Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: qVmIbOgzvyHRfyOelLX4i/uNIvWvuUflq7ahchlboXc=
Subject key identifier: E0:B6:75:29:4C:19:F9:46:E6:5B:9A:38:34:41:BC:76:67:19:1C:D2
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019D99D0AC4EED51B39034A003B3D830638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: YbJqupdVCfNp3Ut2SXBL82m0GTWhav6js0o0rHJdCCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ac:4e:ed:51:b3:90:34:a0:03:b3:d8:30:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=e0b675294c19f946e65b9a383441bc7667191cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:92:2b:1a:db:45:ea:21:fe:a6:65:73:d4:
29:28:24:22:28:17:16:cf:b8:24:96:be:2f:74:54:
eb:07:b1:62:5a:16:3b:ba:11:8c:3e:74:da:c1:0d:
9a:ad:fb:4f:c5:cb:8e:d0:e8:ac:ed:ab:de:e3:e3:
7c:22:ec:a7:d7:3b:3e:07:43:3c:b6:72:0a:d3:d0:
1b:b3:9d:1e:28:3a:78:2d:81:07:38:95:1b:e5:2d:
0c:a3:23:96:6d:95:60:a0:b6:64:98:3c:08:25:8e:
57:d7:d9:84:ae:2b:0a:01:9f:98:d9:50:23:c5:04:
fa:34:d8:73:fd:44:14:39:c4:d9:bc:3c:cc:61:93:
d5:be:d0:e2:68:04:1c:0f:00:86:86:c4:c9:25:f6:
2c:54:c9:02:81:02:f7:45:49:79:d9:f9:29:fc:58:
d7:44:fd:87:dd:5e:ef:2d:49:89:21:e0:d3:12:46:
fc:cf:cd:1b:7e:49:0d:59:c0:42:64:a5:d6:a6:61:
19:c8:3f:98:96:78:d6:ac:12:d9:63:46:a1:f8:35:
16:20:91:2c:d4:dd:53:8b:40:0b:43:3f:e7:8d:51:
35:2f:6d:05:1b:12:01:5b:af:70:8b:7f:a8:c0:f2:
5b:66:62:34:bd:e7:5a:5d:52:fe:4c:b9:c6:68:db:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:75:29:4C:19:F9:46:E6:5B:9A:38:34:41:BC:76:67:19:1C:D2
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:7e:1d:9b:78:ab:cb:cb:91:b4:d9:ce:68:7f:b2:a9:42:
35:ec:83:6d:6e:43:3a:03:96:d3:86:38:07:8e:5f:72:69:8f:
e1:25:ea:f1:45:c1:8b:3c:b8:f5:47:d0:5d:ff:76:76:5e:28:
5c:ec:c0:d3:29:1f:bf:5b:95:8f:f2:45:57:24:93:05:6b:52:
1f:7b:25:73:e2:3f:8a:67:37:8d:2e:56:a3:09:c0:dd:44:ea:
d9:7d:97:4c:41:97:da:55:47:0f:1e:32:41:35:7b:3b:21:fd:
d4:d7:9d:ac:35:3b:20:84:c8:07:04:39:f8:6c:9c:73:a4:7b:
6d:00:8b:4a:d9:2a:d5:23:ab:72:06:c2:0d:7d:d3:0d:3b:76:
46:3d:47:ce:68:4c:45:63:3b:a1:c8:52:c8:61:51:3a:84:75:
e5:22:99:a1:f4:63:e3:44:b7:16:cc:32:9e:01:34:c1:dd:78:
a7:1b:69:4b:f2:fa:8d:aa:65:7d:e9:ce:b3:00:3a:70:72:13:
4e:fb:ae:74:94:d3:d3:ec:83:56:2b:56:8f:e5:ba:af:d7:6a:
06:88:d5:6b:bd:b0:eb:d3:3e:72:84:42:e7:a2:93:7c:60:fe:
bf:1b:18:ef:3f:40:26:c2:59:1f:32:cb:39:bb:01:31:f4:43:
cb:72:b3:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0KxO7VGzkDSgA7PYMGOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGJkMjk3ZTgyOGRhNWVhMTJjMGRmNmNkNzQyNmI3ODMw
NzQ2OGIwHhcNMjYwNDE3MDUwMTIyWhcNMjYwNDE4MDUwMTIyWjAzMTEwLwYDVQQD
EyhlMGI2NzUyOTRjMTlmOTQ2ZTY1YjlhMzgzNDQxYmM3NjY3MTkxY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIqSKxrbReoh/qZlc9QpKCQiKBcW
z7gklr4vdFTrB7FiWhY7uhGMPnTawQ2arftPxcuO0Ois7ave4+N8Iuyn1zs+B0M8
tnIK09Abs50eKDp4LYEHOJUb5S0MoyOWbZVgoLZkmDwIJY5X19mErisKAZ+Y2VAj
xQT6NNhz/UQUOcTZvDzMYZPVvtDiaAQcDwCGhsTJJfYsVMkCgQL3RUl52fkp/FjX
RP2H3V7vLUmJIeDTEkb8z80bfkkNWcBCZKXWpmEZyD+YlnjWrBLZY0ah+DUWIJEs
1N1Ti0ALQz/njVE1L20FGxIBW69wi3+owPJbZmI0vedaXVL+TLnGaNsrhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC2dSlMGflG5luaODRBvHZnGRzSMB8GA1UdIwQY
MBaAFEaL0pfoKNpeoSwN9s10JreDB0aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMt
ODNkMDljZWZiZTg4LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMtODNkMDljZWZiZTg4
LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmB+HZt4
q8vLkbTZzmh/sqlCNeyDbW5DOgOW04Y4B45fcmmP4SXq8UXBizy49UfQXf92dl4o
XOzA0ykfv1uVj/JFVySTBWtSH3slc+I/imc3jS5WownA3UTq2X2XTEGX2lVHDx4y
QTV7OyH91NedrDU7IITIBwQ5+Gycc6R7bQCLStkq1SOrcgbCDX3TDTt2Rj1HzmhM
RWM7ochSyGFROoR15SKZofRj40S3FswyngE0wd14pxtpS/L6japlfenOswA6cHIT
TvuudJTT0+yDVitWj+W6r9dqBojVa72w69M+coRC56KTfGD+vxsY7z9AJsJZHzLL
ObsBMfRDy3KzOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:26 2026 by rpki-client