Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
File: l1otW428KUB1EBfkqLR2cy5_ToQ.mft (raw, json)
Hash identifier: TkXNNNpzXH7mWGMAxXuoWLEeTknKz1JxIzLPk5AFGwg=
Subject key identifier: BC:AF:DE:60:01:22:59:85:7C:AC:7F:9B:6B:B1:C0:C9:9B:6C:C8:85
Authority key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Certificate issuer: /CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Certificate serial: 01A1DF8324992BEBD7E93EFFA4AFFA99B912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
Manifest number: 011F
Signing time: Sun 15 Nov 2026 14:01:16 +0000
Manifest this update: Sun 15 Nov 2026 14:01:16 +0000
Manifest next update: Mon 16 Nov 2026 14:01:16 +0000
Files and hashes: 1: IQxi_ycveBSnK1Ru6EC_lb20R2M.roa (hash: qkCT/kfpBxRfgLxAiyBIqf6L9Svv3JlOCCjBfxcll6E=)
2: l1otW428KUB1EBfkqLR2cy5_ToQ.crl (hash: KBeZGivimIK0v38iTbTZD4v6O/CasIz7lP3Wdwha1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:24:99:2b:eb:d7:e9:3e:ff:a4:af:fa:99:b9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Validity
Not Before: Nov 15 14:01:16 2026 GMT
Not After : Nov 16 14:01:16 2026 GMT
Subject: CN=bcafde60012259857cac7f9b6bb1c0c99b6cc885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:31:8c:7e:1e:9a:20:fe:39:d7:4d:de:af:
45:12:eb:2d:2e:17:30:c8:ea:38:ea:8b:a8:8e:c0:
f4:f4:64:d9:28:ce:69:b2:e9:ec:09:40:f3:d9:98:
2c:b0:e5:7d:fb:b7:3b:e5:aa:cb:f5:c1:b9:a9:8e:
ba:2d:42:3f:33:2f:51:a3:ad:a2:6e:5c:cb:c4:26:
d9:91:ca:25:05:a8:49:2c:21:74:81:35:89:c6:8c:
7b:1a:2a:75:8d:fd:64:c4:31:a7:2b:a4:e8:d2:7c:
6b:4a:1b:5e:b9:4e:30:e3:65:b2:0b:ff:a2:83:2a:
2c:61:ab:9f:1c:1d:63:57:11:70:34:09:0b:80:52:
72:c1:cc:c6:dc:9f:44:02:ed:5c:1b:84:ee:c7:4b:
42:54:01:bc:19:99:f7:45:c5:50:4c:86:fe:1d:dc:
50:17:d3:7e:c2:91:ae:58:12:7c:aa:d4:de:a9:ea:
af:fe:e8:c7:3d:2e:e9:0c:e6:ac:c8:8a:b2:ac:ff:
a2:4b:04:e2:ce:01:22:59:0a:2a:f2:ed:af:cb:1b:
db:2e:d9:cd:09:78:dd:d5:1b:4b:86:f3:8d:d9:c9:
71:97:85:47:c2:f1:f6:7d:0d:f4:b4:39:21:bb:48:
7b:56:81:29:41:db:25:0f:c2:35:53:86:cb:68:df:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:DE:60:01:22:59:85:7C:AC:7F:9B:6B:B1:C0:C9:9B:6C:C8:85
X509v3 Authority Key Identifier:
keyid:97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e5:0b:04:84:05:36:a0:5f:19:93:05:40:9d:5d:42:b7:de:
dc:20:76:dd:4b:8e:a0:3b:fe:86:34:20:4b:13:9c:dc:a0:ce:
0e:e1:d3:16:9f:5d:9f:45:a3:61:3b:a8:0f:1f:3e:19:90:1c:
14:0e:3b:03:97:12:09:f9:22:1c:13:d5:57:39:fd:1c:45:8c:
3d:6e:ab:01:36:18:2f:17:9c:f1:aa:ce:c5:a6:77:a7:ab:b9:
fd:cf:9d:a6:30:10:94:46:5f:93:0c:01:5c:00:78:a8:9a:97:
50:54:ce:0b:39:96:f5:f7:bf:60:67:e2:16:3f:83:6d:ff:27:
9d:61:18:d2:35:a3:3e:9e:f8:55:64:ec:c2:8f:88:52:35:7d:
5c:92:b8:61:b7:08:ce:27:6b:0c:0f:cf:4e:5e:0d:fc:a3:3f:
f4:ac:07:0a:24:92:42:58:24:25:06:7a:57:2d:93:67:3f:3a:
4c:85:d4:40:10:00:57:79:ca:16:38:07:c1:6a:4d:43:af:f4:
de:7b:ce:de:5c:98:d5:4e:0d:49:61:35:c6:c5:ce:dd:75:55:
15:75:5c:0b:4f:6a:34:23:f7:97:22:33:1d:a3:c6:b1:e7:f8:
30:74:df:1d:05:90:be:69:a6:82:09:25:a2:1b:48:33:8c:5f:
58:29:42:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:18:03 2026 by rpki-client