Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: migLjEeRmvtB8KZQixovfEW6ivyNP1Y3URXb1Ut+aYU=
Subject key identifier: B5:0D:A4:56:93:D9:03:50:A8:0A:6B:AC:4B:45:82:D3:0D:FD:B4:06
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01A1DD94A14252B3DD6014D19D5490AA1FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 1519
Signing time: Sun 15 Nov 2026 05:01:07 +0000
Manifest this update: Sun 15 Nov 2026 05:01:07 +0000
Manifest next update: Mon 16 Nov 2026 05:01:07 +0000
Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: TshCx75GLFnV9dMBZI5r0a0SZssMJQakba7jRtuW1YE=)
3: aqxIqajmYQ1_CMiZ7_GwMKxbii8.asa (hash: DHOAQoYQMdjCMW3lkrZBHQJ7lJDnJKHVKvRbqH3Nq5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:a1:42:52:b3:dd:60:14:d1:9d:54:90:aa:1f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Nov 15 05:01:07 2026 GMT
Not After : Nov 16 05:01:07 2026 GMT
Subject: CN=b50da45693d90350a80a6bac4b4582d30dfdb406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:44:0b:84:fe:8e:7a:2c:5a:7f:0a:78:44:
8f:0e:fb:6c:3a:40:9f:4d:15:35:cc:12:7e:cf:0e:
7c:25:57:a7:e8:00:f7:9f:99:ee:54:9d:7b:cd:40:
19:aa:e5:b6:d8:50:c5:77:cb:a1:da:b8:ab:ad:a9:
20:c7:fa:67:a5:d7:2e:a0:bd:17:d2:c7:6c:cc:dc:
a4:a0:d7:0f:aa:9b:eb:ac:d6:06:8f:70:0f:f0:a4:
da:a9:c4:02:ec:cf:2c:fd:95:e0:c3:fa:a7:3f:84:
af:3f:cc:6a:33:41:74:32:95:55:fc:c9:7f:1d:d1:
90:29:11:06:92:50:39:d6:3b:fa:92:2e:ba:39:94:
b4:5d:3a:52:3f:74:aa:2e:ef:61:80:ff:be:8e:c8:
84:fc:bb:db:42:8a:c6:60:ab:5f:f1:1e:ad:2b:bc:
0f:0a:c2:80:8b:c1:6c:e2:31:69:1e:ab:bb:68:84:
d1:33:43:85:cf:73:93:8e:44:a6:fd:e8:1e:28:2c:
67:c8:e9:e1:ba:6b:11:46:df:7c:87:9b:8a:6d:f7:
54:84:51:39:1f:fb:52:ef:65:f9:4b:b3:b7:19:41:
14:6d:e8:9d:99:df:8e:92:ec:90:f5:44:70:dc:93:
72:15:24:74:d6:a6:07:37:10:04:22:aa:82:08:3d:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0D:A4:56:93:D9:03:50:A8:0A:6B:AC:4B:45:82:D3:0D:FD:B4:06
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6b:90:f8:63:7b:42:06:a2:13:96:b9:83:c8:39:c4:f3:bd:
11:7e:a6:03:14:ef:82:d5:97:d8:19:0a:32:0c:fa:f4:21:bf:
e7:c8:30:44:b0:70:3a:3c:e9:84:8d:29:b1:78:b0:28:4d:8a:
50:39:c9:68:c3:5a:cb:55:02:42:9c:88:6d:a9:6a:09:46:b2:
22:aa:27:fd:47:f2:d9:b3:61:08:9a:e4:35:cd:10:a3:db:7c:
0a:ce:6c:39:f8:ae:45:3a:ba:9c:26:49:eb:c6:b0:9d:41:5e:
cf:ee:fc:1e:b9:80:a6:53:b7:cb:8c:65:44:f8:46:f3:4d:a6:
d3:0f:82:6a:0f:eb:b9:a5:6b:63:3d:22:1c:35:65:b5:46:5e:
74:49:02:aa:2d:23:bb:2e:eb:0e:11:a6:e9:70:df:48:3f:02:
10:56:b1:3e:4a:4c:bc:a5:7b:45:1b:27:4a:24:9d:0b:10:08:
af:6a:9d:43:73:13:1b:9c:bb:78:69:3c:d4:53:8a:55:0b:52:
ba:85:32:c8:cf:f7:99:80:ba:e7:e7:a1:06:87:78:4b:72:0a:
f7:00:00:68:58:05:64:31:be:af:c6:1d:89:2a:97:24:6c:85:
f2:69:a3:91:85:b5:c5:cb:07:0a:73:c8:b8:90:bf:29:53:c8:
cf:0d:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:47:41 2026 by rpki-client