Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: bDshXzaALyq9Hdq63E0/5zSIsOpXVJQIPR4j//UeAGY=
Subject key identifier: 9F:A6:9D:21:74:B1:41:9D:E5:B0:C5:E9:67:CF:FF:8F:F0:3B:44:A4
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 01A1DD26E6DE90354DDF50AF60A64F2EA625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 12B0
Signing time: Sun 15 Nov 2026 03:01:16 +0000
Manifest this update: Sun 15 Nov 2026 03:01:16 +0000
Manifest next update: Mon 16 Nov 2026 03:01:16 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: L4sx2KX+F8K6OJ9pTxUVk8ijQniYpACvEMqqzpNBnQc=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:e6:de:90:35:4d:df:50:af:60:a6:4f:2e:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Nov 15 03:01:16 2026 GMT
Not After : Nov 16 03:01:16 2026 GMT
Subject: CN=9fa69d2174b1419de5b0c5e967cfff8ff03b44a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:54:5f:28:25:5c:86:e9:f7:75:2b:36:a3:7f:
3a:64:ec:0a:dd:73:6a:92:0c:34:56:7e:47:07:d7:
fd:93:05:b9:48:40:66:1d:84:5e:3f:12:11:e8:b2:
35:b7:6f:17:a2:af:af:48:18:9b:2c:85:e3:4f:f1:
53:7d:75:d3:a0:39:7a:b6:9b:8c:c5:b1:e4:5f:ad:
02:02:1e:1f:a9:29:ab:04:c8:27:48:8f:53:5b:f4:
7a:1c:0c:1b:dd:80:83:40:9a:c4:0b:0e:5f:da:12:
b7:c6:9d:1c:4a:e3:ba:7a:fc:4d:a9:7c:f8:39:ad:
83:f5:3e:1c:9d:3d:29:e8:58:7b:6f:89:94:db:17:
52:39:17:02:25:43:0f:fb:df:8f:3d:98:35:dd:3b:
07:6c:38:bb:d3:46:c1:35:64:85:a5:91:45:e5:9d:
17:ad:93:a5:77:ed:8f:40:55:5c:48:2f:3d:91:3e:
6d:bb:42:d9:18:53:05:4e:55:d4:4b:b8:2d:c3:24:
36:5b:22:71:5c:99:9a:50:a6:cc:48:85:0e:ac:b9:
19:0f:f2:6d:34:5a:25:a4:6e:c8:4a:29:5e:0d:d1:
e8:da:ec:94:5a:5b:40:0a:5b:e6:25:f4:d4:60:62:
c0:f5:92:cf:0f:46:63:1e:1e:fb:81:77:fc:97:8c:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:9D:21:74:B1:41:9D:E5:B0:C5:E9:67:CF:FF:8F:F0:3B:44:A4
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:3d:ef:ef:79:d8:de:d8:c3:ac:78:48:db:98:8e:5a:19:
9e:ae:99:ee:34:6f:37:b3:49:1b:87:fd:d5:c9:49:39:4b:bb:
8e:fe:1b:2f:fa:dd:63:6e:01:65:6f:9d:06:7e:db:2e:64:8e:
6c:b6:94:30:6c:53:3e:24:42:91:4e:72:35:94:91:42:c9:99:
27:1c:54:34:4e:8e:cb:99:5d:6e:10:61:57:70:ce:15:61:d0:
41:f9:45:26:08:ae:3f:0c:78:4d:df:19:f1:b0:30:31:59:3b:
80:e6:59:e3:c5:2d:77:c5:cd:6f:a3:96:8d:75:b0:a8:40:1a:
75:f6:c2:3b:81:11:74:79:95:c0:e0:1f:d9:42:4f:70:59:4b:
7e:6f:f5:0f:9e:43:69:0b:98:2e:f1:39:21:49:91:06:a6:3c:
21:67:17:12:81:e2:6b:87:53:6c:16:8e:e3:f9:d4:f4:72:ed:
94:4e:ed:a8:1d:77:40:93:ac:aa:53:58:85:d6:9a:b5:45:e7:
e3:15:1e:d4:09:1a:71:0c:1f:19:81:44:7a:f5:04:8b:bb:9a:
a1:51:0c:ee:2b:43:e7:cf:62:09:5f:7d:e9:c9:8a:1c:e1:ac:
0e:d4:95:bc:f4:25:85:d1:1d:e5:11:9a:46:b3:11:cd:bf:f2:
4a:e1:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:09:42 2026 by rpki-client