Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier: gc5wccLAej41h5zREMIZBhmzrBiR+a07OQ5EpcjQpKQ=
Subject key identifier: BE:65:B1:7A:59:96:B2:63:A8:07:29:82:05:9B:BE:0A:22:DB:4B:DF
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 019CACEBC77219D664E48D0413AEFF2B7181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number: 0CD7
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: 8mwlfUzfRsfcDhOcw1ANJF1iwpSYpYcpdpHlN34DwEQ=)
2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c7:72:19:d6:64:e4:8d:04:13:ae:ff:2b:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=be65b17a5996b263a8072982059bbe0a22db4bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:8f:1f:db:f6:b0:56:bc:22:c3:95:41:7f:
37:68:dc:d6:d1:e7:a4:1f:80:ae:25:be:22:d7:7d:
3a:fb:60:19:92:f3:68:1a:c9:ce:49:a9:09:26:18:
4d:55:ca:62:59:ce:a2:91:71:f3:a1:f8:91:a0:44:
0e:4d:f7:48:dd:c6:23:82:18:7b:0a:4b:1b:cc:9c:
ae:7e:4b:36:eb:db:90:f8:24:bf:d8:57:75:ff:81:
1d:69:83:fb:d7:37:74:ce:11:43:a1:1d:93:8e:2a:
d4:55:17:41:79:c8:53:a8:b7:71:96:40:21:af:03:
9d:63:ef:69:5a:a7:40:41:28:e4:a9:78:fe:52:6f:
ad:54:b1:cc:08:d6:ca:7f:a4:71:bb:73:9f:8d:0b:
19:6d:b7:06:aa:9e:f7:78:b9:34:47:cf:fe:76:f6:
5d:d4:32:2f:08:b4:fa:ba:12:9b:5e:67:f7:2e:ac:
bd:74:29:73:1c:04:f2:1c:2f:2e:e8:be:d6:27:79:
80:0d:d4:52:ca:3b:e7:61:16:d6:a9:89:ec:23:94:
66:a6:f3:2d:bd:c9:37:48:02:f1:95:22:7b:ed:bf:
19:de:9b:ac:4e:e3:89:04:ef:d2:37:25:fe:10:e5:
87:16:3b:db:68:da:7a:10:a6:eb:7b:90:13:bb:79:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:65:B1:7A:59:96:B2:63:A8:07:29:82:05:9B:BE:0A:22:DB:4B:DF
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f2:61:4f:26:a8:ee:97:3f:56:21:38:44:16:99:a4:c2:df:
33:35:e1:16:53:f7:d7:98:eb:31:40:7f:d1:38:7c:98:e5:3f:
b9:33:2b:89:14:81:00:97:93:a8:3e:00:83:2d:fe:50:c9:11:
f9:4a:8e:a6:3b:50:d0:7b:01:ab:2e:25:66:9f:1b:45:f2:f8:
3a:db:c2:e0:98:e4:d3:50:92:6d:bc:43:00:54:10:16:4e:d1:
99:85:a1:0f:1b:d9:1d:a1:23:30:fe:b2:2d:7b:9a:bb:e9:5d:
be:8f:d0:e7:77:79:45:d2:dc:da:46:3a:59:e0:89:c7:1a:ed:
2b:60:70:2a:af:bd:62:6f:c9:37:2f:ac:ea:ed:dc:a0:6e:ad:
3c:b0:ab:b0:61:27:06:ad:5c:2f:1b:0b:8b:e7:f7:17:af:a3:
25:3c:b6:b9:a5:b2:b4:09:89:46:d6:ca:6f:e4:8b:79:16:4d:
7f:6a:a6:5a:2b:80:5e:f1:d2:61:b9:51:7e:15:f8:50:cd:0f:
6d:63:7f:20:05:cf:0b:c6:b3:87:e6:2e:56:35:d2:91:cf:a1:
49:fe:19:1b:e0:82:16:8c:03:d6:f6:df:d9:bd:5a:a8:6a:5f:
00:bf:0e:8d:47:df:9e:bf:c7:bc:eb:3c:36:80:35:1d:00:09:
28:2f:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:40 2026 by rpki-client