Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: 0dlQtI00npNyhhWejeqiIZWJfzPpchdVWCgn1Y4pe3U=
Subject key identifier: 41:EE:B7:07:0D:51:3B:B7:BF:EE:18:82:75:29:34:41:B2:9A:90:93
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 019DA7F9849E727CED934FF8459A0C0AAAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 09B0
Signing time: Sun 19 Apr 2026 23:00:40 +0000
Manifest this update: Sun 19 Apr 2026 23:00:40 +0000
Manifest next update: Mon 20 Apr 2026 23:00:40 +0000
Files and hashes: 1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: YQbreEqetBkIq2BaoHG5UEtFrGxSQHC+dW7GdLtlx2k=)
2: avSOkO1vns5GxCktjUNPLihkmzc.roa (hash: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:84:9e:72:7c:ed:93:4f:f8:45:9a:0c:0a:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Apr 19 23:00:40 2026 GMT
Not After : Apr 20 23:00:40 2026 GMT
Subject: CN=41eeb7070d513bb7bfee188275293441b29a9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:45:aa:04:92:1c:7e:5b:02:14:97:f4:8f:
bd:a1:bf:6b:9b:7c:2d:24:d0:10:f3:55:4b:09:c0:
97:74:87:57:f4:bf:bb:de:3e:25:3c:d2:f8:85:11:
55:1c:d2:36:e9:4c:ba:45:01:91:26:68:5e:48:c2:
6c:ee:0e:ed:4d:5f:c4:4c:c4:04:76:eb:09:98:a4:
ca:14:d0:da:4e:70:eb:30:10:33:50:6b:d0:16:3c:
41:97:60:bc:16:8a:d5:20:f3:10:05:7b:ea:40:49:
d7:5e:2b:22:ea:b0:04:88:e0:0c:e4:f1:32:b3:9c:
36:89:54:98:07:ed:7d:6a:a9:f4:a2:1e:f2:49:a6:
80:a2:e3:8f:f4:3e:85:56:2a:e5:56:07:3d:32:fb:
10:fd:77:aa:06:5f:ce:67:6a:0b:d7:70:db:92:fc:
63:32:06:29:60:12:bc:12:1c:11:fa:93:5e:20:d8:
d5:27:7a:39:01:f5:1e:46:6b:fa:8e:6f:3f:da:3d:
83:ec:cd:46:b6:b7:8c:34:ad:4c:ee:49:f8:6b:37:
15:df:b3:de:8b:0e:de:bb:dc:eb:b6:5a:b4:ce:a0:
d4:f0:95:d5:1a:89:8a:d2:89:4b:a5:73:ec:5c:5e:
cf:94:b8:2b:f9:a0:5a:bd:7e:9f:2a:4d:73:92:dc:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:B7:07:0D:51:3B:B7:BF:EE:18:82:75:29:34:41:B2:9A:90:93
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:cf:ed:14:d5:2b:1b:03:2a:c8:42:d4:20:8a:7a:5a:ea:
71:20:2f:07:c6:26:3f:c6:cb:0b:ab:8c:34:4a:f2:1e:18:07:
1a:05:da:6f:11:fb:e5:98:62:11:b8:18:69:99:d3:ff:a0:e7:
fa:c9:23:30:01:a8:19:b6:64:5e:37:c4:73:42:ae:a3:e5:43:
c6:bd:e6:84:89:33:f8:b5:40:ab:f3:90:e5:52:ff:70:c4:28:
fe:f6:42:19:bb:b9:be:c5:ee:92:05:b8:4b:7f:a5:2f:6e:ed:
94:43:f5:83:e6:2e:54:44:da:81:9e:dc:dd:e1:a2:69:cc:eb:
74:99:40:94:45:ce:0f:21:7d:d4:f0:ad:ea:8c:be:a4:49:ac:
d3:a2:1d:9e:1a:2a:3b:b9:c1:24:62:cf:4b:a3:b4:c8:5c:f2:
dd:fe:e2:53:32:71:6b:e3:0e:78:f6:59:43:38:5f:83:f8:48:
e7:e3:ec:d0:af:8d:e0:97:e5:c4:fd:fb:31:fe:7d:b9:40:92:
d3:24:f8:7e:e8:5f:11:69:90:47:03:46:c6:00:0a:1d:92:ac:
f4:46:9e:6a:56:f0:a9:54:d2:03:56:6b:d5:9a:33:fa:2a:5b:
b5:0d:32:73:fa:c3:36:eb:bb:e6:0f:75:64:a2:4a:d6:09:50:
58:c6:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:54:26 2026 by rpki-client