Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: FDqpv1T6MR+4MkT7CK5YmfVd9fsu8koUqseiaOmlN/s=
Subject key identifier: 5B:02:37:5B:3A:73:E7:17:A5:B1:53:EC:60:80:C5:BB:B7:EA:AF:53
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01A1E05F1A0B640AB873F4C8124A7678AB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 119B
Signing time: Sun 15 Nov 2026 18:01:31 +0000
Manifest this update: Sun 15 Nov 2026 18:01:31 +0000
Manifest next update: Mon 16 Nov 2026 18:01:31 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: TBrBgvfT67Goqhztvsd72YnDX4VEDly8jEz101/lFCo=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:1a:0b:64:0a:b8:73:f4:c8:12:4a:76:78:ab:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Nov 15 18:01:31 2026 GMT
Not After : Nov 16 18:01:31 2026 GMT
Subject: CN=5b02375b3a73e717a5b153ec6080c5bbb7eaaf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:47:a1:31:c4:4b:92:cb:57:09:88:73:cc:
4b:9f:3e:ff:93:f1:2d:aa:cf:a9:33:ef:c0:82:20:
e1:64:49:c2:d7:46:2f:2a:c8:2c:30:15:10:a0:00:
df:3e:3a:2f:ba:be:6f:f4:be:b1:b1:9d:d1:4d:4c:
72:8a:f3:11:49:75:68:55:40:d9:89:26:2a:68:6c:
fd:83:fd:a7:dc:c2:61:68:72:67:f1:76:2d:ac:de:
cc:c8:23:6b:23:f5:d7:7e:48:89:c4:93:64:1c:b1:
eb:23:45:a2:c3:ed:17:69:b8:ef:e7:12:05:51:5a:
5e:06:92:c4:52:8c:7d:b3:58:ba:7b:3e:91:7e:37:
98:fa:26:6f:6f:b8:50:ab:c1:57:d3:a9:45:15:1f:
7a:a2:53:4b:0e:cf:54:d8:b8:00:6d:42:5a:74:d4:
4c:25:6d:d9:9b:b4:c7:cb:cb:fe:ba:74:02:81:fa:
1c:0c:bd:0f:1f:78:ef:56:24:f2:d9:ba:dc:a0:8f:
b9:0a:a7:16:2c:df:4e:30:fc:3b:84:e0:ec:3f:4f:
c2:09:73:2f:50:dd:20:8a:44:d7:d1:bd:05:e2:61:
32:d5:ec:ca:27:ec:f1:94:7d:9c:f6:47:7c:6e:fc:
e1:39:0b:32:aa:f9:bf:60:e6:82:94:c4:84:60:48:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:37:5B:3A:73:E7:17:A5:B1:53:EC:60:80:C5:BB:B7:EA:AF:53
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:66:9c:64:9e:9f:8c:e2:d9:c9:07:0f:2e:6b:61:34:74:
f8:18:4d:c5:a4:2f:c9:69:74:32:1e:73:a3:68:a2:02:c5:1a:
c4:78:4b:5e:93:e7:ea:3e:a8:3a:06:5c:ed:8f:58:c9:57:da:
8c:97:ea:9f:0d:ba:4e:d8:bb:60:39:fa:cb:b8:cd:c5:a4:78:
9e:f0:77:9c:d1:cb:87:7d:67:84:c9:37:66:02:bc:22:9a:81:
5f:f6:93:14:fb:d0:f8:58:a2:76:cf:0e:a8:49:27:4a:f8:a7:
17:51:f3:f7:d0:15:a2:4b:a7:c3:98:8a:74:ff:06:9c:87:2d:
73:a1:4f:45:d1:12:a9:61:b1:79:b9:23:6b:9b:4d:16:80:d0:
07:5c:bf:42:3b:41:d3:91:ff:48:e5:10:25:53:3d:c6:56:a0:
3c:80:d8:bd:7e:7d:8b:07:84:ce:46:26:33:ff:79:81:3a:ed:
71:81:d5:e3:30:30:ea:58:68:3b:15:74:b4:b5:c7:bc:89:56:
20:65:62:5d:d9:88:42:02:ae:f6:bb:a8:07:f6:f7:2d:1c:ae:
bb:aa:5d:9b:03:91:44:0d:17:cb:0b:5f:e4:23:4b:ee:17:cd:
e3:8a:08:c4:4a:92:de:08:18:f1:a4:67:74:eb:43:d3:56:be:
c5:25:23:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgXxoLZAq4c/TIEkp2eKtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm
YzY4YjgwHhcNMjYxMTE1MTgwMTMxWhcNMjYxMTE2MTgwMTMxWjAzMTEwLwYDVQQD
Eyg1YjAyMzc1YjNhNzNlNzE3YTViMTUzZWM2MDgwYzViYmI3ZWFhZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplxHoTHES5LLVwmIc8xLnz7/k/Et
qs+pM+/AgiDhZEnC10YvKsgsMBUQoADfPjovur5v9L6xsZ3RTUxyivMRSXVoVUDZ
iSYqaGz9g/2n3MJhaHJn8XYtrN7MyCNrI/XXfkiJxJNkHLHrI0Wiw+0Xabjv5xIF
UVpeBpLEUox9s1i6ez6RfjeY+iZvb7hQq8FX06lFFR96olNLDs9U2LgAbUJadNRM
JW3Zm7THy8v+unQCgfocDL0PH3jvViTy2brcoI+5CqcWLN9OMPw7hODsP0/CCXMv
UN0gikTX0b0F4mEy1ezKJ+zxlH2c9kd8bvzhOQsyqvm/YOaClMSEYEiZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsCN1s6c+cXpbFT7GCAxbu36q9TMB8GA1UdIwQY
MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt
MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk
LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRpmnGSe
n4zi2ckHDy5rYTR0+BhNxaQvyWl0Mh5zo2iiAsUaxHhLXpPn6j6oOgZc7Y9YyVfa
jJfqnw26Tti7YDn6y7jNxaR4nvB3nNHLh31nhMk3ZgK8IpqBX/aTFPvQ+Fiids8O
qEknSvinF1Hz99AVokunw5iKdP8GnIctc6FPRdESqWGxebkja5tNFoDQB1y/QjtB
05H/SOUQJVM9xlagPIDYvX59iweEzkYmM/95gTrtcYHV4zAw6lhoOxV0tLXHvIlW
IGViXdmIQgKu9ruoB/b3LRyuu6pdmwORRA0Xywtf5CNL7hfN44oIxEqS3ggY8aRn
dOtD01a+xSUjwg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:14:34 2026 by rpki-client