Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File: RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier: Jzw+ovxMW1F7BluUIC5nK5QtuITxV28mFhsHLJi/Yso=
Subject key identifier: C8:6C:14:9D:10:C2:0D:C7:25:2A:00:2D:1D:28:CB:9C:AD:AF:38:F2
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer: /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial: 019DA59D5A9A9D9631485711250F1ADEC8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number: 02EB
Signing time: Sun 19 Apr 2026 12:00:46 +0000
Manifest this update: Sun 19 Apr 2026 12:00:46 +0000
Manifest next update: Mon 20 Apr 2026 12:00:46 +0000
Files and hashes: 1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: WOMAeDEeGLoQ8JxgJBPQZQJDlZKra66Jw8y/crCxUi8=)
2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:5a:9a:9d:96:31:48:57:11:25:0f:1a:de:c8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Validity
Not Before: Apr 19 12:00:46 2026 GMT
Not After : Apr 20 12:00:46 2026 GMT
Subject: CN=c86c149d10c20dc7252a002d1d28cb9cadaf38f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:d6:fe:8e:0b:71:90:07:82:82:41:2f:ef:
7d:d5:ac:2b:71:30:c3:6b:ff:04:f3:4d:87:1f:66:
70:63:89:4a:24:ff:50:09:7c:d1:f9:43:ec:60:a0:
2a:5b:97:b9:1a:63:6b:3a:5f:b9:ec:5e:66:e7:33:
7e:e1:fa:73:40:22:4c:32:37:4a:85:a5:2a:03:bf:
7c:f0:08:c7:77:d2:fe:47:fa:f5:cd:0b:9e:fb:49:
cf:93:e5:5a:45:87:5c:01:03:fa:78:da:42:24:10:
95:37:4b:91:57:41:41:0a:f3:df:fd:c0:ba:a9:c7:
0d:b7:15:0e:13:b7:a0:7c:81:11:7d:a7:aa:39:84:
76:fe:f1:f1:7b:26:4f:93:84:c2:00:e5:56:55:2f:
f8:00:87:3c:09:a8:b1:3d:63:89:ac:c3:1a:90:09:
67:a0:67:84:7c:e4:f9:d4:83:67:4f:db:39:4f:51:
62:48:94:7c:a3:4e:e7:26:c0:79:02:79:da:60:24:
fe:82:4e:1a:a1:72:26:a1:22:b8:32:a3:95:37:84:
f2:8b:6d:48:f9:8f:05:6e:7a:3f:cc:1c:2e:8f:30:
76:81:08:85:0e:aa:51:0a:13:c5:2f:20:d9:c4:86:
e9:0e:e9:4f:c5:f7:21:18:73:2a:d8:da:cf:a4:73:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:14:9D:10:C2:0D:C7:25:2A:00:2D:1D:28:CB:9C:AD:AF:38:F2
X509v3 Authority Key Identifier:
keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:14:68:91:67:63:b6:40:65:ae:d6:54:bb:f6:ef:85:e9:
be:53:ae:23:15:b7:ea:18:e3:0a:6c:2a:38:ac:98:3d:92:7d:
65:0e:57:c7:a6:0d:2c:b5:e6:97:98:13:46:c2:63:42:4b:fe:
3e:d9:1b:5c:b6:7d:f0:2b:20:ba:ed:b0:dc:f7:ab:83:c3:85:
b2:26:1b:3a:57:7f:c7:8f:9f:cd:a9:35:3d:34:ca:61:a0:9f:
7f:b6:ac:ce:d0:74:74:c3:68:12:94:e3:e3:36:04:3c:0a:9e:
34:cc:62:2e:ec:0e:07:f4:ce:bf:ff:34:89:f1:0b:31:be:8c:
41:fd:4c:1e:d6:01:69:e3:0e:3b:c6:2d:d6:d8:9a:c2:5e:6a:
96:fb:f1:b9:d5:bf:17:52:26:c8:4b:bd:51:6e:79:93:b9:fa:
d1:58:b5:48:8e:07:97:57:21:db:7a:3e:99:24:db:1c:df:95:
50:15:54:02:fc:73:44:b7:89:04:11:1c:e1:8d:d3:f4:df:07:
af:89:8f:87:f0:9f:f8:9f:ce:4f:ca:ce:49:71:3b:dd:e7:c7:
47:87:b2:a6:72:dc:d7:86:68:24:c3:89:ab:ce:48:f1:cb:f8:
64:05:29:e4:c2:eb:8a:7d:09:5c:1f:0a:77:28:ce:1c:57:ea:
a6:0a:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:07 2026 by rpki-client