Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: JebctosJ30mj/pspL3zFJtC/7X45qk/t4Ux3abAQWBM=
Subject key identifier: 9F:6F:6A:0C:56:C0:2A:76:13:62:5B:23:3B:C6:62:11:37:FD:4F:95
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 01A1DD2711EBFDDED99F056EF80B76BA229D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0A64
Signing time: Sun 15 Nov 2026 03:01:27 +0000
Manifest this update: Sun 15 Nov 2026 03:01:27 +0000
Manifest next update: Mon 16 Nov 2026 03:01:27 +0000
Files and hashes: 1: 1wLFX9FXNmkr7PirzcPsbpqlJQ8.roa (hash: P2lru/8ni4eoEw7i4AHjlyzAE6kNl3zcnc1hnURt9xU=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: hl5+hwmRFximdjgkkNtVACEVQwbtEaawehWzo1pYXTw=)
3: mh2brnHNSaddV-TGipTyR59FJWE.asa (hash: jv8wytnHrw3E5yNeqCKAofAn7TsK73xMRATCR28aRe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:11:eb:fd:de:d9:9f:05:6e:f8:0b:76:ba:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Nov 15 03:01:27 2026 GMT
Not After : Nov 16 03:01:27 2026 GMT
Subject: CN=9f6f6a0c56c02a7613625b233bc6621137fd4f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:6e:ed:b3:c5:f6:ad:62:af:f4:7b:bd:e3:
32:74:5e:bf:96:08:60:4c:c8:38:47:30:6e:74:0f:
ff:af:3e:6a:b3:06:ff:20:af:23:c7:c3:fb:be:db:
71:aa:c0:e6:6c:d3:b5:39:bc:9b:21:59:a1:5a:f9:
1e:d1:58:4a:89:aa:d6:55:82:f7:73:bb:98:54:58:
ca:54:b8:db:8f:e1:aa:89:81:9f:53:f2:e0:d8:23:
b5:d1:05:c9:83:92:e3:87:11:f6:a3:9b:34:f4:4e:
2d:46:d6:b5:3d:3a:ed:d3:42:7f:7e:29:8a:13:05:
eb:69:ac:9e:62:9f:9c:71:0f:b0:12:6e:39:3b:59:
ea:4c:f7:c5:cb:dc:56:89:21:0c:e4:67:81:8b:0c:
6c:b6:57:b4:ec:53:e6:22:86:92:9f:9f:df:1f:d5:
f8:2f:e0:d5:47:8b:62:b2:55:47:b6:a8:1a:9f:9e:
08:4c:bd:c8:a3:be:d0:0b:68:c2:9b:ca:2f:a5:a9:
d4:1a:21:cf:d9:e3:16:b3:ce:fc:06:f8:49:35:3c:
7d:c5:9f:27:2a:40:a3:0d:f8:2d:1b:57:a1:01:e3:
c4:96:fe:8d:e1:8b:fe:d0:8c:07:c9:8a:ce:1a:31:
ad:35:29:d8:80:6b:69:7c:b7:32:69:a9:ca:b6:a9:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:6A:0C:56:C0:2A:76:13:62:5B:23:3B:C6:62:11:37:FD:4F:95
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9e:16:a9:87:05:72:55:7a:3f:38:cd:89:89:4c:77:89:d0:
18:18:0e:41:6d:8f:9b:f6:1f:e1:57:f5:34:13:70:c0:b2:57:
15:30:00:14:86:38:9a:34:09:e9:40:e4:11:59:e2:c0:33:dc:
6c:7b:8a:e1:a9:05:aa:40:8e:0c:21:27:d6:a5:15:88:bc:3a:
9f:a6:02:88:cf:5e:f2:95:57:6c:cf:25:99:f2:be:28:c3:5a:
60:05:e1:9c:ac:3f:57:3a:fb:d1:79:85:af:37:26:6b:46:39:
27:89:d5:f3:da:4b:ec:5e:df:e0:20:42:e2:95:27:ae:9b:a4:
81:ac:8b:04:1b:76:8a:fa:31:cb:59:98:47:87:d0:48:2b:1a:
10:05:73:57:2d:f5:7b:29:54:a4:5c:12:31:e0:7a:74:c3:e3:
3c:9e:32:fe:63:fd:47:7a:16:99:62:d2:62:58:4a:2a:06:1d:
ed:ca:29:56:ea:33:e1:ff:84:1b:50:4c:94:a8:67:df:76:1f:
c6:9c:15:b8:e5:8e:b3:02:73:df:8f:cf:9b:1a:2d:b0:a3:1d:
e8:75:09:86:34:6d:46:27:e9:30:3b:16:1d:33:fc:74:1e:dd:
b5:03:42:47:68:47:c7:e9:d5:12:7c:56:d1:9e:5e:89:51:3e:
78:77:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:13:13 2026 by rpki-client