Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: kwi/kYorl9OndroMplvulBzTdKD6Bn1Up+HnUDlVx9E=
Subject key identifier: 77:87:A6:F1:7A:CE:78:CF:52:34:AE:83:F8:9F:A9:51:42:A7:E9:84
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01A1DE399A4B63C12D641E9DBEE464AC44BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1AF4
Signing time: Sun 15 Nov 2026 08:01:19 +0000
Manifest this update: Sun 15 Nov 2026 08:01:19 +0000
Manifest next update: Mon 16 Nov 2026 08:01:19 +0000
Files and hashes: 1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: 59MfomZo2UK3g+SGh7UYN3BV81Fh0HtfM3/tDEwDw2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:9a:4b:63:c1:2d:64:1e:9d:be:e4:64:ac:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Nov 15 08:01:19 2026 GMT
Not After : Nov 16 08:01:19 2026 GMT
Subject: CN=7787a6f17ace78cf5234ae83f89fa95142a7e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:7b:40:4d:0f:cc:dd:c3:45:7c:89:84:d9:
38:42:b6:39:60:7d:57:b0:03:70:71:eb:b9:10:ad:
bc:f0:71:46:3a:1d:a2:d4:26:09:b9:2f:9d:b3:36:
b4:df:dc:41:12:da:b5:54:02:b7:c0:5e:e8:3c:d0:
01:7e:ab:b9:c4:2b:dc:89:f0:12:9d:ac:0c:70:6c:
09:2d:2e:50:5b:e3:6b:38:2f:42:bb:47:1c:95:ec:
e0:9c:32:f0:0e:66:d8:13:61:32:e9:bc:77:89:d1:
bb:01:8a:fe:3a:c8:77:4e:7f:99:38:57:91:6e:60:
c5:d7:ba:22:93:2e:ea:37:84:63:a9:c4:c4:bd:df:
24:e4:6e:19:48:e6:90:3a:d6:86:c1:54:5e:5b:27:
f3:4e:f7:73:81:e3:a4:e4:c6:4a:75:40:3f:d1:de:
47:68:09:1e:63:8e:15:bc:34:6e:76:b9:e6:69:cc:
3b:4d:6d:90:db:d0:b1:b8:41:aa:b9:bb:9d:87:1b:
17:46:dc:78:29:a9:3a:40:02:c9:20:29:2d:85:d1:
47:ab:d4:c5:72:65:3c:80:06:16:7f:49:ff:98:ba:
ce:4f:ec:77:f7:16:71:63:84:5c:1f:2f:00:91:89:
b8:b9:22:b9:53:83:6d:bc:15:59:2c:7d:8f:2d:51:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:A6:F1:7A:CE:78:CF:52:34:AE:83:F8:9F:A9:51:42:A7:E9:84
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4c:65:86:15:e8:13:55:7a:bd:07:36:3d:96:cf:fa:65:3c:
93:f0:e5:40:96:6b:e1:78:c2:ce:99:97:a6:c8:2a:14:0d:dc:
80:3f:54:6d:05:88:a7:ce:ac:bd:74:93:68:1e:04:54:3a:14:
0a:2f:a9:75:e4:92:1b:ea:df:ce:fa:1e:be:dc:74:68:be:3a:
6d:a6:83:9f:1c:85:96:80:91:f6:d4:d2:27:77:20:b4:a7:4a:
f6:4c:26:2c:68:ab:9a:21:5a:86:e4:9f:0e:cb:fb:e9:89:5d:
6b:a4:5c:14:86:aa:6c:08:88:92:67:59:0f:51:a4:f2:7d:c9:
c4:ce:2e:0f:7e:bd:19:b9:0e:78:ef:98:b3:ac:68:e4:48:7e:
9e:39:3e:af:ff:7b:68:b2:c1:05:dd:e8:9b:84:2c:12:37:8d:
17:cf:b3:43:0b:6b:f9:db:1c:c4:89:cb:7a:e3:fc:1b:78:9b:
8d:5a:fc:2b:d9:87:f6:0a:9b:d7:46:82:ca:aa:6c:67:1b:eb:
cd:06:a4:d5:52:cb:0d:00:64:5e:c9:fe:9d:74:e4:b0:11:a0:
ba:3b:cd:47:32:90:eb:36:83:58:01:ed:01:ef:7b:3b:52:31:
8e:71:af:34:f6:01:35:32:8b:04:cd:c3:09:88:57:73:e3:f9:
f5:11:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:07:27 2026 by rpki-client