
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: XrzOjB8rlq3abFtB906iseHmZE8qdy31+Lb2g6hst28=
Subject key identifier: 44:03:39:14:AC:87:D8:9F:32:42:57:F7:89:BF:A3:E8:5F:28:6D:DE
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 019DA48A738B81AF96E36CBDF76C35315365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 0187
Signing time: Sun 19 Apr 2026 07:00:29 +0000
Manifest this update: Sun 19 Apr 2026 07:00:29 +0000
Manifest next update: Mon 20 Apr 2026 07:00:29 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: 9+kjMEVJ1eg1CI3TfqqUHOuUCvc+yI4SM9EsgDBvKbI=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:73:8b:81:af:96:e3:6c:bd:f7:6c:35:31:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Apr 19 07:00:29 2026 GMT
Not After : Apr 20 07:00:29 2026 GMT
Subject: CN=44033914ac87d89f324257f789bfa3e85f286dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:22:6c:20:ea:9e:28:41:5d:c1:47:fd:9f:
5f:db:8f:f7:57:eb:d2:73:2b:5f:25:15:d5:51:14:
a6:69:d3:53:05:da:09:49:6d:87:ef:b5:f5:95:de:
27:f9:6e:a4:db:5c:d3:0f:03:63:fc:54:49:a1:06:
24:80:ec:87:4f:c3:1a:e4:8e:72:c3:47:70:78:9a:
f7:cb:2c:e4:fd:5f:1d:a0:8e:84:16:34:26:de:dd:
11:fb:19:85:f3:64:01:fa:cd:fb:f9:66:66:38:1a:
c6:b0:ea:76:88:f8:90:78:fa:d5:cf:a8:05:cd:f0:
46:6c:71:8f:6b:b0:86:24:d5:36:46:24:e2:7e:f8:
11:e0:70:3a:d1:09:85:f9:06:2e:b9:d0:d2:d4:a2:
8a:d2:22:c2:3e:e1:7f:95:4b:f2:4c:a4:77:7d:46:
32:4a:38:16:15:d0:62:21:ca:56:7f:92:1e:f1:06:
ac:9c:ad:31:aa:f0:b1:d2:91:06:24:c4:31:8e:ae:
49:cf:81:db:fd:d7:ed:c4:38:4e:47:f3:e6:67:ab:
41:e9:14:bb:3f:50:d3:ea:bd:a2:f4:f2:80:05:2c:
f4:a4:e3:00:be:df:3c:a0:6e:22:05:2b:dc:51:95:
99:25:0e:92:12:b6:23:49:3f:25:ab:69:c5:3a:aa:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:39:14:AC:87:D8:9F:32:42:57:F7:89:BF:A3:E8:5F:28:6D:DE
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d6:31:81:25:b9:7a:84:30:13:72:f2:61:27:4f:52:30:44:
0a:3a:6c:8d:f1:b2:da:10:a1:c0:c0:96:aa:c6:f0:8f:e4:14:
f2:78:ee:c4:6e:a0:c6:2d:01:35:bf:66:21:3e:9b:75:5d:50:
89:26:3c:d6:22:37:bc:59:db:78:ec:7b:f4:26:12:b8:0a:77:
ca:97:a7:ef:7f:de:79:c0:09:cc:eb:f0:31:2b:6f:01:32:cb:
8f:4d:7f:22:ab:13:ab:a5:ae:2e:41:33:3c:a5:a3:a4:97:7e:
a2:76:a6:44:c0:1b:1e:f5:e9:6f:46:77:22:e2:a7:df:f2:ea:
e8:4c:70:87:bf:1f:7d:1a:43:1b:93:d6:7d:77:18:5c:3b:81:
05:b5:8b:62:46:d1:31:f8:a4:9f:71:38:be:96:93:94:ab:fa:
59:36:20:0b:82:41:8a:24:f6:11:46:ec:e8:d3:7f:c1:90:2f:
f6:44:f6:98:7f:12:75:64:ca:31:21:77:a2:bf:a8:ca:0a:a9:
2b:8a:40:13:02:57:30:75:b8:07:7f:3b:87:c1:3e:6f:73:d2:
5e:0a:81:d3:19:8e:18:bf:3c:cd:09:cc:f2:6e:c9:fc:ae:3a:
a7:c6:1e:57:e7:01:31:7d:2d:ab:1d:c3:51:b5:94:6c:49:bc:
87:2c:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:19 2026 by rpki-client