Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: 3gnMS1ZbWsO/poIA+fdnYSTORzkdapbdttXIUhkXuKs=
Subject key identifier: 24:A7:9C:E5:FF:9E:6C:B1:49:B0:31:B1:65:62:C0:AB:3A:49:2D:FE
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 01A1DD950907B872C8453BE0A698C81F147E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 05:01:34 +0000
Manifest this update: Sun 15 Nov 2026 05:01:34 +0000
Manifest next update: Mon 16 Nov 2026 05:01:34 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: P0wrgReiTxLHUpisYTtfl0xyHexOa0rqAMrVyzZ8YFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:09:07:b8:72:c8:45:3b:e0:a6:98:c8:1f:14:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Nov 15 05:01:34 2026 GMT
Not After : Nov 16 05:01:34 2026 GMT
Subject: CN=24a79ce5ff9e6cb149b031b16562c0ab3a492dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:66:74:05:32:a6:62:de:11:75:67:ce:8b:
f1:e2:4b:14:91:bf:2b:14:c3:37:74:25:e8:a5:ab:
b0:be:1f:eb:4e:3b:8c:ca:74:a1:cb:0c:f4:fe:cf:
ed:21:66:07:7c:19:1e:af:37:63:0a:a7:f5:b5:e3:
d9:1a:07:e0:8f:a2:14:ab:90:a8:0d:66:02:d6:67:
c6:4e:dc:ad:4e:a0:a5:d9:e8:bc:7b:fc:b1:88:b1:
2f:85:ba:e1:59:8a:ea:3e:a5:dc:01:e3:76:c8:30:
28:a1:7e:2e:2e:a4:ad:04:c3:00:ea:18:f3:c9:51:
96:07:74:1e:08:6c:a8:24:0a:f9:cc:44:32:d0:af:
45:eb:4c:57:9e:3c:a6:d8:72:5b:e2:a5:c6:3d:0e:
f3:c7:65:c3:15:79:c9:38:a4:ec:aa:59:ca:e4:c5:
0a:e7:78:c5:58:fa:55:98:19:ff:d4:7e:20:13:e1:
ee:3f:01:be:78:54:60:a6:7c:bc:28:3e:ee:cd:af:
87:e9:29:f2:59:6e:96:47:3f:38:a3:ff:4d:06:8a:
95:18:c5:f6:7f:2c:a5:bc:16:98:39:05:37:58:d4:
09:da:f1:6b:c7:05:80:d6:21:b9:b7:06:9a:13:ec:
50:c1:86:63:58:d7:48:95:49:e4:0a:a0:44:61:a7:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:9C:E5:FF:9E:6C:B1:49:B0:31:B1:65:62:C0:AB:3A:49:2D:FE
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:eb:b5:21:14:18:f1:c2:ed:7a:46:b8:8c:31:c8:31:0b:
7f:1e:61:c6:66:fa:84:68:5f:dd:3d:62:92:2f:93:73:61:19:
78:30:20:0d:49:3b:4e:bb:4e:f8:73:3f:52:a4:ce:b5:9e:80:
11:48:49:ff:48:2c:95:2d:79:4d:1b:c3:ac:17:46:9f:de:18:
5d:4c:7d:17:d0:6a:e0:43:9a:dd:96:e9:65:68:4a:48:e8:f2:
93:a5:03:9b:ad:52:49:ad:07:ef:b5:4b:9f:0f:e5:31:dc:da:
25:eb:5f:b3:65:7b:fc:a3:7c:21:5f:8e:c2:5a:1d:80:88:43:
b0:dc:28:a3:91:69:be:9d:43:30:d3:d3:21:c0:0a:01:64:cc:
50:b2:62:e1:5d:43:b4:ad:4d:9e:d0:d8:50:fc:42:b1:c2:b3:
bc:4f:44:33:25:c3:a4:10:fc:8a:20:d4:b1:5a:e6:be:f3:b1:
f9:ec:0f:3b:6b:aa:a5:77:00:10:82:71:4e:ef:d3:d9:28:ff:
ee:6b:fa:51:5b:19:50:97:cd:e2:27:14:67:38:e1:dc:fc:fe:
bb:e5:cd:e4:b3:f9:07:ce:85:fd:6c:ee:9d:08:11:da:2b:27:
3a:46:e7:5f:18:57:6a:d4:fd:9c:80:5e:7a:8f:6f:df:43:08:
49:54:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:21:16 2026 by rpki-client