Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: 8U4uHt6Msa9XyApzqtUh6wFOfj8aRNxQVGqxt0LLSI8=
Subject key identifier: 77:BD:5D:C1:55:45:5E:C1:41:A5:B3:69:7D:BC:67:B4:02:E3:1C:5D
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019D996274C190941FC600C803A530B54DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 0528
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: 7f1HjHk-QuYdyKPRtRTB6zRtniI.roa (hash: JfV00R7e1ilZPLpfLYf2At7NSLWNCp/ArWaOcO/+rJ4=)
2: RVbKYNsXkpigrW8bpc1iUTS3mgI.roa (hash: IrBHJsse41bdExiPxgQe3tLrqVamrKp11wXC487m10U=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: NpAIgd7NrJYyCql9fSRUb5EpQiyEsKOXRU8Q7+Rquh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:74:c1:90:94:1f:c6:00:c8:03:a5:30:b5:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=77bd5dc155455ec141a5b3697dbc67b402e31c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:db:99:99:1a:f2:27:e5:13:f0:89:f6:ee:
e8:58:82:58:17:a5:0a:00:cc:a0:2e:d8:95:2e:59:
f7:40:ca:71:ae:ee:01:61:5b:37:ab:40:31:6a:df:
79:56:4f:cb:c3:b6:f1:38:2e:81:e6:8f:d1:d9:74:
f5:93:f1:77:94:d2:85:b8:12:66:cc:5a:63:0c:fb:
1d:cc:99:88:7f:db:81:df:78:5e:cc:b3:43:14:ab:
b5:90:24:e9:04:4d:e6:dc:df:17:a1:60:bd:b4:f5:
81:1b:7c:a9:38:f7:cd:6e:7b:17:25:15:90:82:2c:
9d:96:a7:e2:02:56:3d:48:cf:99:0a:d5:ca:6d:e5:
c3:55:62:78:cb:f8:68:63:ab:eb:c0:bd:f4:d3:da:
8c:f8:25:8b:87:17:54:7b:75:c7:27:3d:d3:ff:c8:
2d:7e:9e:e1:fc:87:ef:e7:26:03:9a:47:15:f9:15:
86:72:e6:2c:9b:66:30:cd:01:89:c4:3c:bb:57:28:
5f:b2:40:8f:fd:21:7d:11:15:a1:9a:b0:ea:1e:72:
a1:62:cd:15:d1:21:b9:ad:c6:19:57:77:d1:be:16:
24:be:82:71:9a:e6:93:bb:b2:f1:8a:2d:b0:7e:bd:
16:08:e7:7e:9e:db:65:09:25:06:54:da:2c:52:63:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:5D:C1:55:45:5E:C1:41:A5:B3:69:7D:BC:67:B4:02:E3:1C:5D
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:94:26:ab:bd:16:32:bf:c9:39:81:67:7a:b6:e9:a0:04:
9a:17:a6:95:b9:f7:5b:b2:e4:2d:9e:cb:c9:4e:88:ba:91:04:
ec:c1:6a:61:c5:bd:4d:75:ac:35:92:73:b6:52:ce:a1:4a:74:
58:68:84:e9:bb:e1:68:f6:e0:50:ab:3d:1c:20:74:fb:97:88:
0d:39:f3:39:94:8a:cb:6a:5d:63:81:8f:85:31:89:42:2e:79:
12:68:4f:e1:96:0b:8c:77:83:ec:1a:ce:6e:0a:34:36:d9:5d:
b8:9a:d1:71:14:f7:c4:85:d5:12:bc:02:e5:38:8f:14:6e:9c:
ec:72:87:fc:2f:be:88:9a:72:c7:a4:69:9d:ef:8f:ef:70:1b:
7b:e5:1e:59:70:47:2c:89:fe:55:cb:6b:2f:30:21:00:62:17:
ea:68:74:95:e1:f1:eb:3a:72:0c:c4:b2:ba:2d:4d:ae:6d:e3:
8d:41:99:3e:29:d5:0e:36:9f:4b:4c:3d:d4:bf:2c:6a:e7:b2:
f5:4e:0a:7d:ac:45:fc:6d:e4:b5:44:52:8b:4d:cd:2a:9b:1f:
4b:31:07:40:1a:cf:ba:91:34:31:fd:c3:28:b4:90:01:55:3e:
b4:cd:96:5f:02:f1:0d:04:28:5d:d5:a8:52:91:7a:a0:93:de:
a7:9a:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:23 2026 by rpki-client