Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier: 1lyYyg5Qh5uNtmFysQVCb3VU3lbJvEQKg9Gz7PqZnu4=
Subject key identifier: 6C:2B:BA:DF:71:C9:8E:97:93:24:CA:4D:D8:7A:9F:38:72:9B:6D:18
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial: 01A1DD94C0E7021C44457C2A3CDF44A39638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number: 099A
Signing time: Sun 15 Nov 2026 05:01:15 +0000
Manifest this update: Sun 15 Nov 2026 05:01:15 +0000
Manifest next update: Mon 16 Nov 2026 05:01:15 +0000
Files and hashes: 1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: RbszQ+UodBJJQ05uktLIm0vi2RA/RbzqCs0kg4wyt1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:c0:e7:02:1c:44:45:7c:2a:3c:df:44:a3:96:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Validity
Not Before: Nov 15 05:01:15 2026 GMT
Not After : Nov 16 05:01:15 2026 GMT
Subject: CN=6c2bbadf71c98e979324ca4dd87a9f38729b6d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:57:21:29:98:54:1b:37:b1:a4:cc:e7:5b:
95:10:7f:ac:27:e3:da:6a:fc:a3:9e:60:96:f7:eb:
56:c4:4c:7c:9a:2a:16:1d:5a:0c:45:3e:8d:29:5b:
bc:21:8f:77:82:42:f7:17:fe:19:9c:52:89:78:db:
45:55:d8:48:99:d8:03:d8:95:40:ab:f7:9c:23:5e:
28:84:c4:d3:20:38:a9:e4:41:70:b3:62:03:e7:42:
cb:d1:1c:92:09:9d:da:38:c1:6d:f3:b6:56:ae:67:
a7:6c:48:a6:78:ae:55:a1:23:64:81:9e:3f:97:d9:
f2:9b:d0:e3:21:ba:68:c0:d7:77:11:6a:bd:73:a6:
18:50:53:48:be:36:fa:54:af:c8:e6:0c:04:36:ae:
41:96:ee:1d:8a:c5:d5:cb:7b:10:7b:b0:e0:0a:06:
8c:13:e2:b6:91:a2:21:42:46:fc:16:7d:b7:44:51:
de:46:1d:b3:65:74:56:e5:46:ee:23:8f:c1:22:62:
f0:a3:cf:d4:a2:99:ec:87:b7:34:9e:9d:89:86:ef:
35:1a:f6:c2:96:0e:ab:7b:45:1c:21:36:97:94:f9:
d2:94:e5:65:54:34:67:65:55:06:30:2c:b2:61:36:
17:20:d4:b6:eb:ee:19:36:ff:58:75:58:ec:ba:c6:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:BA:DF:71:C9:8E:97:93:24:CA:4D:D8:7A:9F:38:72:9B:6D:18
X509v3 Authority Key Identifier:
keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:e1:8f:1c:cc:c1:52:cb:e2:4d:dd:d4:41:b1:cf:21:ed:
17:16:9b:0c:c9:65:16:18:cf:83:d4:3a:c2:df:36:53:d1:e2:
03:af:bc:1f:42:04:aa:32:18:95:de:d2:b7:b6:21:37:63:33:
ea:59:4a:38:83:51:38:88:8c:f7:cd:c5:84:b8:80:e9:cc:6d:
f3:c0:ff:a7:10:6f:db:5d:9e:68:28:ca:e8:e5:15:d1:90:95:
e3:b3:77:ac:6c:88:d7:2e:98:45:09:17:56:94:59:13:13:9e:
34:12:ac:55:92:52:4b:46:18:ab:2c:5d:0b:7c:82:40:ad:fe:
58:12:5a:5c:c1:a9:cc:fa:1d:82:bf:9d:1e:e9:11:85:3c:f0:
95:cb:c2:bd:19:97:86:e4:99:96:dd:6e:0a:77:ff:19:8a:2a:
17:f6:e6:94:89:e8:66:11:e6:b1:19:a0:32:dc:6d:ba:73:6e:
64:8c:ad:26:fc:56:41:bd:65:34:a2:0b:e9:c8:ac:58:06:51:
91:c4:e2:2f:58:9a:5a:32:05:8a:d5:39:ff:76:71:a9:7e:09:
c3:94:f4:05:97:67:64:ca:ab:e7:40:b1:1c:e3:c9:74:2b:b8:
19:76:6b:91:61:21:f4:4b:f0:99:86:87:86:a2:9e:b6:0e:bd:
04:a1:73:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:58:54 2026 by rpki-client