Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: gFmk/hjZTI8cuO6bFoWpV+pIL1c71El+UZ6gCJVhiAU=
Subject key identifier: F0:2E:82:1B:28:C6:CB:F2:BE:CC:B0:9B:ED:2F:74:29:F1:0D:B9:32
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 01A1765E45D0EE871973D8F9846AA5A5A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1AD0
Signing time: Mon 26 Oct 2026 04:00:51 +0000
Manifest this update: Mon 26 Oct 2026 04:00:51 +0000
Manifest next update: Tue 27 Oct 2026 04:00:51 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: qKTOQsCXdam3WOIhcELIU334Miy2whe3tEUbKBhpmww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:45:d0:ee:87:19:73:d8:f9:84:6a:a5:a5:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Oct 26 04:00:51 2026 GMT
Not After : Oct 27 04:00:51 2026 GMT
Subject: CN=f02e821b28c6cbf2beccb09bed2f7429f10db932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c2:79:2c:9f:9f:d2:8b:35:c0:69:06:84:a0:
c6:54:8f:16:c4:67:2b:f8:56:c0:bc:79:89:83:75:
ed:0d:02:cd:c5:98:bd:32:c9:4f:fc:fa:f0:39:ef:
b7:83:03:81:4f:ef:74:3e:be:61:f9:6a:07:3b:18:
1c:4e:4f:be:82:50:43:8d:c0:bb:bd:8d:02:c8:17:
73:48:15:93:8a:8d:ba:45:33:39:94:19:76:b7:08:
88:0b:0b:26:51:74:bf:a2:bd:7c:f7:a8:16:ea:4a:
dd:78:55:83:9f:fb:0b:2d:a0:3c:be:37:f7:81:46:
1b:47:d2:8d:4c:6d:66:53:25:be:2a:e7:72:31:5e:
dd:c2:4e:3f:a5:60:c6:8e:5f:e5:61:d6:15:77:dd:
77:f9:bd:17:be:67:a0:d1:9d:10:d6:43:fb:f7:f0:
6e:32:95:e7:49:d8:40:53:bc:a0:94:af:0a:96:47:
57:b9:fc:d5:3a:54:c7:cc:b6:c7:cc:72:b8:77:fc:
3c:d9:52:5a:a8:96:74:66:f5:22:13:62:37:bb:16:
29:96:7f:a5:28:29:2b:48:67:c5:ee:41:ea:81:04:
09:64:6a:9e:32:93:79:dd:a5:8a:23:6a:e0:4b:df:
83:3d:c8:77:3c:71:d7:c1:cd:ad:20:b5:19:35:34:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2E:82:1B:28:C6:CB:F2:BE:CC:B0:9B:ED:2F:74:29:F1:0D:B9:32
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:06:64:ee:59:9d:61:42:35:82:45:cc:ff:b2:c8:fd:c7:
2a:63:f0:26:f5:68:97:37:ce:bd:c7:87:52:4e:72:96:f1:d2:
0d:32:0d:7e:30:07:14:37:be:9c:c9:8c:83:78:eb:a3:08:d1:
38:6e:4d:3f:90:ab:50:7d:e9:36:3e:f5:80:01:2c:38:d9:59:
28:82:39:2e:23:8e:d4:6c:5a:ba:40:7a:89:dd:e1:fd:0e:fa:
33:d9:ae:6e:a2:7f:4e:e0:9d:0a:d7:1b:8a:ca:f7:ea:62:7f:
a4:a4:80:55:12:e6:e6:64:a7:ed:ae:b2:7e:39:c4:45:5a:b0:
54:05:e5:05:01:df:ea:40:1c:fa:dc:34:d5:18:3d:01:60:bd:
e5:1e:43:7e:0a:1f:5e:b8:ac:e1:f4:61:e5:65:4c:9f:80:f5:
c2:ae:bb:c9:04:71:89:5e:68:34:e7:c3:9c:df:0d:8d:03:16:
b9:30:8f:74:9d:ac:60:66:3c:1c:5b:13:c1:45:75:90:9c:74:
91:b6:2d:09:1d:3f:d1:74:f4:2d:d1:aa:74:13:78:be:be:9f:
d8:9f:d5:7b:70:a6:fd:f6:4d:a1:c7:97:f5:47:0c:03:39:3c:
e0:35:02:a0:f0:11:e4:15:4f:6b:4a:0f:09:df:02:2e:a8:65:
d2:8b:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:07 2026 by rpki-client