Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: Swu868Q9PyhPskNH9PZyOaQKA7Nfy7M2VOf+vZrfaXg=
Subject key identifier: 25:DC:2D:5F:CD:3D:60:AC:54:86:82:0E:F9:BF:E7:6A:86:9A:F1:3C
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 019CACB4CBD3D1CA6D3FA78FA0435FECDA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:55 +0000
Manifest this update: Mon 02 Mar 2026 04:00:55 +0000
Manifest next update: Tue 03 Mar 2026 04:00:55 +0000
Files and hashes: 1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: /z4qqV6myXGi9vYsFbqiZfIxgNhXfRZFNn3MgGU6wew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cb:d3:d1:ca:6d:3f:a7:8f:a0:43:5f:ec:da:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Mar 2 04:00:55 2026 GMT
Not After : Mar 3 04:00:55 2026 GMT
Subject: CN=25dc2d5fcd3d60ac5486820ef9bfe76a869af13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:e7:17:11:db:ad:d8:50:60:89:fc:ae:e9:
08:f7:f2:4d:b1:15:a1:db:20:c2:2c:80:8f:72:06:
45:8d:8d:e3:1e:ef:cc:e4:c1:55:44:a0:6c:07:87:
87:98:ed:d3:39:19:cd:63:d4:00:bc:58:2a:61:2a:
c2:03:34:07:65:2e:5d:73:54:16:19:ab:f6:8b:fb:
e6:64:7e:d8:1d:95:1d:24:f2:98:19:fa:88:4c:05:
69:fe:4e:88:99:db:9a:f8:a6:12:cd:c0:bb:f5:f6:
e6:9a:88:a1:cb:a9:ad:82:89:dd:37:a2:31:d1:16:
7f:9f:be:a1:9d:4c:1c:ad:cc:01:b5:b7:a8:0f:df:
f5:7e:14:c4:2d:8f:20:8c:49:9c:e0:68:f0:b9:da:
52:58:f2:c2:dc:36:42:9f:5c:b1:00:95:52:fa:a7:
d6:0b:5a:0c:db:dc:f1:15:bb:05:ae:75:5e:c4:02:
15:33:82:61:b8:6c:6a:f6:9a:76:0c:f4:f3:fb:4b:
f5:0d:40:0b:01:86:30:f5:26:f5:86:0b:05:32:e3:
05:6d:f4:2f:cb:19:e3:e7:bf:84:bc:0a:3a:b4:bc:
f5:ef:3f:1f:45:78:40:9a:32:cc:d7:e8:54:52:5b:
2a:0a:a7:93:dc:0c:40:f9:a9:c8:fd:cb:92:9f:6e:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:2D:5F:CD:3D:60:AC:54:86:82:0E:F9:BF:E7:6A:86:9A:F1:3C
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:1f:13:29:65:72:87:11:f3:d7:29:af:95:1a:c4:1a:8c:
b3:9c:61:06:2f:e9:69:32:b6:e9:3f:8c:fc:da:b6:52:83:5e:
90:10:d7:98:22:68:0f:a5:96:13:cc:84:f4:b3:ae:49:d5:3a:
24:4b:34:68:02:2f:45:2f:d5:85:51:e2:a4:3a:a8:cb:d7:5b:
9c:ad:e2:0f:00:75:d9:a8:c3:a5:7c:9b:a7:9a:36:59:2a:76:
de:98:b0:80:59:3e:4b:b4:25:5c:9d:b8:95:63:59:a6:74:8c:
5b:23:df:e2:6d:64:c3:bc:c5:0f:3a:d7:94:d5:28:c6:8c:e8:
b4:4e:36:e7:11:bb:c0:74:47:f8:52:ee:85:95:c2:68:a1:ac:
8d:96:3f:bd:dc:3a:ac:79:ee:6c:02:03:ca:cf:a7:d0:4d:5a:
50:ec:06:e2:2d:ce:4d:c7:30:ca:00:63:43:95:78:69:81:99:
45:cd:62:26:bc:c1:2e:76:ba:5d:e0:84:59:e1:9a:92:66:d8:
e3:4f:e2:75:cb:24:48:e4:11:c7:b5:39:2b:a2:56:48:58:4e:
58:48:bf:4f:db:97:07:3d:90:5a:08:a0:8a:fe:f5:f7:ff:08:
25:c0:fa:41:30:00:38:bd:39:e5:42:75:3c:ed:3e:85:93:bd:
19:c8:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:16 2026 by rpki-client