Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: 3hOebxH/dDn95mMlRJVuQPtiJSTp8EowRhSGMxy9ix0=
Subject key identifier: 21:E4:DA:50:A1:C1:50:06:8B:B5:CE:09:22:9B:9A:62:57:C7:A2:A9
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 019CABD909994F3388AB14C5465EEF3327D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 04AD
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: 7f1HjHk-QuYdyKPRtRTB6zRtniI.roa (hash: JfV00R7e1ilZPLpfLYf2At7NSLWNCp/ArWaOcO/+rJ4=)
2: RVbKYNsXkpigrW8bpc1iUTS3mgI.roa (hash: IrBHJsse41bdExiPxgQe3tLrqVamrKp11wXC487m10U=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: SRE/jESoJLT31fpIBqsMYH940touBR3/b6Soqq2nmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:09:99:4f:33:88:ab:14:c5:46:5e:ef:33:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=21e4da50a1c150068bb5ce09229b9a6257c7a2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:3c:7a:bd:71:53:a8:60:22:92:ec:83:d4:
bd:11:b3:33:ed:46:1f:d6:86:d0:63:17:db:c1:a1:
aa:82:b8:53:ff:b3:d9:34:18:04:15:92:1c:a3:f0:
58:1a:a2:77:58:91:37:68:df:f4:18:ec:bb:f9:9c:
dd:22:f8:ec:61:0e:4a:a6:93:41:4a:74:e9:24:73:
2a:25:09:36:93:0b:1b:4c:27:b7:08:db:2d:92:92:
aa:f8:10:18:44:79:7c:12:f5:d0:d4:44:c0:1d:37:
fb:6a:f1:6b:e8:94:eb:90:42:74:22:f9:b9:de:2f:
34:c3:a9:af:27:9d:c5:de:c1:41:8d:3c:26:2d:9d:
91:d6:3f:c2:e9:f4:d2:a1:3d:d2:40:5a:74:42:b7:
49:39:0f:a6:5d:18:b6:ca:fa:cc:df:87:a3:9a:3b:
f1:2b:7f:90:99:c6:71:d5:5c:35:82:2c:cc:9b:7b:
a6:df:60:9f:55:88:28:9b:72:04:0e:07:03:92:1f:
e9:e0:88:d7:68:df:dd:35:fc:ac:79:fc:4a:03:fd:
48:b8:84:d9:f9:47:51:f9:2a:c1:7d:56:c1:d7:17:
5e:68:00:30:61:68:ea:d4:ca:35:6b:1c:d7:bc:11:
c4:81:a5:7c:77:45:25:f1:d2:c1:1e:99:2e:83:c8:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:DA:50:A1:C1:50:06:8B:B5:CE:09:22:9B:9A:62:57:C7:A2:A9
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:31:05:8c:b1:50:ab:a8:a7:e0:b8:6d:dd:c1:30:b7:94:
b3:5e:51:64:2b:3a:0f:f0:f3:e5:d0:10:fe:01:45:ec:15:06:
e2:07:6c:76:66:bc:81:e7:80:a7:90:a3:c4:4c:f1:46:34:d5:
f0:8d:7a:9a:dc:b2:a9:f6:0a:38:ad:7c:27:24:62:02:eb:60:
54:5a:6d:f0:fc:7a:4d:43:29:ab:43:3c:bf:a9:e9:09:6b:3c:
fa:a1:67:10:ce:af:bc:92:1a:d8:a3:e5:68:ba:dc:33:36:cd:
e2:28:1f:1c:db:4a:53:78:39:0f:2e:90:26:32:f0:1e:06:8f:
f1:f2:99:b0:6f:03:56:98:8c:a5:dd:c2:42:99:a9:6b:0c:f8:
2a:28:d8:91:13:b2:89:14:5e:c9:70:8c:4c:b6:a9:83:5b:62:
72:74:02:84:76:3c:bf:af:a3:39:a2:62:ba:fd:7e:b5:31:3f:
4a:f8:dd:f9:f4:3a:bd:ff:63:8d:b5:dd:7e:1c:2a:dd:ba:58:
21:78:71:0d:6f:d7:61:fc:23:59:80:58:61:29:88:68:f5:91:
b4:ca:8f:09:2b:9b:35:77:b9:c5:e1:5c:7f:7b:5c:6a:01:4d:
c8:ff:e6:44:3d:6e:66:24:1c:db:a3:c1:83:be:06:03:4c:f5:
9e:1c:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:01 2026 by rpki-client