Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
File: tOLY-xGLsLYMB_1Vc439n8vB5qg.mft (raw, json)
Hash identifier: aUkb3hq5F2v/+8gF0O1s8PhEvxOlD30PYhNwDL+bXqQ=
Subject key identifier: CE:63:CD:4D:FC:2C:D7:86:FF:CD:0E:8A:82:CC:B9:9F:7A:49:A9:24
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A12BE92FD7A48A27779C7B9A1EA59CE112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
Manifest number: 35
Signing time: Sun 11 Oct 2026 17:01:04 +0000
Manifest this update: Sun 11 Oct 2026 17:01:04 +0000
Manifest next update: Mon 12 Oct 2026 17:01:04 +0000
Files and hashes: 1: 3i2zVkw6aach0o_CXp_SFGOpLVA.roa (hash: Y97XAK1phbFipWlwjVjm6O/rcJme8j23ZjHd436Q+2E=)
2: _VigQvf0Dyf23xGtLwUHzrTkZtA.roa (hash: fIK7iGnc84nGrsjgl6rp4thRhx3d9ulBPkLIYk4JgEM=)
3: tOLY-xGLsLYMB_1Vc439n8vB5qg.crl (hash: t5cvgiN60XFCA8VasJWqeKZLBvPktX2ru4pWv3uVSnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:2f:d7:a4:8a:27:77:9c:7b:9a:1e:a5:9c:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Oct 11 17:01:04 2026 GMT
Not After : Oct 12 17:01:04 2026 GMT
Subject: CN=ce63cd4dfc2cd786ffcd0e8a82ccb99f7a49a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:dc:ee:08:78:e4:4f:c0:1b:3e:54:0e:fc:
b4:81:88:f4:eb:87:11:51:35:a7:f6:b8:c3:ef:4a:
8a:2c:5e:7e:dc:dc:61:1e:87:d8:22:02:9a:aa:fc:
3d:1c:46:f5:14:73:e5:75:3f:9c:45:d4:2d:de:10:
88:03:06:f3:04:96:2f:50:bf:bc:39:75:13:8e:5f:
6f:31:ed:24:dd:a0:db:f3:71:ca:fa:e6:8f:fa:bc:
3d:04:a3:e2:6d:55:97:24:37:ae:62:b4:b1:ca:a6:
08:46:b9:36:45:f2:f9:4a:23:ca:c7:f8:86:6e:1c:
f1:91:f0:45:18:35:a9:82:10:3b:ea:f1:e2:0c:9b:
e6:d4:c5:2b:fe:13:b6:4e:77:a2:f3:4b:2d:b5:3a:
2d:c9:79:63:1c:01:9c:14:36:97:7c:d7:97:c3:4e:
03:ca:67:e8:83:6b:a8:53:91:57:1e:d9:38:9f:54:
2c:67:dc:bd:00:cd:ba:a7:39:89:72:2a:d9:cd:08:
95:8a:27:ec:23:fc:0e:12:9a:f4:c7:f3:1a:ab:89:
47:70:1b:d2:eb:cf:27:69:0c:c6:ba:84:c0:f0:5f:
20:91:de:6f:d1:f6:12:8c:70:7e:f9:0e:69:00:88:
39:77:3d:fd:56:3c:fa:99:29:e0:2b:ce:ee:29:be:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:CD:4D:FC:2C:D7:86:FF:CD:0E:8A:82:CC:B9:9F:7A:49:A9:24
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c2:69:03:01:ca:ea:c4:53:a8:75:40:e9:b5:b3:87:46:53:
b9:f2:48:4c:dd:17:82:2e:8b:6a:70:4d:af:25:fb:fc:08:3b:
eb:3d:c9:b9:1a:c5:f8:01:88:27:74:c8:0b:14:d3:58:71:bf:
5a:35:3b:2d:d2:d4:14:2a:3d:a7:3a:00:a9:2f:ef:4b:5e:61:
5c:58:5a:65:23:bb:bd:4d:de:be:71:ef:bb:70:c6:10:15:05:
dd:a1:84:98:1e:e5:e1:a8:d6:c8:3a:6d:c9:73:9a:2d:d8:49:
97:01:d2:3d:10:c6:7c:9d:8b:f6:eb:66:df:88:6a:39:0d:99:
b5:92:08:e2:82:95:23:fe:d1:53:c8:a5:d2:6b:af:6e:4c:76:
b9:3d:60:9e:dd:56:1b:cc:dd:93:b2:d6:17:00:df:ca:50:b9:
d1:aa:e6:c4:70:5d:08:d0:19:c6:b4:e1:11:a4:a5:c2:2d:73:
2e:ce:c2:e9:2c:47:98:98:ea:90:ff:89:e6:c7:90:13:03:6d:
1c:1e:e3:93:23:b0:be:42:6b:91:7b:d7:9d:d9:be:a9:19:7e:
76:14:9d:58:57:49:33:fc:c0:08:35:12:b2:c2:8f:08:bb:0d:
26:d4:01:70:40:cd:96:7a:7b:a9:08:d3:dc:f3:d5:e5:d8:d4:
7d:2d:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:06 2026 by rpki-client