Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
File: tOLY-xGLsLYMB_1Vc439n8vB5qg.mft (raw, json)
Hash identifier: UUHDl0EF5l17C2E8UpOVS8VDwOLWxDYGuZECPH3DC/o=
Subject key identifier: 14:62:C5:6F:E1:60:A3:A3:F9:D0:19:9D:93:D9:3E:E4:9E:F3:57:83
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A1DBA6BA1610EF5D304CB833ADEEFACC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
Manifest number: 90
Signing time: Sat 14 Nov 2026 20:01:39 +0000
Manifest this update: Sat 14 Nov 2026 20:01:39 +0000
Manifest next update: Sun 15 Nov 2026 20:01:39 +0000
Files and hashes: 1: 3i2zVkw6aach0o_CXp_SFGOpLVA.roa (hash: Y97XAK1phbFipWlwjVjm6O/rcJme8j23ZjHd436Q+2E=)
2: _VigQvf0Dyf23xGtLwUHzrTkZtA.roa (hash: fIK7iGnc84nGrsjgl6rp4thRhx3d9ulBPkLIYk4JgEM=)
3: tOLY-xGLsLYMB_1Vc439n8vB5qg.crl (hash: bj3T+q/0frLf+ozpECc+1uCnOPtvAV9VHBF5W8EU0Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:ba:16:10:ef:5d:30:4c:b8:33:ad:ee:fa:cc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Nov 14 20:01:39 2026 GMT
Not After : Nov 15 20:01:39 2026 GMT
Subject: CN=1462c56fe160a3a3f9d0199d93d93ee49ef35783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:dd:04:f1:a8:60:89:b6:30:c4:4d:99:16:
6a:41:0e:e8:7e:97:80:05:c9:15:56:ed:97:31:26:
d5:9a:57:a8:f0:dd:08:74:64:ae:9c:3b:1d:86:42:
87:88:14:46:57:86:3a:5a:3d:dc:a1:9e:42:7b:2c:
24:72:a0:ad:84:bb:48:fc:64:d5:87:93:ec:da:0c:
e1:3c:48:76:d1:a9:1c:3a:15:15:e3:b5:ce:62:bc:
6e:5b:7d:0f:52:e9:67:6d:0f:38:8e:4c:33:17:c3:
58:33:60:84:24:40:04:93:a9:3e:e1:9b:e7:ab:a4:
58:c6:30:e4:79:0e:f4:2e:72:bd:59:76:a7:3b:0a:
ad:06:07:35:b4:cf:8c:a8:c8:16:c9:50:40:99:26:
c1:f3:f0:0c:8e:00:b5:d0:e4:a3:6e:9c:8e:ed:c5:
0c:f5:6b:6c:a6:2f:5a:47:ee:cd:2d:6d:b6:7c:37:
e8:cd:7f:b8:c3:0e:13:ed:cb:a9:86:02:cc:b5:93:
e4:28:ad:97:09:00:5d:ee:41:6a:48:d7:4d:fc:0c:
75:b6:10:db:05:95:43:cd:27:de:08:26:db:07:16:
95:8e:23:b2:c6:c0:8e:79:75:08:ac:ed:c7:fc:a5:
57:21:84:d8:ef:3d:c4:55:ee:dd:31:bf:64:67:8d:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:C5:6F:E1:60:A3:A3:F9:D0:19:9D:93:D9:3E:E4:9E:F3:57:83
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:77:9c:5e:24:a3:af:12:27:95:83:42:a0:bd:d7:a0:26:
83:1c:05:f9:72:08:9a:f6:8b:b3:86:6c:cc:44:b2:20:c0:8e:
cf:0a:44:7a:d9:2f:e3:9d:1d:79:f8:25:f5:fa:d6:cf:e7:4f:
b9:b8:51:22:49:f3:bf:1c:70:e5:4d:c4:86:d8:e1:a2:00:b9:
e9:fa:39:b8:78:74:84:6b:44:a4:e5:94:39:06:20:bf:71:b0:
db:74:6c:7c:eb:f1:4d:d8:7e:6f:dd:4f:e0:ff:42:4f:b9:bc:
84:19:5b:e9:c7:37:f7:de:f3:92:97:af:65:3d:53:09:a4:3c:
0a:d6:fa:5f:09:c3:0a:f8:1f:d0:85:b2:58:c1:9b:24:cf:e5:
cc:2a:07:c1:81:c7:5a:ca:2c:ca:bf:5b:fd:11:77:f8:fb:76:
11:56:2c:fe:e0:ea:24:61:9b:bf:d6:64:9a:cb:e7:ec:f6:e1:
10:47:ca:e3:38:cf:36:53:b2:3e:87:53:86:15:9f:ab:46:f2:
44:4d:04:ff:aa:9d:e8:ac:90:66:11:ba:48:7a:39:84:a1:11:
c8:45:41:2b:ec:a9:77:6e:5b:d5:c3:78:3b:10:e1:cc:02:09:
8f:a7:66:cf:1d:15:05:de:ac:0e:a0:61:d4:1f:5c:10:0c:e9:
a3:06:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:35:48 2026 by rpki-client