Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: cPa95UsQtee+ux1mKfEt08/Pm7p3FA+bb2Y7KfvRjlo=
Subject key identifier: 99:59:E4:E2:EC:01:6E:02:1E:D3:E6:EC:88:DA:4B:BA:7E:56:A9:11
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 01A1DCB93A73E22DC6B581144DA3BCD34578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0858
Signing time: Sun 15 Nov 2026 01:01:28 +0000
Manifest this update: Sun 15 Nov 2026 01:01:28 +0000
Manifest next update: Mon 16 Nov 2026 01:01:28 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: gFIKTF+Xn7VpMVCfmRChz4il7TeXE8X0UukuG3aSAOI=)
2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:3a:73:e2:2d:c6:b5:81:14:4d:a3:bc:d3:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Nov 15 01:01:28 2026 GMT
Not After : Nov 16 01:01:28 2026 GMT
Subject: CN=9959e4e2ec016e021ed3e6ec88da4bba7e56a911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:fb:59:8e:57:2e:12:2e:d4:b5:fc:5b:25:
23:d8:5d:12:b3:ff:85:8a:5a:fa:bf:49:8a:cc:6b:
54:3d:4d:c2:e3:2a:91:5f:de:3c:ae:37:77:39:8e:
ab:f9:d4:71:9e:30:b8:29:27:e2:b0:62:84:27:02:
af:e3:a2:f9:33:de:dd:0d:2d:86:39:46:2f:15:30:
69:8c:db:be:a8:8c:84:da:0a:9b:74:e5:ea:29:0e:
7c:26:9a:1a:7f:d7:10:30:65:c2:1f:81:f6:91:c5:
3c:a0:fa:90:80:6b:ac:b9:05:c9:2b:92:3f:ab:67:
18:15:ed:30:24:7c:9d:f8:b0:0f:da:73:ea:04:c6:
6e:13:d3:fb:c6:cd:79:ef:27:6c:f7:01:a0:de:97:
bf:ba:d0:a1:35:e1:8d:af:e2:04:1d:1b:c8:ce:14:
0a:6c:60:80:2f:85:ee:07:3f:c0:c5:47:ba:d2:f2:
14:70:c8:4d:b6:b2:1a:d7:ed:66:33:d8:73:47:c4:
3b:66:f8:6e:cd:f6:c4:c5:2b:fe:36:ab:ff:9d:a1:
1e:4b:aa:dd:59:11:b5:3d:c1:bd:1d:90:51:6e:34:
a2:4a:74:d4:2f:e1:22:70:be:63:ca:ae:a0:c5:18:
b3:2c:c9:c0:d0:e0:67:fe:88:f9:a4:f5:f7:67:ed:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:E4:E2:EC:01:6E:02:1E:D3:E6:EC:88:DA:4B:BA:7E:56:A9:11
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:10:a0:91:33:d5:a0:72:e9:33:0b:79:c8:32:7e:07:ec:
ef:af:9e:df:ba:50:98:1c:d0:0c:cc:1a:b0:61:7a:d6:f3:72:
70:18:5f:2c:e9:92:bb:07:39:e7:df:5f:4f:f1:5e:88:77:71:
0c:74:ef:cc:e7:7d:43:86:12:f3:d4:5d:0f:4d:1f:07:3e:ac:
ae:28:67:93:8b:ee:30:81:ab:a3:23:e6:82:23:8d:ec:83:e1:
fe:6a:5f:83:2c:ab:2a:33:d9:bb:99:b9:2b:bb:05:cb:5e:3f:
aa:55:86:d7:bb:bf:bd:34:81:6d:69:e5:b2:30:ea:93:f4:e8:
68:0b:c6:59:64:e0:45:dc:53:f4:5c:b4:f8:88:4f:39:9c:0c:
1f:fd:2b:d6:7d:60:66:1e:07:39:6e:3b:b2:fe:e8:39:aa:7b:
03:20:d6:77:90:9e:b1:f4:19:11:36:ff:4c:ff:e5:3d:89:d5:
03:9a:33:ac:91:64:62:df:7d:8c:26:0c:41:d4:3d:87:ea:14:
b6:af:3a:95:55:09:a0:9f:21:7d:cf:94:ff:31:5a:cb:d1:55:
19:c8:c6:55:dc:60:5c:48:7c:8e:90:70:06:fa:d9:69:ec:13:
58:29:b5:01:04:5a:6b:5e:7d:e3:1d:ca:06:35:92:54:3b:e8:
a9:00:54:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuTpz4i3GtYEUTaO800V4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl
OTMyOWYwHhcNMjYxMTE1MDEwMTI4WhcNMjYxMTE2MDEwMTI4WjAzMTEwLwYDVQQD
Eyg5OTU5ZTRlMmVjMDE2ZTAyMWVkM2U2ZWM4OGRhNGJiYTdlNTZhOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul37WY5XLhIu1LX8WyUj2F0Ss/+F
ilr6v0mKzGtUPU3C4yqRX948rjd3OY6r+dRxnjC4KSfisGKEJwKv46L5M97dDS2G
OUYvFTBpjNu+qIyE2gqbdOXqKQ58Jpoaf9cQMGXCH4H2kcU8oPqQgGusuQXJK5I/
q2cYFe0wJHyd+LAP2nPqBMZuE9P7xs157yds9wGg3pe/utChNeGNr+IEHRvIzhQK
bGCAL4XuBz/AxUe60vIUcMhNtrIa1+1mM9hzR8Q7ZvhuzfbExSv+Nqv/naEeS6rd
WRG1PcG9HZBRbjSiSnTUL+EicL5jyq6gxRizLMnA0OBn/oj5pPX3Z+2ECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlZ5OLsAW4CHtPm7IjaS7p+VqkRMB8GA1UdIwQY
MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt
NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1
LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVEQoJEz
1aBy6TMLecgyfgfs76+e37pQmBzQDMwasGF61vNycBhfLOmSuwc5599fT/FeiHdx
DHTvzOd9Q4YS89RdD00fBz6srihnk4vuMIGroyPmgiON7IPh/mpfgyyrKjPZu5m5
K7sFy14/qlWG17u/vTSBbWnlsjDqk/ToaAvGWWTgRdxT9Fy0+IhPOZwMH/0r1n1g
Zh4HOW47sv7oOap7AyDWd5CesfQZETb/TP/lPYnVA5ozrJFkYt99jCYMQdQ9h+oU
tq86lVUJoJ8hfc+U/zFay9FVGcjGVdxgXEh8jpBwBvrZaewTWCm1AQRaa1594x3K
BjWSVDvoqQBUtg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:53 2026 by rpki-client