Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
File: TnllEg8hCBamsbonTSVM9pj3YTA.mft (raw, json)
Hash identifier: y/PTRrESqb4xitQl68LF/SGoxELYTpK7s2/hXhdjJj8=
Subject key identifier: 53:BA:98:28:3F:C0:EB:BC:9D:A5:AC:F3:65:0A:51:46:AF:F9:BA:D5
Authority key identifier: 4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
Certificate issuer: /CN=4e7965120f210816a6b1ba274d254cf698f76130
Certificate serial: 01A1DFF1521054A6986CDF07D80CCCD4EB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
Manifest number: 93
Signing time: Sun 15 Nov 2026 16:01:36 +0000
Manifest this update: Sun 15 Nov 2026 16:01:36 +0000
Manifest next update: Mon 16 Nov 2026 16:01:36 +0000
Files and hashes: 1: 9cvLi0lyFC3GgbJV2aEolV81JPs.roa (hash: Hj4vRerxqWMvmOPXcDNhhbOOf+kdFNecQC2GEwwRsjA=)
2: TnllEg8hCBamsbonTSVM9pj3YTA.crl (hash: l97foeELzniinzYm5wkA4SYkCqnzqD6rmZxORzmjW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:52:10:54:a6:98:6c:df:07:d8:0c:cc:d4:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7965120f210816a6b1ba274d254cf698f76130
Validity
Not Before: Nov 15 16:01:36 2026 GMT
Not After : Nov 16 16:01:36 2026 GMT
Subject: CN=53ba98283fc0ebbc9da5acf3650a5146aff9bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:96:72:cf:8a:b9:f2:de:c9:6d:f6:f9:4b:
83:bc:69:74:4d:5a:ef:47:d8:b4:fb:07:27:e8:93:
30:93:5b:c2:0f:ca:fe:71:ef:e8:85:c0:d6:04:58:
8a:19:f9:8a:b9:ce:aa:fb:db:d9:63:e0:35:64:ea:
01:13:8d:8a:3b:ce:49:03:97:59:06:09:85:ef:61:
44:2d:e5:a3:a5:08:fe:a0:db:4c:fb:68:8e:70:a9:
fc:bd:f3:f0:40:5f:20:d3:8c:45:f0:09:83:d9:e8:
ef:39:21:e7:e9:fd:33:89:bd:2c:98:97:47:27:00:
8f:f3:ab:ee:42:86:5d:e3:fd:89:29:70:02:9f:7b:
61:05:52:02:da:34:31:bd:7e:c1:ff:5f:23:c9:6f:
b8:3d:75:4d:84:aa:ff:23:aa:d7:22:ba:34:e0:29:
b9:29:3f:cc:a8:dd:2d:e4:9e:ec:39:c1:06:28:88:
20:31:b5:e0:b2:61:96:b9:7f:70:5a:01:26:00:ff:
d3:2a:9f:89:d7:3c:36:a3:db:cc:7b:47:b6:db:04:
37:51:71:4a:94:ff:65:eb:b5:3b:72:c2:bf:3d:89:
c7:9b:da:9e:38:58:78:9d:29:b7:30:b9:36:e9:35:
27:c6:a2:ea:08:74:fd:2d:24:c6:1f:b2:be:f8:36:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:98:28:3F:C0:EB:BC:9D:A5:AC:F3:65:0A:51:46:AF:F9:BA:D5
X509v3 Authority Key Identifier:
keyid:4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:0d:5f:54:3c:c7:7a:79:4f:fd:81:dd:9a:64:8f:e1:1c:
51:dc:7b:66:2e:f8:d8:97:b7:a3:3e:32:23:e7:91:fe:75:c8:
16:35:cf:65:89:3f:a5:a5:8f:a6:3a:3b:e0:c3:14:8f:31:15:
42:82:45:dd:8a:ee:c1:9a:ad:4b:ce:66:15:83:76:b5:e3:45:
33:7d:05:2a:c4:38:73:4e:05:37:3a:35:f7:77:1b:76:bb:2f:
6c:d7:08:b3:d8:45:8e:ef:2c:50:85:87:81:e8:a2:37:57:46:
6a:3a:67:f3:10:0e:7a:2f:f4:39:2f:85:ed:88:f4:1f:0d:7a:
f2:ca:b6:66:6a:49:22:3e:90:1d:84:48:f4:8b:6b:cd:05:94:
eb:59:05:9c:34:a4:d7:57:04:5d:74:7b:d9:42:97:97:ed:4c:
37:48:d2:66:cf:ec:5f:b2:28:27:39:8d:aa:27:b9:19:6a:77:
6d:84:24:d9:de:27:91:7d:3e:c8:ba:80:b0:6b:49:36:ae:63:
d4:ca:87:2f:27:b7:2a:af:79:69:93:8c:57:ff:40:2a:cf:22:
2c:85:e0:ff:1a:84:66:0c:9e:dd:2a:3c:51:44:89:1e:94:e2:
cc:6e:9c:4a:0b:2a:98:69:ae:47:51:62:7a:6d:b6:6c:cc:0e:
6f:36:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:36 2026 by rpki-client