Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: f6XkLb9rnO188+vBf+dZqvQh26HxEVBDNwh1OrK7zFc=
Subject key identifier: F8:CD:4C:84:77:3F:9C:67:54:41:27:FF:D4:45:C0:9E:AC:0D:2F:FD
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 01A1DCF054CFE83CFCB2A09E5A8FB0198CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 0BB8
Signing time: Sun 15 Nov 2026 02:01:40 +0000
Manifest this update: Sun 15 Nov 2026 02:01:40 +0000
Manifest next update: Mon 16 Nov 2026 02:01:40 +0000
Files and hashes: 1: LQVM5_choprsfMptI4SaKDzNfzU.roa (hash: CBeqxcrU3y7QUKZLPyhCpTdHsZuCHB7dzyETkbLaiHQ=)
2: N0MHOtF61eRqNYh9GFyKHOVRJ_g.roa (hash: BcriaK5XU9D1s7CqvdvEOAg4CNsDOEFUajziNkgVSOA=)
3: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: u76orpbGbBKoO4samMV+A6u7QtejPObh/6DGI9xLJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:54:cf:e8:3c:fc:b2:a0:9e:5a:8f:b0:19:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Nov 15 02:01:40 2026 GMT
Not After : Nov 16 02:01:40 2026 GMT
Subject: CN=f8cd4c84773f9c67544127ffd445c09eac0d2ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:7f:93:bb:99:6b:32:52:30:5a:67:61:af:
ed:ed:94:18:d2:62:7c:37:50:ea:51:ac:78:d5:88:
28:18:4a:8e:2c:4c:21:33:9c:3d:37:70:cb:49:f1:
b4:a2:f6:56:a8:75:ee:67:7e:fb:8d:a5:ad:fa:06:
25:3e:47:99:3c:51:d1:9f:18:aa:83:cf:ca:bd:f2:
0f:90:11:7d:8e:68:bd:14:3e:1e:b1:90:c1:7f:ab:
bf:da:12:73:a3:6d:29:b5:bf:ac:d1:6c:81:66:31:
60:75:fa:1a:c4:8c:82:c5:7a:d7:c4:16:4b:bc:fa:
4a:b8:52:4c:33:f8:51:66:46:98:c5:43:3c:44:bb:
cc:21:41:31:0a:c1:df:29:a2:d2:4b:5b:6b:de:1f:
8d:fc:8a:b3:30:a8:13:7f:2d:b9:b5:6a:06:6b:14:
34:bc:07:89:df:7f:17:64:89:78:56:71:fe:1d:11:
83:2a:ff:52:71:9d:b9:9f:a8:19:f1:22:83:aa:5a:
ee:d5:bd:8b:87:df:75:42:9e:9b:91:e5:02:d5:b9:
52:5e:65:4f:3a:15:1f:65:b1:30:86:9e:85:ad:d3:
9b:f4:19:a6:9c:01:b0:1b:a9:44:90:96:69:7b:d5:
f3:c1:d2:54:24:62:92:2c:ea:fa:15:59:a5:fa:c5:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:4C:84:77:3F:9C:67:54:41:27:FF:D4:45:C0:9E:AC:0D:2F:FD
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:d6:95:16:50:f2:f3:c8:92:b0:3e:81:8b:c1:92:a6:4d:
1a:ca:bf:4d:1c:af:41:cc:61:61:a6:0e:e2:6f:bd:52:4d:9e:
a7:2f:e0:11:e9:c3:8f:b7:57:ab:cf:82:82:38:36:97:a7:8f:
10:cd:a8:5c:7c:b9:01:c2:11:2b:68:91:fd:1f:9d:5f:45:14:
9b:4f:0c:52:c4:1a:6f:cf:d7:ee:21:51:2b:16:85:4f:96:81:
a2:91:2c:c2:58:8d:91:b1:0b:67:e6:7d:27:b3:9b:07:af:a1:
ac:2c:04:7a:fc:aa:d0:a3:ee:e8:c1:4f:e6:4f:15:f8:8a:78:
4f:e4:23:72:4a:3a:84:18:b4:3f:4a:bb:90:ed:4e:fc:6b:be:
8d:ec:d6:c2:06:1e:1c:52:b8:8f:43:31:3c:25:11:54:4f:50:
5d:c4:26:da:fa:8b:b6:3c:49:04:80:87:b0:d3:8a:c5:04:69:
22:0e:d5:97:ac:d1:83:17:88:9f:10:e2:02:4f:08:b6:f7:10:
44:ce:ee:a8:24:f3:52:2a:51:42:c7:64:99:be:13:0f:47:f8:
aa:1d:83:71:bf:a7:c1:62:d5:36:52:2b:ea:ce:69:96:91:e0:
76:83:71:e7:8c:de:0e:84:a4:b9:71:61:e2:18:8d:64:2d:51:
23:b0:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:04:37 2026 by rpki-client