Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
File: tOLY-xGLsLYMB_1Vc439n8vB5qg.mft (raw, json)
Hash identifier: Baa3yYFZtREnpvfN8Pnn9hz1Rb/8AhrAtz1tZXDS0ok=
Subject key identifier: 51:68:40:A6:11:EF:08:F7:25:8C:D5:B6:23:DD:3F:C0:2B:95:81:4A
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A0D8DF0AD351AD2862472C605BE966939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
Manifest number: 0A
Signing time: Fri 25 Sep 2026 14:01:30 +0000
Manifest this update: Fri 25 Sep 2026 14:01:30 +0000
Manifest next update: Sat 26 Sep 2026 14:01:30 +0000
Files and hashes: 1: 3i2zVkw6aach0o_CXp_SFGOpLVA.roa (hash: Y97XAK1phbFipWlwjVjm6O/rcJme8j23ZjHd436Q+2E=)
2: _VigQvf0Dyf23xGtLwUHzrTkZtA.roa (hash: fIK7iGnc84nGrsjgl6rp4thRhx3d9ulBPkLIYk4JgEM=)
3: tOLY-xGLsLYMB_1Vc439n8vB5qg.crl (hash: TpD+s7oaEny8lJlPgr+IdsoYoZyz8yLDUvRSXjITgZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:0a:d3:51:ad:28:62:47:2c:60:5b:e9:66:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Sep 25 14:01:30 2026 GMT
Not After : Sep 26 14:01:30 2026 GMT
Subject: CN=516840a611ef08f7258cd5b623dd3fc02b95814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:c3:57:6e:2a:df:2e:30:31:64:0c:26:a1:
61:a7:ce:ec:7d:b5:9b:85:b2:65:50:7d:88:ec:c0:
46:06:d6:a0:44:5f:21:70:37:d6:26:23:ac:5d:a2:
34:98:fb:31:05:94:8a:aa:04:0f:67:58:64:23:3e:
a7:c0:75:39:99:a7:7a:91:e0:c2:5f:20:69:ed:7a:
40:ab:07:55:9d:41:80:6e:dd:87:c8:b0:8a:96:40:
08:96:4d:26:b5:10:da:4f:a7:bc:2e:22:60:46:57:
43:ba:a0:c9:d8:28:d0:dc:13:68:48:38:af:6c:9c:
29:5f:68:76:af:9c:fd:62:fc:fa:e1:c4:09:2f:69:
a8:18:41:8b:5d:f3:06:ba:6b:28:e9:6c:cb:38:00:
af:11:1b:77:af:bb:66:e3:91:f0:58:a9:1c:86:27:
96:a3:71:87:aa:b7:77:ed:af:fb:ae:8f:d2:18:e2:
fb:28:23:ce:5d:31:c4:7a:eb:f3:0d:ee:57:e7:ec:
4b:f4:20:46:b3:91:e5:95:7c:1b:ac:3d:37:16:8f:
6e:7e:21:df:c6:0c:be:6a:23:a2:de:f1:c6:4f:41:
c8:af:f8:50:c0:0c:41:bc:6b:8c:10:3f:3d:41:10:
3c:db:81:22:55:21:0d:0b:99:dd:bd:e2:0f:3a:83:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:40:A6:11:EF:08:F7:25:8C:D5:B6:23:DD:3F:C0:2B:95:81:4A
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f7:5f:ca:f6:ab:dd:ed:68:28:dc:ef:30:56:56:38:e3:4c:
f2:01:6b:c4:1f:4b:d5:28:ed:51:d9:a8:38:57:c1:9c:ab:7f:
e5:5f:0f:56:83:66:2f:e6:65:e4:1c:4d:36:14:c5:59:29:6c:
9f:54:21:48:40:e6:d9:9a:3c:f8:ce:a8:db:e6:2a:5b:a5:4e:
bb:34:39:ad:b1:74:13:52:19:c0:60:6f:0d:ac:87:fa:20:6c:
55:35:99:6a:3e:67:d2:ca:ec:0d:97:99:a3:79:11:5d:5e:a7:
30:c4:bb:8c:bc:64:d8:fe:39:2d:39:26:b1:f7:06:c4:4a:b9:
19:94:2a:79:b2:15:cc:88:2e:6d:9a:0e:3c:6c:9b:b5:d8:7b:
60:a3:f5:f3:31:36:34:7b:74:5c:d1:fa:24:72:5d:ca:85:70:
5e:e3:a9:21:09:08:41:57:f0:93:c7:6b:b0:dc:ff:16:1d:87:
e4:7e:ba:2b:e3:72:da:de:2c:9b:df:c7:92:9b:8f:c2:54:2b:
15:ec:a4:20:92:a9:14:28:b5:ef:34:1b:59:ac:14:17:eb:c5:
de:fc:06:13:b6:8d:04:c7:27:30:27:72:cc:0a:64:28:b8:83:
49:1e:ae:17:35:e5:60:51:52:37:f9:4a:31:d8:fd:ae:d2:02:
0a:26:26:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3wrTUa0oYkcsYFvpZpOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTJkOGZiMTE4YmIwYjYwYzA3ZmQ1NTczOGRmZDlmY2Jj
MWU2YTgwHhcNMjYwOTI1MTQwMTMwWhcNMjYwOTI2MTQwMTMwWjAzMTEwLwYDVQQD
Eyg1MTY4NDBhNjExZWYwOGY3MjU4Y2Q1YjYyM2RkM2ZjMDJiOTU4MTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprDV24q3y4wMWQMJqFhp87sfbWb
hbJlUH2I7MBGBtagRF8hcDfWJiOsXaI0mPsxBZSKqgQPZ1hkIz6nwHU5mad6keDC
XyBp7XpAqwdVnUGAbt2HyLCKlkAIlk0mtRDaT6e8LiJgRldDuqDJ2CjQ3BNoSDiv
bJwpX2h2r5z9Yvz64cQJL2moGEGLXfMGumso6WzLOACvERt3r7tm45HwWKkchieW
o3GHqrd37a/7ro/SGOL7KCPOXTHEeuvzDe5X5+xL9CBGs5HllXwbrD03Fo9ufiHf
xgy+aiOi3vHGT0HIr/hQwAxBvGuMED89QRA824EiVSENC5ndveIPOoOb+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFoQKYR7wj3JYzVtiPdP8ArlYFKMB8GA1UdIwQY
MBaAFLTi2PsRi7C2DAf9VXON/Z/LweaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9MWS14R0xzTFlNQl8xVmM0MzluOHZCNXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMDA0MGYtYzlmZC00ZDVjLTkzNWUt
ZWJkNjk5N2U0MWM3LzEvdE9MWS14R0xzTFlNQl8xVmM0MzluOHZCNXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iMDA0MGYtYzlmZC00ZDVjLTkzNWUtZWJkNjk5N2U0MWM3
LzEvdE9MWS14R0xzTFlNQl8xVmM0MzluOHZCNXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPdfyvar
3e1oKNzvMFZWOONM8gFrxB9L1SjtUdmoOFfBnKt/5V8PVoNmL+Zl5BxNNhTFWSls
n1QhSEDm2Zo8+M6o2+YqW6VOuzQ5rbF0E1IZwGBvDayH+iBsVTWZaj5n0srsDZeZ
o3kRXV6nMMS7jLxk2P45LTkmsfcGxEq5GZQqebIVzIgubZoOPGybtdh7YKP18zE2
NHt0XNH6JHJdyoVwXuOpIQkIQVfwk8drsNz/Fh2H5H66K+Ny2t4sm9/HkpuPwlQr
FeykIJKpFCi17zQbWawUF+vF3vwGE7aNBMcnMCdyzApkKLiDSR6uFzXlYFFSN/lK
Mdj9rtICCiYmEg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:15:01 2026 by rpki-client