Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: v635Xn0cosraA2OBIlQ/jj0ap9dVX3a1pFWirR6SDBU=
Subject key identifier: 88:11:D0:3C:B7:97:FB:17:1D:B6:6A:F5:96:AD:E4:DC:C2:58:18:7D
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 01A1DB38DB24F20642527479802E733C17C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 12AF
Signing time: Sat 14 Nov 2026 18:01:38 +0000
Manifest this update: Sat 14 Nov 2026 18:01:38 +0000
Manifest next update: Sun 15 Nov 2026 18:01:38 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: KJeyYVFu5NHXr9pFRK0PEB+4blGlxKQRrw5UXDoMADs=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:db:24:f2:06:42:52:74:79:80:2e:73:3c:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Nov 14 18:01:38 2026 GMT
Not After : Nov 15 18:01:38 2026 GMT
Subject: CN=8811d03cb797fb171db66af596ade4dcc258187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:13:33:90:c6:35:ff:46:c3:0b:c1:da:14:
1a:68:42:f1:fb:4b:58:4f:88:46:56:cf:cc:69:93:
b1:8f:6a:9d:7f:84:17:36:9c:a7:0f:08:fc:4e:19:
56:e9:3d:f9:1c:b1:08:9e:3b:95:a6:86:d5:f9:8f:
9d:ff:cc:8c:58:d1:bb:78:69:24:9b:85:1a:b9:1c:
6c:0f:09:2a:a0:e9:7f:9b:e0:8c:58:c1:10:3c:c2:
08:a8:f0:db:42:77:cb:d9:18:08:d4:b4:d8:b1:73:
1f:c8:b1:0d:f7:2c:ca:48:b5:ff:02:66:7a:80:a5:
a5:72:34:53:9d:bd:80:8e:d8:fc:8f:10:30:61:ad:
e4:f9:85:92:12:c3:8e:be:a2:de:3b:af:5e:45:5d:
bf:0b:92:df:29:9f:5a:cd:79:bd:aa:68:94:db:3b:
6c:1f:15:ad:1e:5f:e8:6d:2d:f3:8a:b7:d2:02:c6:
62:07:3a:8d:3d:d3:79:4e:b4:7a:fa:d9:80:31:61:
07:0b:6f:c7:e7:9d:dc:48:c3:2d:02:4d:90:20:d3:
18:09:6f:8c:76:7e:07:fb:54:d5:65:85:96:1f:ae:
ab:98:3c:0e:34:6d:3c:8b:05:68:58:01:6b:77:e6:
6e:55:2b:5b:bc:9b:34:3f:d8:6a:3e:9d:0a:3f:0b:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:D0:3C:B7:97:FB:17:1D:B6:6A:F5:96:AD:E4:DC:C2:58:18:7D
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:32:8b:fc:82:83:b6:ac:6c:ac:f4:d1:0e:93:fa:9d:35:18:
3b:29:f8:2f:3c:45:77:df:ef:53:8d:79:27:a4:9c:8e:ef:1b:
63:c4:e2:85:be:de:cb:36:5b:c9:5c:14:6b:59:33:76:40:47:
8f:25:a1:8a:04:77:1f:48:3f:96:63:72:8b:d9:aa:95:a3:00:
f0:85:29:25:f1:66:6e:89:98:a0:84:04:5b:ed:58:3d:eb:63:
c0:80:0a:2a:ae:1a:26:4c:5f:ee:aa:4e:4c:19:79:5f:f7:9f:
1e:f5:f5:df:cc:e2:89:f7:8f:2a:f2:21:a7:eb:13:ea:9a:f3:
ff:dd:89:6c:91:bb:f2:b5:d0:0b:70:3f:6f:27:0d:bf:f9:88:
f2:d3:12:18:25:31:a6:1a:38:35:40:02:85:58:6f:1a:49:d5:
ea:bc:24:63:2a:f0:2b:10:74:b4:65:c2:95:ac:56:71:8c:f7:
f2:5f:12:66:4d:cd:e4:df:4d:75:ea:f0:73:1f:c7:48:3f:49:
bf:ff:22:a8:78:ee:d4:02:1f:0c:93:7d:7c:30:54:bd:89:92:
f7:bd:46:be:a1:a6:22:d2:f0:e3:b9:b2:de:ab:5f:0b:26:b3:
d2:a7:b6:7e:c2:5f:42:10:14:b9:e4:14:fb:32:b5:d2:1f:4c:
38:9b:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:19:38 2026 by rpki-client