Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: jD8alVnQ/hF6MmWGysDip2fycwEm91jNh5y6NYhz3GU=
Subject key identifier: 65:AB:7B:3D:00:DA:BD:C2:A9:2E:35:D2:5F:75:08:8F:64:24:77:34
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01A1DCB972F430EDF408F7F5C43A6103E3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1B5A
Signing time: Sun 15 Nov 2026 01:01:43 +0000
Manifest this update: Sun 15 Nov 2026 01:01:43 +0000
Manifest next update: Mon 16 Nov 2026 01:01:43 +0000
Files and hashes: 1: 9AoPna12lahtD75WgvGduoe90qk.roa (hash: Ep7i6ygpts+L659jV+Sc+Lu8tjOKxBE22D3jJ9/FNu4=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: I1aBY2+DKEbUTZaSQK4VSvKdsCEBbvpkL9dl4h5Tv/s=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:72:f4:30:ed:f4:08:f7:f5:c4:3a:61:03:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Nov 15 01:01:43 2026 GMT
Not After : Nov 16 01:01:43 2026 GMT
Subject: CN=65ab7b3d00dabdc2a92e35d25f75088f64247734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:63:12:ac:5b:51:eb:c7:3e:aa:64:0c:56:
97:dc:67:98:c7:d2:80:07:00:1a:7d:f6:1e:59:8c:
db:46:0a:b0:f8:73:00:28:fe:bb:bd:94:2d:df:b8:
f3:35:d1:ec:95:69:c3:48:0c:79:db:37:c6:af:40:
95:ba:fa:2a:f5:99:77:da:4b:5b:9d:cb:36:7e:93:
9b:75:85:26:4e:e4:f7:91:ee:13:1c:72:01:6a:d9:
7b:78:b8:b8:b8:5f:38:75:40:44:c6:5b:e2:f9:85:
60:7f:68:6e:60:44:97:54:c8:51:c1:9d:e2:ab:0d:
ba:71:b0:73:82:a7:88:d9:a0:e5:f0:6a:4d:2c:62:
a6:8b:ee:eb:f2:5b:69:62:6b:2b:38:57:99:d2:06:
17:7a:fe:1e:f8:a6:4a:02:10:b8:f1:b2:5c:00:ee:
96:eb:c0:2c:8a:f8:d8:4a:26:2f:7d:1c:99:c9:b9:
bf:f3:84:b2:a5:22:93:5c:90:f4:5a:36:c8:e8:b1:
93:b6:68:4d:8a:77:bb:8d:3b:5c:c6:12:b1:db:02:
dc:84:df:5b:01:be:7b:ac:68:49:27:44:88:e9:85:
6e:55:aa:aa:46:bc:2f:66:eb:fe:93:2f:c0:be:34:
91:06:02:92:15:be:9f:b7:f5:4c:2f:f5:bb:21:4e:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:7B:3D:00:DA:BD:C2:A9:2E:35:D2:5F:75:08:8F:64:24:77:34
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:49:2f:95:42:bd:16:3b:34:79:75:9d:fc:f1:f9:0c:6d:
2d:9f:51:ba:de:72:dc:39:65:0c:7a:89:4d:f6:2a:cb:17:1c:
20:50:02:56:75:d3:9e:d9:29:1a:1d:7d:6b:56:da:8b:1a:90:
00:27:a4:47:10:8e:8d:68:5d:d5:53:42:d4:0e:f8:f6:39:94:
cf:eb:93:86:40:a3:38:a7:1e:87:2a:0f:8d:f9:b1:dd:28:74:
d7:ae:78:b9:9f:90:7b:59:92:62:1a:47:99:29:80:67:af:b7:
4f:d1:30:a0:df:74:c0:24:b0:ae:ba:c2:d4:6e:04:73:f0:6e:
a1:7e:1f:fb:4d:49:05:4c:94:d7:aa:a2:0c:d7:d1:69:e5:5e:
91:96:68:68:ad:aa:64:64:66:2e:16:de:ad:88:4e:69:fc:f7:
c8:d0:a2:33:bd:b0:78:5a:51:b0:37:78:03:98:a7:e5:04:52:
a7:c8:97:80:54:97:14:bd:77:26:0c:cb:a6:73:3f:ef:16:e7:
c5:87:30:f3:7a:50:8c:40:9c:c2:16:5b:bc:8e:04:d7:ee:0a:
8d:96:3e:de:50:37:4b:ae:62:13:8f:e6:a7:03:64:e4:a6:de:
f4:72:84:91:df:ce:16:11:e5:22:6d:61:13:22:68:8c:9c:4b:
6b:41:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:36:19 2026 by rpki-client