Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: po1Te00zEb8rFfp7FNlZQtqGu+jITSl6ffvAUlA7hW4=
Subject key identifier: FC:6B:26:9A:2A:A2:6E:37:1D:23:E8:2C:17:4B:93:D6:BB:2B:FE:ED
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 01A1DF1567AECB5007FB8088DB36529C7456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 0A9B
Signing time: Sun 15 Nov 2026 12:01:24 +0000
Manifest this update: Sun 15 Nov 2026 12:01:24 +0000
Manifest next update: Mon 16 Nov 2026 12:01:24 +0000
Files and hashes: 1: MOJaIJywd4otTZyKbZejB0v6ay4.roa (hash: rNI1pa9edpkFYBr17tGN9Tys1Z0tTlj1MmWq7ZO4iao=)
2: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: R0GFRfr6FB6Zgl8/2gFajvs4orCDG2vYdJLfu3vQr+E=)
3: mfXbQXByPJPp7zX33-P_nEyA7pw.asa (hash: vbrHO7MLkLBiT3RBDfJV+Hh6ozoURTvz1tPkV6hsSa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:67:ae:cb:50:07:fb:80:88:db:36:52:9c:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Nov 15 12:01:24 2026 GMT
Not After : Nov 16 12:01:24 2026 GMT
Subject: CN=fc6b269a2aa26e371d23e82c174b93d6bb2bfeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:10:ca:45:dd:39:5b:9a:95:81:eb:06:0c:
bc:26:be:2b:67:07:63:f6:54:8d:af:27:01:e0:9b:
a3:34:0a:1e:95:81:95:1a:5b:f8:16:81:1d:3e:38:
64:f2:c4:39:36:a6:83:ec:b7:62:d4:a3:20:f8:d1:
54:0b:d5:61:de:38:c6:d8:80:f6:b0:28:aa:00:67:
63:59:f4:ad:60:cb:ac:80:b0:1d:da:2b:f6:32:e9:
ca:90:96:88:78:30:a5:a2:b8:af:09:27:a0:fe:50:
34:1d:f2:10:87:e8:2c:04:15:57:2c:a3:dd:4d:2e:
a4:f5:c1:98:1e:14:f4:20:00:46:15:d2:c4:81:0c:
4b:33:26:71:e0:b9:d1:3d:64:64:83:e2:30:0d:69:
6f:e8:2e:b0:8f:cd:76:4d:3a:2a:31:84:69:69:cf:
37:bb:3c:85:0b:87:60:50:bb:f6:90:59:2d:b5:ec:
d3:f5:fe:d5:eb:d2:b8:b6:66:93:08:7f:b5:e9:fa:
f4:9b:07:5e:38:78:ce:00:c6:34:34:30:7c:10:d0:
d7:e9:18:87:3b:c4:b3:1a:34:fd:1b:80:42:6c:85:
c7:ce:86:07:f2:ba:aa:7c:a9:02:d8:d6:3c:e6:72:
44:9d:f9:71:0c:8e:3a:16:ec:c9:cd:3e:3c:80:c1:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6B:26:9A:2A:A2:6E:37:1D:23:E8:2C:17:4B:93:D6:BB:2B:FE:ED
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:f3:cd:ae:d2:ab:b1:ff:5e:e7:bf:fe:04:55:9d:d5:0a:
f9:80:cf:18:5b:02:c5:9e:c8:01:1b:c3:9d:ce:3b:39:70:17:
eb:32:f5:dc:7d:5f:55:47:76:e5:13:f5:92:a6:2d:90:ce:2a:
e8:6e:b6:fd:5a:db:01:5b:93:9d:be:10:da:2d:57:75:33:f1:
3a:e3:f5:97:d6:56:53:69:f6:b2:67:bc:7b:13:6f:c9:64:b0:
ea:72:ba:7e:48:23:01:f8:bf:83:67:42:eb:b2:be:03:33:5d:
13:dd:f2:3b:3e:0f:f6:2a:f8:da:ea:e6:28:9f:ae:e5:38:8c:
25:e9:50:c8:e3:e3:04:40:8e:e6:78:b5:a7:9a:09:5e:e2:6d:
3a:41:48:43:2a:f4:35:60:b3:8a:2f:52:bd:ad:6d:4d:a6:df:
e3:17:b3:39:c4:1b:be:b2:92:17:66:c9:66:a1:18:79:9c:fc:
b5:94:f7:21:c6:f7:a7:3c:46:3b:0b:9e:c2:cc:68:f0:4d:c4:
50:13:9e:11:9e:a5:87:a0:b6:6a:0d:72:0c:25:c5:8c:78:22:
5c:00:c4:7d:6f:0a:8a:10:01:e1:21:99:30:71:5b:cf:01:fd:
25:17:d4:27:83:e5:69:31:3b:fb:34:97:1e:60:22:e6:fa:da:
f1:e1:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:17 2026 by rpki-client