Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: jxXkJlvbBRp6FqUbj5kyp3w283VifEgxa5JGTPeOAkM=
Subject key identifier: 30:69:6A:39:89:95:88:DC:91:87:1F:D3:92:85:17:D7:CF:10:B3:BE
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 019CAE6BE805EB7A4DC410294DB2AD91D1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 1243
Signing time: Mon 02 Mar 2026 12:00:32 +0000
Manifest this update: Mon 02 Mar 2026 12:00:32 +0000
Manifest next update: Tue 03 Mar 2026 12:00:32 +0000
Files and hashes: 1: FOZyNBk5qscMis-9FzsyuX10OZ4.roa (hash: o+pJe9mj3hblMbWE+RFJ1FoJSPltMRx3Pyr1PBvX55Q=)
2: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: IfjEpmNhrYCRVfTDbFjdC1RFePf8rvrQRgkcpw4ctPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:e8:05:eb:7a:4d:c4:10:29:4d:b2:ad:91:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Mar 2 12:00:32 2026 GMT
Not After : Mar 3 12:00:32 2026 GMT
Subject: CN=30696a39899588dc91871fd3928517d7cf10b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:6c:1e:56:ab:cb:98:27:d8:bf:2f:c0:51:
e3:52:80:6c:22:de:35:de:66:a3:8e:26:81:a8:7b:
8c:03:20:29:26:c5:f1:a6:7d:01:f8:6e:6f:46:d0:
63:72:17:3b:be:77:7b:f0:81:4f:62:3d:63:19:c1:
19:5f:38:c0:3b:d9:0b:0b:05:88:43:88:04:cf:41:
65:6c:87:7a:b1:1a:88:bf:db:c9:59:00:47:5a:3e:
00:cb:31:c9:cb:e5:63:f3:6a:af:e7:b3:25:91:8d:
57:a3:46:52:67:9d:24:82:38:57:a6:b5:de:58:60:
16:73:db:f7:0d:ba:ad:33:65:28:56:00:75:3e:4e:
ba:4c:fc:cd:75:e4:9d:d9:cd:cf:8f:71:15:5b:75:
01:e3:2e:9d:a5:49:46:e2:de:73:0c:b8:69:05:5d:
7f:87:e4:de:cc:9d:6b:42:91:73:3d:a5:02:7c:45:
d8:e9:16:a3:c0:f7:28:49:fa:17:2c:f6:69:44:d9:
57:42:be:ad:a2:46:78:4c:9c:87:f1:2a:b7:b0:43:
b7:f1:8b:77:95:2c:29:6c:2b:9b:a4:4f:ee:de:1f:
8d:eb:3a:46:85:cc:06:06:a5:5c:fb:89:15:62:6f:
c4:81:52:33:71:29:27:38:0a:0e:f1:58:ec:e3:a7:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:6A:39:89:95:88:DC:91:87:1F:D3:92:85:17:D7:CF:10:B3:BE
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:ba:5d:27:48:99:28:02:83:66:b7:33:6c:9c:17:ed:ab:
dd:61:7e:c0:4d:a3:1c:3c:5f:e9:84:b1:59:c4:19:15:5f:6f:
56:43:cc:6d:56:d1:f5:0f:55:52:06:ce:17:d6:6a:95:99:2b:
56:69:c8:4d:64:7a:96:21:b6:86:c9:8d:50:eb:53:d4:a9:65:
8e:ec:6e:25:b3:d6:b9:27:ed:b9:bf:ba:2b:65:7e:6e:6b:44:
de:03:09:b4:c0:23:fc:15:3e:d7:67:29:3a:9d:48:10:80:3d:
eb:48:7a:76:97:55:5d:df:cb:12:83:eb:0b:bb:d1:fe:e0:2f:
b2:96:a7:27:d1:f6:85:2a:23:8d:96:b9:8e:f2:81:f9:23:b6:
67:58:34:be:49:54:65:ea:59:50:de:c1:d7:e0:b1:ff:95:b5:
17:a5:ec:e5:45:59:f7:5f:76:12:70:d7:4e:1e:23:1e:70:b9:
4b:74:a8:c7:fe:30:06:47:b8:e4:ee:4d:8c:59:2e:4c:45:19:
6b:97:b3:4b:bf:1f:80:f4:79:b2:33:b6:22:fb:40:64:96:7d:
c8:3d:48:60:80:ab:b2:56:bd:e1:af:f9:17:d7:30:e1:10:a0:
e1:72:64:0c:80:d6:f8:65:5e:c7:9b:cc:08:b7:8b:6a:65:e1:
6a:70:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:31 2026 by rpki-client