Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier: ssF7b6WOW6NyPSV6C0mTOKEg8f1sgBpq7IPB/3YmpiQ=
Subject key identifier: 60:AE:85:DF:F6:A2:E5:7E:A9:DB:0A:2D:A6:D7:A0:BC:8D:C6:68:84
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial: 01A0CDB5E62CD5025ED37FFC576E45AB6ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number: 032A
Signing time: Wed 23 Sep 2026 10:00:45 +0000
Manifest this update: Wed 23 Sep 2026 10:00:45 +0000
Manifest next update: Thu 24 Sep 2026 10:00:45 +0000
Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: E4idnyQxvjvMAIaJO1cHFj4O0E7TXStahT5tHohhkaY=)
2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:e6:2c:d5:02:5e:d3:7f:fc:57:6e:45:ab:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Validity
Not Before: Sep 23 10:00:45 2026 GMT
Not After : Sep 24 10:00:45 2026 GMT
Subject: CN=60ae85dff6a2e57ea9db0a2da6d7a0bc8dc66884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:df:fc:fc:05:9e:9c:60:8c:47:0d:4e:eb:
74:cf:16:0a:a4:45:d9:15:85:62:86:c2:2a:8e:c3:
8e:f3:4e:77:26:90:55:13:ce:84:a8:f3:9b:51:ed:
f5:9a:c7:3e:02:a0:91:5c:c7:f5:c2:2f:4d:2a:4d:
6f:8c:a2:7e:ef:6c:ea:d8:f0:de:49:9e:83:27:a0:
8f:91:04:ef:41:08:15:68:08:68:06:7a:f3:89:84:
54:b3:19:e4:9c:46:8b:ad:2b:70:76:a9:e7:b6:1c:
09:da:de:46:a3:06:b2:15:a5:a8:77:79:a3:75:76:
b7:e5:6c:bf:de:07:ea:64:83:95:61:1b:f2:c8:46:
c3:d2:88:34:9e:eb:7d:c4:9e:fe:7c:8c:9c:86:f3:
e0:e4:99:bd:0c:e2:9e:98:50:69:99:25:ab:43:93:
bc:3d:db:f0:66:d4:56:ec:07:d2:bc:eb:aa:40:2b:
a0:e6:10:72:c4:b2:dc:2c:90:fe:40:2b:d9:29:3f:
0a:de:aa:44:38:85:99:ab:76:31:9c:7d:4f:1b:68:
7d:c9:cf:1f:f5:26:66:2b:8c:1c:5f:5f:3f:3f:8b:
13:12:8f:aa:df:6c:dc:0a:a8:c2:d5:a5:69:ad:93:
a7:ae:31:00:ce:d0:5e:8c:68:31:4b:f8:c3:d7:76:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:85:DF:F6:A2:E5:7E:A9:DB:0A:2D:A6:D7:A0:BC:8D:C6:68:84
X509v3 Authority Key Identifier:
keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:ce:09:04:86:9a:04:e4:c4:ea:05:46:12:4a:7f:ff:53:
f4:32:2d:c4:10:61:89:38:23:c8:b8:06:b4:7c:f1:98:63:16:
2a:5a:4b:9a:dd:d9:d0:10:09:22:26:f0:50:17:06:3f:c8:f9:
db:30:2b:11:23:d5:f3:31:3b:91:83:f8:ad:48:5e:57:48:cb:
05:6a:58:7b:0b:3f:a0:23:6e:b7:f6:40:ab:30:87:d4:54:0d:
2a:be:df:60:14:8a:7e:96:c8:37:b4:f1:21:4d:f1:65:e9:74:
77:51:bb:df:fc:52:79:36:0f:e8:86:25:15:90:2f:06:15:1c:
18:76:11:ca:6a:99:25:ab:d4:c7:66:69:36:49:b8:36:a7:e0:
19:57:3b:94:93:d8:67:dc:88:76:8d:82:ba:05:98:74:58:40:
c0:2a:10:c4:a8:9e:d6:68:5c:6e:12:0c:d3:66:53:d5:af:a9:
48:f9:6a:37:a0:05:87:b9:09:4a:8c:ce:f5:14:fd:4c:c3:15:
30:11:30:a7:d8:ab:01:93:32:38:27:03:26:75:da:d7:35:66:
17:60:e5:42:ae:7d:80:7c:c6:cb:cf:be:fd:cf:0a:97:3a:78:
e0:47:99:de:62:e0:fa:20:86:c7:a0:1b:d9:25:7e:c2:f3:99:
8d:12:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:36:22 2026 by rpki-client