Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: w1bZF97SN/VJZQlF61oLdF3VSYE6nZOgVI1IiKzvYNo=
Subject key identifier: 84:63:12:4B:5E:AA:1C:31:B5:9D:90:D4:3F:6C:4E:53:75:2B:EB:95
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019CB1365CC9A0C9FD099BBD0AC09EA5E48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0109
Signing time: Tue 03 Mar 2026 01:00:55 +0000
Manifest this update: Tue 03 Mar 2026 01:00:55 +0000
Manifest next update: Wed 04 Mar 2026 01:00:55 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: rGP9myne7zGMTzMw6BBuRHJGWwvtZfz/dDMjtOiqbtg=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:5c:c9:a0:c9:fd:09:9b:bd:0a:c0:9e:a5:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Mar 3 01:00:55 2026 GMT
Not After : Mar 4 01:00:55 2026 GMT
Subject: CN=8463124b5eaa1c31b59d90d43f6c4e53752beb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:a1:17:8d:ac:20:01:3e:6f:df:79:29:79:
0a:d1:c2:fe:ca:5c:0e:4b:8c:92:a1:0a:b2:f2:e4:
e7:18:07:86:f1:61:aa:ee:ca:7a:f0:23:20:73:3a:
82:39:c9:52:6b:b8:53:83:bd:a7:11:e5:f5:58:22:
cd:f6:ab:13:f8:8c:fd:9b:0c:b9:69:ab:87:3e:54:
a4:a0:aa:d6:db:4a:10:de:8d:f1:cb:1f:81:85:07:
06:94:f9:03:09:e4:42:fa:0b:fe:6c:3d:4e:ff:94:
58:6c:33:c9:b0:76:83:e2:2e:8a:be:1c:a9:35:8d:
7e:1e:fa:85:f9:a1:d3:d6:fc:1a:6b:cb:5c:3e:ef:
7b:23:14:be:a7:7c:f4:87:a3:9d:63:b8:68:de:02:
8f:54:c9:56:26:f0:f0:d2:c9:64:14:65:b8:a3:0e:
47:fc:0e:9a:62:7f:07:33:5b:4e:9e:5e:1a:e3:8c:
6f:e7:8a:ef:8e:28:88:66:19:1e:e2:78:d1:7d:3d:
5c:1b:7e:fb:97:c1:1c:5d:6f:5a:ee:0f:0b:e4:43:
2f:20:f7:f0:76:ba:b0:8a:ad:22:64:53:45:5d:5d:
b0:fe:97:bb:ec:6a:cd:eb:8e:19:0f:f5:93:01:0d:
60:f7:6a:c6:1a:b1:be:b0:ef:ce:ef:e5:5d:57:f9:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:12:4B:5E:AA:1C:31:B5:9D:90:D4:3F:6C:4E:53:75:2B:EB:95
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dd:48:55:56:12:fd:b3:bb:bc:b9:d9:ac:6b:9b:21:c2:af:
4a:1c:f2:72:c5:f8:a2:e0:f6:26:94:9d:f3:95:43:00:7b:62:
82:30:95:49:05:ec:42:08:0c:94:9b:03:ac:c4:08:44:70:47:
a8:a5:55:48:38:38:4d:14:d9:58:07:db:9c:a9:85:e8:23:06:
23:98:8f:7e:bd:7b:9f:e8:14:3d:d7:a5:77:e4:f7:da:17:ca:
63:2a:2c:dd:18:bf:39:5a:f5:fe:ae:39:0e:1e:55:34:03:c1:
1a:e9:c8:41:61:74:99:dc:82:eb:12:9c:30:bc:bf:b9:84:9f:
fd:fc:a1:a9:eb:c1:b9:a2:1a:03:ce:a5:91:35:ef:fb:42:ea:
76:0b:a0:2a:f9:04:5e:02:f4:28:a6:1d:ca:ca:42:60:e2:2e:
a3:ee:d7:06:44:e5:ee:f3:7e:0e:ad:93:90:a6:4f:b9:8b:58:
bd:ad:23:01:56:e4:9e:7b:89:bc:a3:41:d1:91:63:b0:ff:88:
46:bf:d4:6a:e0:ef:e2:63:97:e3:f2:59:4d:1d:ba:4c:07:e7:
47:7d:2f:43:02:7a:ce:f4:d2:39:02:e2:ed:83:e2:e1:10:86:
28:54:54:8a:a4:45:1d:77:df:46:14:e3:47:a4:d6:48:a3:d1:
18:60:a4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyxNlzJoMn9CZu9CsCepeSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh
MDEzOTAwHhcNMjYwMzAzMDEwMDU1WhcNMjYwMzA0MDEwMDU1WjAzMTEwLwYDVQQD
Eyg4NDYzMTI0YjVlYWExYzMxYjU5ZDkwZDQzZjZjNGU1Mzc1MmJlYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ihF42sIAE+b995KXkK0cL+ylwO
S4ySoQqy8uTnGAeG8WGq7sp68CMgczqCOclSa7hTg72nEeX1WCLN9qsT+Iz9mwy5
aauHPlSkoKrW20oQ3o3xyx+BhQcGlPkDCeRC+gv+bD1O/5RYbDPJsHaD4i6Kvhyp
NY1+HvqF+aHT1vwaa8tcPu97IxS+p3z0h6OdY7ho3gKPVMlWJvDw0slkFGW4ow5H
/A6aYn8HM1tOnl4a44xv54rvjiiIZhke4njRfT1cG377l8EcXW9a7g8L5EMvIPfw
drqwiq0iZFNFXV2w/pe77GrN644ZD/WTAQ1g92rGGrG+sO/O7+VdV/l/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRjEkteqhwxtZ2Q1D9sTlN1K+uVMB8GA1UdIwQY
MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt
YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl
LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd1IVVYS
/bO7vLnZrGubIcKvShzycsX4ouD2JpSd85VDAHtigjCVSQXsQggMlJsDrMQIRHBH
qKVVSDg4TRTZWAfbnKmF6CMGI5iPfr17n+gUPdeld+T32hfKYyos3Ri/OVr1/q45
Dh5VNAPBGunIQWF0mdyC6xKcMLy/uYSf/fyhqevBuaIaA86lkTXv+0LqdgugKvkE
XgL0KKYdyspCYOIuo+7XBkTl7vN+Dq2TkKZPuYtYva0jAVbknnuJvKNB0ZFjsP+I
Rr/UauDv4mOX4/JZTR26TAfnR30vQwJ6zvTSOQLi7YPi4RCGKFRUiqRFHXffRhTj
R6TWSKPRGGCkig==
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:03 2026 by rpki-client