:9c:c7:ae:9d:c8:d0:42:c6:f7:c6:
de:ff:db:84:e1:cf:29:a8:b4:b0:30:b2:71:bf:0b:79:d6:51:
dd:5c:dd:dc:c2:3c:65:4e:2a:d5:fd:4e:30:c5:43:64:ab:90:
bf:1f:67:06:60:5e:53:77:e7:aa:04:a1:0b:f6:1f:9d:8c:51:
7f:e7:d4:f3:df:58:64:74:38:75:e5:ef:4a:1c:71:12:6c:9f:
20:12:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:17 2026 by rpki-client