Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: FgoEppDlFsgYMkVL74pvnBiXffzeprTheDe+8tZ0Jdg=
Subject key identifier: 33:B3:68:F4:50:DD:10:22:EC:EF:3C:90:FD:FD:31:13:70:49:6A:D6
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019CAA58A65FEDF8A667F7A967AB429867B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 17:01:02 +0000
Manifest this update: Sun 01 Mar 2026 17:01:02 +0000
Manifest next update: Mon 02 Mar 2026 17:01:02 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: KutJrBS2vdUOT/uD+4kOx+Cby7Kow1Qr7TTBB45Nq1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a6:5f:ed:f8:a6:67:f7:a9:67:ab:42:98:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Mar 1 17:01:02 2026 GMT
Not After : Mar 2 17:01:02 2026 GMT
Subject: CN=33b368f450dd1022ecef3c90fdfd311370496ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:1c:47:54:ca:ad:2d:55:c0:97:d3:b7:be:
d4:1d:c8:83:eb:42:ff:14:d9:74:69:97:46:34:14:
8d:b1:0d:90:e7:86:fa:4c:85:5c:f2:a0:37:db:68:
07:02:ee:41:5b:da:c2:2d:b9:e3:22:d7:df:60:c2:
80:e9:44:04:99:43:4d:27:e8:14:67:ef:50:94:a3:
a7:53:a0:c4:93:e8:16:e3:e8:08:63:fe:00:41:22:
b1:ed:9b:fd:bd:2e:17:9e:83:66:ef:f0:86:2c:73:
39:9f:81:1b:04:8f:03:21:a9:08:cd:c1:8a:39:02:
50:81:78:98:b5:4d:7b:b5:6b:8c:6f:b2:03:9d:6b:
6d:0e:a6:3a:41:98:01:04:ca:4e:13:34:58:47:b9:
8c:24:7d:8a:3f:e2:51:47:37:50:33:08:4f:8a:6b:
db:e8:09:12:f1:82:c2:07:aa:a0:a2:89:27:7f:c8:
39:00:c9:0f:33:ce:2b:6c:65:5e:b5:79:c5:fe:34:
d3:a3:8f:9f:34:ac:7f:5f:8c:d6:bc:60:7b:cf:09:
9f:f5:05:86:94:32:e7:4b:d7:a7:68:cb:cc:48:f7:
78:f6:6b:e1:60:06:42:66:ea:9e:d1:43:58:ac:8a:
4f:29:ef:e0:ab:a0:c1:83:89:d3:34:b8:1a:b9:e6:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:68:F4:50:DD:10:22:EC:EF:3C:90:FD:FD:31:13:70:49:6A:D6
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:08:78:9e:f4:b0:d6:20:c1:14:53:a9:0b:70:10:eb:cc:25:
e9:e1:30:6c:05:c1:40:de:b2:2a:81:ce:91:6a:c2:29:de:eb:
a1:cf:4d:f4:a8:28:03:97:46:1a:bd:7b:c5:c5:7a:39:b5:16:
9c:6e:16:ff:8d:0b:bc:5e:07:2c:d0:3d:f8:ff:af:90:3b:18:
e1:17:30:6e:17:be:8e:53:8c:22:b9:77:03:be:c6:99:25:c2:
ef:ef:92:61:b9:86:59:74:12:af:0d:ae:f2:52:b0:fe:7e:2f:
99:32:11:6d:16:d8:e5:53:7e:5c:de:72:b8:59:00:d2:26:b0:
72:2e:a3:b2:d3:0d:b1:0a:41:f2:30:6e:e2:b2:81:e4:d7:0f:
b3:4f:a8:22:fa:d1:ed:43:0c:88:2b:14:ba:40:82:30:d1:4e:
b9:ee:5e:12:dd:35:72:f9:87:55:be:50:0b:c4:ce:90:90:70:
15:c6:ce:e6:d9:72:55:58:5b:70:b6:2b:01:df:10:49:9e:3b:
79:94:cd:38:36:7f:87:7d:bd:a4:8e:c6:c7:44:1f:0c:97:8c:
35:b7:df:18:b6:66:26:e8:fe:de:cc:65:9d:10:7f:7f:01:81:
c0:f3:08:62:78:10:a7:ca:68:4e:09:c7:7b:48:41:11:2c:3f:
dd:d0:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:35 2026 by rpki-client