Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: 8RQrr6GJkPRYgb2iIv46DuZzyMH5xXsg3jxV/nogGc4=
Subject key identifier: 85:5A:D7:F7:A9:8D:0B:FE:CD:89:4E:F9:02:3E:3A:82:74:8B:B1:45
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 01A1DACA89F1952E8F0DADFA00DF5CC3E680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 1AF9
Signing time: Sat 14 Nov 2026 16:01:08 +0000
Manifest this update: Sat 14 Nov 2026 16:01:08 +0000
Manifest next update: Sun 15 Nov 2026 16:01:08 +0000
Files and hashes: 1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
3: E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa (hash: 3KMhjTFJ+WQEHP63JQ46+UXmsQRLh8CZFZ+BiwZhaII=)
4: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
5: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
6: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: M8xFw1q8BFd1kgneH8wJZN009g9mMlQob4AiWDkd/YQ=)
7: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:89:f1:95:2e:8f:0d:ad:fa:00:df:5c:c3:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Nov 14 16:01:08 2026 GMT
Not After : Nov 15 16:01:08 2026 GMT
Subject: CN=855ad7f7a98d0bfecd894ef9023e3a82748bb145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c1:6d:04:8c:5a:75:95:58:ae:c2:3e:05:b6:
7f:80:22:ee:cc:5c:51:f3:41:7c:0e:01:3c:76:7e:
40:91:6e:04:ca:3f:56:f9:1f:46:d1:be:3b:fb:ba:
59:e1:52:de:1a:3e:c1:80:b5:4b:56:31:76:6e:70:
19:00:32:75:58:fb:0a:04:19:9f:1f:2f:8f:06:46:
67:a2:ac:2b:1a:2a:61:f7:0a:a7:7f:e9:23:f3:82:
14:f5:a9:5c:c5:a8:f6:12:b7:0d:6e:6a:da:f3:0e:
b6:61:b9:39:0e:b3:85:8d:0d:ed:59:26:01:0f:67:
40:a6:c0:f9:de:9a:1f:2a:f0:3e:eb:dd:7d:5f:32:
00:1b:72:79:aa:75:1d:2c:52:6b:1d:1d:03:6d:f5:
31:88:06:fd:6c:a0:49:cc:cd:a4:5a:75:4d:ef:be:
63:77:25:1b:2f:8e:84:6f:18:42:4f:d9:b7:ac:96:
a3:6b:52:48:09:e9:92:fa:25:34:97:f7:19:83:be:
c6:81:0a:8b:48:9b:30:e0:0d:dc:48:61:40:0b:44:
29:bf:51:b2:f6:cc:84:4d:78:6f:cd:99:53:ea:c2:
1e:72:54:66:c5:bc:1a:74:bd:cf:78:db:2d:ef:37:
0b:88:2e:3d:e9:44:91:a1:b1:b1:67:1a:20:c5:9f:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:D7:F7:A9:8D:0B:FE:CD:89:4E:F9:02:3E:3A:82:74:8B:B1:45
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:45:89:89:95:25:57:64:56:a6:43:2e:37:2d:bd:86:a8:
b1:c2:88:91:c1:9c:2f:e8:fc:df:da:b9:14:98:4b:d9:77:c5:
9a:50:0b:9a:45:9a:33:31:00:28:9a:e9:08:44:cb:87:50:20:
c6:49:6c:0d:ce:e6:68:03:79:64:18:0c:40:3a:51:6f:2f:44:
82:a9:a9:03:bd:7a:6b:7e:98:88:1b:54:d7:fc:82:f0:19:26:
45:22:b6:5d:7c:f9:11:a9:f5:05:c2:d1:42:2a:90:2f:9d:02:
e7:3a:15:6c:c1:5d:49:1a:dc:a5:6a:ba:ce:c1:16:2d:00:26:
18:b0:2d:de:e0:e0:d7:60:e9:9d:f0:7b:67:f9:d7:fb:31:b8:
ea:b3:ed:da:54:79:78:2a:e1:eb:1b:5b:01:46:a9:9d:67:f7:
cc:c3:aa:64:ef:d1:b9:39:0f:b0:0e:b5:37:ee:f7:6c:85:e3:
ff:90:bf:01:c9:76:2f:0c:4d:e9:cd:9b:59:c3:e2:94:ae:74:
32:a2:4a:d7:2d:86:6a:40:53:76:48:bf:b8:72:27:14:88:62:
52:3a:4e:e6:15:93:0e:b6:3d:d1:3c:19:2b:79:4e:d4:79:82:
6c:a6:c9:ff:6d:bb:4e:56:75:66:50:0e:e2:6e:8f:8c:7c:dc:
0b:28:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:03:27 2026 by rpki-client