Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File:                     TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier:          Tc2ofk69QT88DX+U2oo4XcrPMz296S16R+3Jh2J5ha0=
Subject key identifier:   47:D1:01:EC:FC:B5:17:AC:21:B2:18:7E:FD:45:38:32:F3:B0:30:93
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer:       /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial:       01A1980ECCC965B4888E9781184719415B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number:          048E
Signing time:             Sun 01 Nov 2026 17:01:08 +0000
Manifest this update:     Sun 01 Nov 2026 17:01:08 +0000
Manifest next update:     Mon 02 Nov 2026 17:01:08 +0000
Files and hashes:         1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: 7rF8RU5pwStsli1Pq+/37CzMaCBS3VJXeADSlwIUQew=)
                          2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Nov 2026 13:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:98:0e:cc:c9:65:b4:88:8e:97:81:18:47:19:41:5b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
        Validity
            Not Before: Nov  1 17:01:08 2026 GMT
            Not After : Nov  2 17:01:08 2026 GMT
        Subject: CN=47d101ecfcb517ac21b2187efd453832f3b03093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:d3:96:e7:7a:6b:71:fc:75:92:a7:92:2b:
                    2f:5c:f3:fd:db:9a:b0:f5:13:c1:6c:ea:f3:61:0b:
                    6f:5f:47:23:0b:58:ae:b1:f3:06:5f:ba:7c:eb:4e:
                    25:29:1a:cf:f1:52:c4:d5:b8:66:a9:bb:df:db:55:
                    73:f4:26:9f:cb:cc:4f:b7:56:40:15:8e:2b:4f:6c:
                    a9:0e:27:93:8b:c4:1a:31:84:c4:cb:63:be:2e:07:
                    19:f5:27:19:3b:ac:19:5b:74:b3:64:cf:a7:55:b9:
                    e7:09:c3:29:40:c8:12:f9:3c:26:7c:b4:05:9c:f1:
                    b1:9d:4e:ca:d0:a5:53:dd:82:ec:dd:58:8b:36:1c:
                    10:0e:e3:c5:01:ad:8d:68:bd:f3:84:ff:39:03:48:
                    84:a7:8d:11:86:b7:54:95:55:c3:a4:df:8e:ce:0b:
                    31:b3:8d:39:88:d5:4f:5b:32:c8:82:6b:b6:36:3f:
                    6a:bf:b3:23:fc:3e:a8:30:90:7e:78:57:a5:69:1d:
                    df:a0:98:88:0e:63:c0:6b:bd:e2:65:4c:16:eb:48:
                    89:b6:7c:27:68:67:68:20:38:0d:94:dc:8a:8a:5a:
                    88:2d:c3:b1:e3:cb:ca:b0:8f:8c:69:9e:0b:d0:dd:
                    3f:79:f4:dd:a4:fe:18:ea:97:4e:b8:a4:bc:02:88:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:01:EC:FC:B5:17:AC:21:B2:18:7E:FD:45:38:32:F3:B0:30:93
            X509v3 Authority Key Identifier:
                keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:30:a9:0a:67:b1:1a:fe:19:7c:e2:ad:d0:1a:54:64:15:ff:
         a5:0a:ff:49:df:31:20:d4:67:78:7e:87:15:2e:fc:64:04:2a:
         33:c1:fb:73:e0:c1:a3:09:8b:c2:06:31:8e:a9:f2:c1:05:d1:
         f1:8d:c3:68:e7:cc:1b:04:51:71:02:f9:b8:af:e4:d7:34:c5:
         dd:c1:b9:f4:ba:c5:dc:56:b9:bf:24:40:bd:c0:0e:2c:48:7a:
         c6:bb:8a:86:2f:ee:55:5a:18:17:7c:86:b6:ef:42:77:a9:2b:
         eb:f3:25:bd:fe:7f:97:10:71:14:c7:04:18:f0:fd:d7:fb:3e:
         d8:a5:28:d6:2d:4d:65:db:39:ba:cf:ac:16:07:98:fa:40:85:
         32:53:f9:47:9a:28:43:39:f7:e5:ce:8c:58:40:d8:01:72:d3:
         a7:f6:6b:c7:2a:27:7f:de:02:e4:93:56:43:c1:c6:f7:11:3e:
         df:2b:08:a3:73:58:9d:98:e9:22:b3:e7:b9:14:4d:99:de:a5:
         76:cf:97:11:70:1e:fa:e5:48:aa:74:b8:c4:a7:91:cb:a5:41:
         c2:b6:49:f5:fc:7f:5e:47:8b:ce:5a:b4:a1:1d:5e:61:e6:7f:
         94:ba:1b:f5:10:4b:ce:f2:4e:c7:bd:59:0a:8e:ef:db:2f:75:
         7e:ab:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:53:55 2026 by rpki-client