Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.mft
File: tLfWfrqEkGD9fw-dHbikOvJTC3M.mft (raw, json)
Hash identifier: 4e4YZZFUXAgUCK1M+LJGZOLeBGS7HnVg8Ds6N2w685I=
Subject key identifier: 30:11:DD:BB:42:95:F2:48:9D:46:38:47:18:C2:76:A4:4B:5A:77:18
Authority key identifier: B4:B7:D6:7E:BA:84:90:60:FD:7F:0F:9D:1D:B8:A4:3A:F2:53:0B:73
Certificate issuer: /CN=b4b7d67eba849060fd7f0f9d1db8a43af2530b73
Certificate serial: 01A1DBDD9A4844EB3A87674F65C4B7EA8C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.mft
Manifest number: 12
Signing time: Sat 14 Nov 2026 21:01:35 +0000
Manifest this update: Sat 14 Nov 2026 21:01:35 +0000
Manifest next update: Sun 15 Nov 2026 21:01:35 +0000
Files and hashes: 1: Tv7ZPw5_eiFXNAe6vilKrqDlHEE.roa (hash: 3t2oEpWoY32ZN9cu+lZB2U7F/vOJcj35YBGC3TSPoBY=)
2: tLfWfrqEkGD9fw-dHbikOvJTC3M.crl (hash: cRcs87LT8UUJ38gthBg5r98jFr3Tqpaqqytk1DSj7hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:9a:48:44:eb:3a:87:67:4f:65:c4:b7:ea:8c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b7d67eba849060fd7f0f9d1db8a43af2530b73
Validity
Not Before: Nov 14 21:01:35 2026 GMT
Not After : Nov 15 21:01:35 2026 GMT
Subject: CN=3011ddbb4295f2489d46384718c276a44b5a7718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:b9:ad:3a:76:bd:3b:ce:92:c2:ea:e0:77:
b0:5e:2e:73:eb:dd:11:c4:d9:bb:4b:92:3f:fb:ec:
0d:4e:b8:37:64:7e:51:19:d4:d0:8b:95:c0:56:c6:
b7:63:fa:90:dc:a7:a0:71:f6:a0:fd:62:c1:aa:d7:
b7:1a:ee:d3:de:e1:68:18:12:3e:64:61:a2:af:b8:
5a:90:bf:4f:1a:c9:fa:da:da:ec:b1:c9:84:40:69:
ec:f2:b0:de:c7:40:57:8b:2d:23:a8:82:ef:3c:e1:
1e:27:7a:ad:af:7f:99:cc:ce:58:90:c9:83:7c:a6:
ae:21:9f:d1:e7:6e:4a:90:6d:92:15:a4:5f:cf:11:
70:55:03:a2:62:56:db:08:d7:95:e4:06:03:7a:06:
20:59:11:02:9c:b7:d8:01:6b:6a:ba:e6:3b:89:02:
06:87:27:c1:6e:31:a8:78:2d:79:8b:a7:89:20:92:
85:ff:f3:53:08:35:da:2c:87:a4:89:b7:2d:93:31:
76:d8:b1:89:ea:8e:95:da:66:12:32:a9:6e:e5:ec:
5f:16:70:05:cb:5c:12:a4:85:6c:74:28:56:6a:6f:
12:39:48:7e:85:1c:e7:36:ff:d3:eb:88:17:d2:14:
54:0e:a2:75:5e:b4:a8:4e:6e:c4:40:97:fa:7b:11:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:DD:BB:42:95:F2:48:9D:46:38:47:18:C2:76:A4:4B:5A:77:18
X509v3 Authority Key Identifier:
keyid:B4:B7:D6:7E:BA:84:90:60:FD:7F:0F:9D:1D:B8:A4:3A:F2:53:0B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:e8:cf:8f:54:ea:63:79:9d:39:4d:03:34:e0:31:13:e5:
c0:fd:28:0c:50:f4:f0:7d:b5:dd:f7:62:75:8c:63:3d:bb:d1:
38:7f:c8:ec:31:be:09:4a:c3:ba:50:89:12:e6:ab:cc:15:53:
5a:e4:57:1b:57:7b:9d:87:15:8c:95:04:d9:b4:4b:a7:83:4f:
62:86:87:4d:48:f4:37:2c:bf:b9:16:f9:02:c8:7b:8b:0a:34:
d4:4e:96:9f:45:3a:cd:85:3f:ee:4e:7d:9c:0f:14:8f:16:22:
55:26:f6:b8:bf:f7:fe:46:33:ce:c3:2f:58:71:1e:a9:1d:f4:
ec:0c:2b:06:3e:50:3b:b8:15:d4:44:9d:ad:10:9c:3f:c2:df:
6d:66:54:92:17:9c:65:ea:14:3d:bd:b3:cf:58:8f:fa:e4:31:
1f:ab:3e:cd:93:4a:e0:28:2f:85:25:21:04:85:9a:02:4c:11:
9b:a9:de:93:5e:ad:33:26:32:e2:5d:e8:f0:aa:6f:c5:81:90:
cb:b0:24:8e:22:a7:50:f2:e2:5b:31:d2:0b:cd:5a:d7:bb:76:
a0:2a:ce:bf:66:cc:2b:73:f2:af:70:69:4a:87:c9:67:05:db:
28:e8:37:56:d4:50:8a:76:db:db:a4:1c:fb:9c:e2:ae:48:c5:
1f:ef:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:33 2026 by rpki-client