Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: 0Es9y7iqNcLqU16XwfabGu+Hc3P5UfFmXrNRHErR1Fc=
Subject key identifier: E6:97:C3:EB:6D:86:AF:B7:3E:E4:EF:AC:D4:1B:8D:52:01:86:A6:85
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01A1DD950B8F1DCFF1DBA419F7B22D4733EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 05:01:34 +0000
Manifest this update: Sun 15 Nov 2026 05:01:34 +0000
Manifest next update: Mon 16 Nov 2026 05:01:34 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: tzFmMqpMiJSWA5BqRiAh3c8Bu6ywTJXWUqsDx5zvw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:0b:8f:1d:cf:f1:db:a4:19:f7:b2:2d:47:33:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Nov 15 05:01:34 2026 GMT
Not After : Nov 16 05:01:34 2026 GMT
Subject: CN=e697c3eb6d86afb73ee4efacd41b8d520186a685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:11:33:75:59:8e:8d:a6:17:47:f1:f5:75:
c2:83:59:60:79:ef:32:0d:2c:f9:47:da:ca:0e:b7:
d7:bd:f6:d8:bf:63:06:3d:fb:5b:8c:b7:28:f8:ad:
20:29:73:ff:9f:98:cc:4e:3b:81:dd:41:94:fc:f0:
f6:f2:74:4c:7f:2e:48:d5:72:79:28:45:d1:5d:11:
3f:32:00:19:96:c7:63:d0:2c:c9:1d:d3:06:42:4e:
6a:bd:86:0e:08:b4:87:f6:54:ee:86:bb:4a:76:b2:
97:0e:ba:03:89:8a:03:ad:f6:e9:e5:37:c7:8e:13:
05:02:10:7d:e0:b9:8e:cb:0d:3a:13:c9:ba:77:af:
11:56:f9:82:7b:d3:d1:3e:a5:38:0b:70:69:9e:43:
a9:08:77:cf:89:ee:ea:f8:3b:4d:0d:ed:05:8f:1c:
db:25:80:e8:b5:ad:0f:4b:77:bd:16:96:8e:24:a7:
fa:7d:7c:d9:f8:6e:52:0d:cc:f4:53:92:f1:07:f2:
ac:75:39:26:fb:c8:66:39:16:81:a9:6c:f4:04:be:
31:ef:e7:4a:41:29:4d:f3:b3:c3:0d:0e:de:46:b6:
be:2a:72:76:30:cd:39:1c:d6:2b:80:cd:18:99:9e:
d5:cc:bd:a9:f0:7b:5f:6b:0c:9a:f2:9a:17:ba:ac:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:C3:EB:6D:86:AF:B7:3E:E4:EF:AC:D4:1B:8D:52:01:86:A6:85
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3a:a0:af:e9:03:07:c3:93:ca:70:30:4e:27:78:de:b8:ad:
93:80:e3:6b:c9:19:ff:6f:8a:9a:fd:78:24:41:e3:65:c6:58:
85:1e:99:0c:b9:4e:da:e3:0f:90:e0:4c:ea:30:ac:c2:be:d7:
a7:3e:46:6e:f9:cf:78:c6:d3:34:54:5f:28:70:59:14:2c:08:
9b:6e:44:bc:e4:18:e2:37:29:7f:e9:8a:69:44:30:4b:58:93:
1b:33:eb:99:b8:a9:35:bd:6f:0f:52:53:67:55:67:09:b2:cd:
27:6a:d1:4a:fe:a4:5a:1f:85:f2:86:db:a0:bf:f9:52:f3:f7:
dc:bb:62:d0:b2:71:8b:99:1f:19:3b:04:09:7c:b2:b6:64:f0:
bb:b3:c8:89:ae:b3:f2:2b:8d:4f:2e:a8:a3:9f:5f:c2:f5:89:
bc:21:5e:35:50:12:b5:45:76:fb:cf:e9:91:1b:e9:76:6b:f1:
c9:fc:3f:f5:a2:f1:b3:60:08:cd:33:4f:9e:39:57:cc:57:11:
9d:c7:3f:2f:c0:a6:f1:2f:00:b3:38:58:d3:04:ad:fe:de:d9:
9a:f2:7d:9c:4c:c6:ae:2e:64:c0:63:50:b6:af:97:cb:62:27:
69:0c:94:b8:ec:4c:b8:0c:5a:ff:45:24:8d:5b:0f:ff:da:be:
02:45:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:29:48 2026 by rpki-client