Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: ywpOIe/cswz5CclPAe3EG2+gQkrdXu+EtuVJpAQKc/g=
Subject key identifier: C4:B9:2D:AA:4D:88:E1:D5:3D:4C:50:E7:E7:3E:FF:1C:43:13:BA:AE
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 019D28848A7476C90C9554F8CB8175E879A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 096E
Signing time: Thu 26 Mar 2026 05:01:08 +0000
Manifest this update: Thu 26 Mar 2026 05:01:08 +0000
Manifest next update: Fri 27 Mar 2026 05:01:08 +0000
Files and hashes: 1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: cPaklJODFbOgmkNJqMYh34fj0whkPDnCEkl4h/CuWaY=)
2: avSOkO1vns5GxCktjUNPLihkmzc.roa (hash: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:8a:74:76:c9:0c:95:54:f8:cb:81:75:e8:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Mar 26 05:01:08 2026 GMT
Not After : Mar 27 05:01:08 2026 GMT
Subject: CN=c4b92daa4d88e1d53d4c50e7e73eff1c4313baae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:93:f9:ef:2e:5c:1a:a5:1f:6b:92:38:e3:
b8:77:2f:f3:10:44:b0:4b:29:28:26:40:13:4c:9b:
33:ef:cb:d5:89:bb:cd:c9:9a:56:ad:d8:8c:1d:d0:
81:5a:a5:06:29:8e:e0:e2:b4:40:2f:b7:c2:1b:85:
e1:e3:be:dc:8d:e8:a3:bf:ac:a9:4d:a3:4f:5d:8a:
ea:74:e2:fd:7a:ae:40:87:52:24:96:bd:ed:9a:9b:
d7:d8:45:e9:fa:e9:8c:e4:c8:06:0e:41:12:9a:8f:
f2:7c:15:41:9d:62:9b:fb:f3:05:de:52:4c:dc:c8:
ba:2b:ab:46:ec:74:49:41:99:f6:ad:0b:b3:6b:e2:
bb:a4:61:4c:17:2e:c9:2c:e4:02:48:06:61:5d:4e:
19:cd:7a:28:4e:72:14:cb:5c:4e:63:11:2c:f6:50:
42:5b:cf:ff:7b:fc:99:d1:96:7c:b2:bc:20:38:99:
0d:06:aa:98:89:31:79:33:66:e9:40:fc:88:98:fe:
1e:73:b4:2e:94:96:ef:fd:31:52:f4:02:e7:b6:ec:
df:40:a3:61:08:0e:b1:69:91:75:68:01:97:a5:53:
e9:aa:4a:c0:52:54:e0:31:62:3c:97:2e:93:23:76:
e5:5d:3e:73:62:d2:d8:e0:4a:ab:e8:ed:f5:4f:85:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:2D:AA:4D:88:E1:D5:3D:4C:50:E7:E7:3E:FF:1C:43:13:BA:AE
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3f:6f:de:ee:a3:f0:c7:0b:73:f7:0f:85:38:b2:e6:17:2b:
af:0c:5b:69:97:d3:ef:ad:8c:f4:43:1f:67:c7:c1:70:05:4e:
68:0a:b8:b9:48:d6:5b:11:91:60:01:34:8f:b2:4c:2e:ab:ab:
f9:93:62:5b:fc:27:7a:e3:6e:68:10:33:4c:b0:fe:53:30:d1:
9a:07:aa:1e:a4:3d:0c:f3:06:d5:66:1a:8b:fc:0a:38:c7:ec:
26:94:d5:eb:38:d9:5b:10:9c:52:b9:e6:3f:0c:39:88:38:24:
8d:70:b2:88:2d:7d:4b:49:65:52:34:f0:1b:1c:86:b5:79:0b:
fa:54:6d:54:71:43:6d:89:a4:df:db:1c:61:3b:25:a4:86:79:
3c:f6:19:86:88:5d:82:71:12:f0:d9:90:e2:6e:96:ba:46:7c:
1a:7d:82:ee:ee:6b:d7:be:e6:1a:42:1c:20:7d:23:84:50:fa:
5f:36:07:17:ba:7e:cb:59:62:8c:15:9c:f3:35:ff:ae:18:39:
bd:f9:81:bf:68:4a:e6:b1:4c:51:da:da:3d:d4:52:8c:4b:32:
94:a9:a2:f1:af:27:fd:70:a1:f5:3d:0d:39:ae:3b:f2:ff:b6:
1d:e0:03:4b:35:a9:f7:3a:54:8f:6a:1f:79:75:e3:96:69:e0:
30:7f:88:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIp0dskMlVT4y4F16HmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjYwMzI2MDUwMTA4WhcNMjYwMzI3MDUwMTA4WjAzMTEwLwYDVQQD
EyhjNGI5MmRhYTRkODhlMWQ1M2Q0YzUwZTdlNzNlZmYxYzQzMTNiYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/6T+e8uXBqlH2uSOOO4dy/zEESw
SykoJkATTJsz78vVibvNyZpWrdiMHdCBWqUGKY7g4rRAL7fCG4Xh477cjeijv6yp
TaNPXYrqdOL9eq5Ah1Iklr3tmpvX2EXp+umM5MgGDkESmo/yfBVBnWKb+/MF3lJM
3Mi6K6tG7HRJQZn2rQuza+K7pGFMFy7JLOQCSAZhXU4ZzXooTnIUy1xOYxEs9lBC
W8//e/yZ0ZZ8srwgOJkNBqqYiTF5M2bpQPyImP4ec7QulJbv/TFS9ALntuzfQKNh
CA6xaZF1aAGXpVPpqkrAUlTgMWI8ly6TI3blXT5zYtLY4Eqr6O31T4XcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS5LapNiOHVPUxQ5+c+/xxDE7quMB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz9v3u6j
8McLc/cPhTiy5hcrrwxbaZfT762M9EMfZ8fBcAVOaAq4uUjWWxGRYAE0j7JMLqur
+ZNiW/wneuNuaBAzTLD+UzDRmgeqHqQ9DPMG1WYai/wKOMfsJpTV6zjZWxCcUrnm
Pww5iDgkjXCyiC19S0llUjTwGxyGtXkL+lRtVHFDbYmk39scYTslpIZ5PPYZhohd
gnES8NmQ4m6WukZ8Gn2C7u5r177mGkIcIH0jhFD6XzYHF7p+y1lijBWc8zX/rhg5
vfmBv2hK5rFMUdraPdRSjEsylKmi8a8n/XCh9T0NOa478v+2HeADSzWp9zpUj2of
eXXjlmngMH+I6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:21 2026 by rpki-client