Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: 1txh/n8y+M8nfQiH7Oj+j7c0XIN9pWAZ6rgOJutczyU=
Subject key identifier: 41:F4:4E:CD:4C:43:FD:50:6D:CD:18:A3:31:17:89:A9:04:2D:C1:86
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 01A1DD952EC7EF1B133E7A6627828E309F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 0BDE
Signing time: Sun 15 Nov 2026 05:01:43 +0000
Manifest this update: Sun 15 Nov 2026 05:01:43 +0000
Manifest next update: Mon 16 Nov 2026 05:01:43 +0000
Files and hashes: 1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: p9KlynBWWVgg4npRyRVAoY1eqLGBtD/aEHr+rLlJ2BE=)
2: avSOkO1vns5GxCktjUNPLihkmzc.roa (hash: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:2e:c7:ef:1b:13:3e:7a:66:27:82:8e:30:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Nov 15 05:01:43 2026 GMT
Not After : Nov 16 05:01:43 2026 GMT
Subject: CN=41f44ecd4c43fd506dcd18a3311789a9042dc186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:31:39:db:de:a5:cf:c5:78:f8:74:b0:8b:
46:bc:92:5a:12:44:5f:9c:a1:70:58:bd:77:9e:15:
d4:65:9a:63:37:cf:7f:e5:a6:29:02:97:f7:f3:64:
4c:2b:5b:3a:35:de:dc:62:e4:fa:66:c3:dc:bf:dc:
f7:33:72:9a:b0:be:29:d7:96:06:da:d1:4f:5e:9b:
5d:81:39:f5:22:66:ba:b4:da:83:27:d5:5c:97:0e:
07:ef:50:e8:77:1c:d2:a4:47:50:05:f1:a4:ce:1f:
23:46:6f:7c:f0:5c:27:e7:f9:42:c4:fb:d7:7f:20:
77:d5:0e:fe:65:ed:d1:55:d5:42:19:05:70:87:7c:
92:c9:fc:f0:46:b9:32:18:39:4c:a9:f6:15:7a:0d:
13:31:11:5a:07:07:e5:8b:43:51:8d:56:02:a9:93:
bb:9d:d9:b2:6c:72:b8:b8:e9:41:b2:3f:2b:1f:61:
72:20:b3:4e:82:50:da:d9:29:66:92:d4:a7:26:21:
c3:ca:f1:a7:76:73:11:3b:8d:c4:c8:f3:43:a9:1f:
b3:cb:77:6b:fc:5d:a1:79:15:f3:34:4f:98:9d:a6:
31:c3:b2:77:c6:fe:0a:09:e6:9c:ec:d6:c2:da:80:
dd:19:63:de:86:a3:ce:68:4a:08:1c:8c:40:5b:dc:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:4E:CD:4C:43:FD:50:6D:CD:18:A3:31:17:89:A9:04:2D:C1:86
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:60:84:cf:f3:85:d7:8f:eb:4d:96:13:aa:c5:dc:ed:36:94:
ff:d9:5c:8c:82:16:c5:a4:c0:34:65:0e:23:60:7c:af:f9:cb:
bb:7f:34:2e:ff:75:1d:db:0a:1f:b0:26:a2:46:74:be:0e:79:
d5:92:f3:8b:8b:01:54:a2:ef:56:3a:f6:17:ff:7b:64:61:87:
2b:43:fb:46:2f:31:76:f8:a5:ff:ae:1c:dc:51:42:36:39:52:
fc:72:29:65:18:05:51:b5:65:ec:a4:f7:2c:d1:f1:07:24:8c:
bd:de:13:d3:cc:e8:2d:c5:ba:4c:05:8c:52:fc:46:2f:30:0d:
d9:ab:b9:d2:af:ed:0d:be:60:99:73:b5:21:50:af:41:b4:21:
21:55:e7:0e:54:e6:7e:41:bd:2e:64:c2:c7:24:49:0d:4a:a6:
75:29:60:6b:bf:e3:f5:1a:56:1e:ee:b6:a7:88:8d:d8:56:c8:
60:32:01:c5:44:57:1e:4c:3a:3f:7a:85:27:35:b4:bc:26:b2:
a6:96:76:2a:eb:ce:a5:34:0b:49:e7:a0:bd:6d:dd:d3:17:51:
63:50:b6:cd:86:fd:f0:13:35:7e:2a:48:95:65:25:d9:a7:25:
d6:e1:3f:0b:93:d7:0d:90:4b:01:4f:b6:99:88:13:8a:9c:ba:
01:fa:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:14:41 2026 by rpki-client