Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: dS0dICO/0xVpmBAhctjHVx2JoVYj7NC2GcQISMz8XEg=
Subject key identifier: CE:3A:A0:56:54:F5:69:5E:47:C8:D9:C2:94:15:61:AC:74:FB:B1:C0
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 01A1DF83329715F6B4C5AD59B7896EDDE53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 099B
Signing time: Sun 15 Nov 2026 14:01:19 +0000
Manifest this update: Sun 15 Nov 2026 14:01:19 +0000
Manifest next update: Mon 16 Nov 2026 14:01:19 +0000
Files and hashes: 1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: /iLDbR14Ay6D/7SLy9ZdPWs0wKqw0NJN5fbvFSaIgmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:32:97:15:f6:b4:c5:ad:59:b7:89:6e:dd:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Nov 15 14:01:19 2026 GMT
Not After : Nov 16 14:01:19 2026 GMT
Subject: CN=ce3aa05654f5695e47c8d9c2941561ac74fbb1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:43:bb:4d:12:ce:d2:b4:c6:47:17:ca:46:
c0:32:ea:a9:13:5a:1d:55:71:23:5d:7b:1b:74:17:
4c:bc:bb:11:03:87:36:af:91:34:24:55:40:bd:bd:
8d:55:f7:ee:20:17:cd:a2:ad:1b:35:eb:6f:9e:1f:
77:10:ea:b0:df:6b:23:ba:4f:84:ec:11:cd:1f:09:
e7:c2:e8:92:33:5b:b0:be:64:b6:04:5f:8f:c0:6e:
07:8f:70:47:6f:11:2e:0b:bd:31:d1:bc:2d:0f:8b:
83:5f:09:ef:cc:ec:74:34:c8:a6:68:93:7e:90:54:
fa:5d:56:c4:1b:a1:d7:04:f7:20:d6:93:c4:b4:3d:
f0:c3:e9:56:75:ad:58:f1:6a:12:3c:cb:e3:b2:54:
0d:ac:08:cd:2b:a9:28:88:24:0c:7d:1f:fb:cb:5f:
3d:fe:d2:48:85:19:fa:57:f5:52:1d:fc:f4:11:da:
a7:9f:3f:89:47:dd:ad:97:24:2f:b6:1b:8f:cc:e4:
44:5e:9b:a8:9f:1c:48:1c:10:9f:a5:f8:fd:d4:20:
a8:a8:3f:dc:99:e6:ff:c8:68:82:dc:2b:97:ac:a4:
99:21:7d:c8:ed:4c:47:1a:92:e9:14:84:75:af:a2:
52:ff:32:fe:b1:a3:f7:ae:14:52:30:b7:74:1f:9d:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:A0:56:54:F5:69:5E:47:C8:D9:C2:94:15:61:AC:74:FB:B1:C0
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:2b:69:a2:b1:ff:84:d9:41:a8:6f:da:09:54:fd:90:f9:
40:3e:4c:fa:25:4d:b1:f8:af:28:e6:8d:d9:34:72:fc:73:43:
12:42:23:2d:63:b7:ab:5a:e8:5d:2d:6f:c6:cf:bc:64:71:6e:
e8:ba:8a:e3:18:c2:d9:e1:d5:cc:72:06:b1:d9:fc:03:e7:d1:
a0:3f:00:22:d6:62:84:6e:4c:a4:93:f2:eb:2e:e1:97:cf:59:
d3:a9:28:8a:2c:76:d8:7a:26:87:d6:bb:fa:6a:e0:b5:86:e5:
d4:c4:7b:41:01:bb:b7:a1:a7:21:34:55:23:32:77:45:51:f5:
72:1c:13:9c:59:58:67:ed:2c:83:e0:40:62:7b:af:3d:49:2a:
3b:cc:a6:6c:49:a0:5c:30:9b:a4:14:d2:6d:0f:83:5e:76:98:
f2:3c:aa:08:a4:11:3f:52:91:a6:61:93:f5:c1:a7:df:8d:85:
04:fe:51:07:04:fb:3f:33:ff:d7:8e:e7:4f:19:97:9d:ca:7a:
7e:bd:e5:a3:31:2f:6e:af:f2:77:84:b1:ea:cc:98:01:0d:dc:
e7:0e:15:b8:b2:1b:31:a0:a6:08:0d:bc:08:6c:9d:69:e6:9f:
49:f6:a5:f4:53:0c:f4:a9:91:fa:3b:28:f4:83:96:81:ab:6e:
ea:0b:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:43:34 2026 by rpki-client