Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: ykz2KMYsANL43e0LrlqVwzrsL0IXmoLV8rE3f8/dCyg=
Subject key identifier: 38:D8:EA:02:0C:7A:4C:90:86:34:BA:C2:C2:12:E0:1C:3E:D6:8E:38
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01A1A7B95A2157DEBB620DE549357388B9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1A77
Signing time: Wed 04 Nov 2026 18:01:44 +0000
Manifest this update: Wed 04 Nov 2026 18:01:44 +0000
Manifest next update: Thu 05 Nov 2026 18:01:44 +0000
Files and hashes: 1: B1l-QLQBcABJMrGVkt4RsAVkA_E.roa (hash: VNAg7hkGxvRcIjC9KCBHAMc51fLJ79nQH+8byuV6Oes=)
2: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: yVW8ca0sliWHi9FcYLxV1RaL0AGBzZmZzi915sOzYpk=)
3: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b9:5a:21:57:de:bb:62:0d:e5:49:35:73:88:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Nov 4 18:01:44 2026 GMT
Not After : Nov 5 18:01:44 2026 GMT
Subject: CN=38d8ea020c7a4c908634bac2c212e01c3ed68e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:2a:6e:9b:78:32:79:8d:63:41:c6:29:92:
a1:d3:2c:9a:42:37:44:e3:8d:b1:c7:03:fd:8a:2d:
2f:bc:02:26:ac:97:0e:aa:c4:df:e6:b2:be:61:9e:
e0:df:6e:68:49:2f:be:26:48:da:cd:4a:64:ef:8e:
68:2f:88:39:73:7f:bf:74:12:06:b4:55:e6:12:26:
77:63:14:cb:1b:14:97:c1:d1:b4:ff:02:64:25:a0:
ea:74:92:9e:b6:7c:c3:c0:5a:68:11:20:f7:60:95:
46:c3:dc:cc:6d:f1:44:51:76:70:6e:e7:f3:c9:ab:
bd:95:a6:b1:8d:e5:aa:d7:06:b8:ed:2c:a4:d0:fa:
5d:80:3f:8e:0a:8f:59:4a:ee:38:cf:19:6b:01:fd:
63:49:4f:bf:7a:64:a0:59:e2:74:5a:eb:4f:d1:62:
82:d1:0d:5b:d6:d4:56:81:17:9f:75:72:5e:39:93:
48:ee:fd:63:d0:e7:94:a4:b9:0e:8d:b4:e3:34:38:
ff:d6:1e:2b:57:e7:66:58:89:e6:49:32:91:6f:9d:
48:42:f6:61:fd:20:fc:a1:95:fe:90:2c:2a:4b:86:
e0:58:ec:49:54:88:5f:83:e4:d9:ce:7d:7a:99:4b:
df:74:97:c1:7c:bd:77:37:4d:e0:6e:bd:6e:32:39:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:EA:02:0C:7A:4C:90:86:34:BA:C2:C2:12:E0:1C:3E:D6:8E:38
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:42:33:8d:c6:69:42:b2:1d:81:1b:17:ff:17:37:1d:b1:28:
bd:10:3e:68:28:17:b6:83:be:b7:64:fa:6b:6f:8e:05:4c:5b:
95:1a:f1:17:b7:3a:be:e4:d7:43:50:cc:3d:81:9a:94:b4:5a:
c0:76:c3:88:53:dd:7f:ab:fc:23:6e:8a:ee:9f:06:03:48:20:
cf:29:66:ec:d2:ea:8f:de:81:d0:ee:2b:71:58:66:68:cc:dd:
d6:03:e8:28:d3:31:99:8f:3c:19:b1:cd:69:19:95:29:1f:f2:
6c:91:3d:c9:83:3a:4c:95:f2:0e:2f:eb:8c:bc:41:d2:db:93:
27:1f:94:a7:ea:0f:b7:f0:3d:eb:9b:79:13:ca:9b:5b:08:3a:
e8:32:29:94:eb:4d:e6:00:84:5f:fa:0a:28:15:9c:ff:cd:b6:
92:c7:c0:07:57:fd:79:6a:1d:92:77:4e:42:31:89:5c:17:3f:
3d:b5:71:3d:cd:d7:75:65:47:f6:4c:a5:75:b1:00:c2:df:3e:
df:f8:3e:6f:a4:d9:85:32:3a:83:da:4b:d0:69:1d:70:86:89:
f6:b2:a6:01:f1:8c:1c:c8:41:81:1f:94:44:c0:67:12:c5:c1:
4d:25:62:89:b5:9a:c3:95:8a:9a:6c:93:61:93:de:3a:96:4b:
b2:27:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:41 2026 by rpki-client