Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: khl3KYlw0ZV0jzUrYMAPhvprJPEpmEXVYKFloNOhRb4=
Subject key identifier: 13:C4:8B:E8:31:7F:57:58:D7:71:53:9A:B5:26:D6:B9:AE:6F:AA:CE
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 01A1AA4CC92DD4D48F931531815C5FAE13A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: 0156
Signing time: Thu 05 Nov 2026 06:02:01 +0000
Manifest this update: Thu 05 Nov 2026 06:02:01 +0000
Manifest next update: Fri 06 Nov 2026 06:02:01 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: 8R0kpmdRC877BfvMcVLj7QFJSNXeZLR4C+fhmHo1/LQ=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:c9:2d:d4:d4:8f:93:15:31:81:5c:5f:ae:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Nov 5 06:02:01 2026 GMT
Not After : Nov 6 06:02:01 2026 GMT
Subject: CN=13c48be8317f5758d771539ab526d6b9ae6faace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:e1:d1:f7:9f:f9:13:f4:e3:03:f3:fd:c1:
65:51:36:7a:e7:43:2f:01:bf:a1:3d:43:6e:08:e8:
2e:17:2a:cc:0b:9a:9f:0a:cb:06:6d:3c:8a:a3:4e:
4b:fd:9b:79:8f:e1:10:dc:df:b5:bc:3f:d2:e3:fd:
b1:08:a3:ec:0a:ff:d7:c1:46:6a:ae:7c:ac:d1:b3:
fe:c5:6c:33:ab:0a:40:7e:cd:64:05:10:b6:85:42:
4d:6a:41:79:dc:49:89:1a:f9:95:91:66:2e:3f:67:
c9:82:fa:9b:44:04:01:6c:73:c8:f7:a0:fa:49:91:
7c:a8:67:35:4f:45:bc:fe:0a:75:0a:2e:0b:11:a6:
3d:97:8f:5b:61:1c:e9:61:52:74:18:9e:07:7d:3a:
8f:55:68:2a:3e:7c:b7:56:bc:19:fe:5c:23:16:1d:
a7:1d:27:8e:cc:6b:7e:ac:71:9e:76:7c:5e:68:57:
5e:3e:d6:36:5b:d0:aa:98:e5:b7:7e:51:eb:de:c2:
6d:93:75:35:d1:d5:c9:91:57:7b:0c:0e:6a:02:ac:
19:62:82:34:3c:36:5a:53:06:49:f7:e1:6e:d2:61:
40:d6:1a:12:c2:49:7d:f8:e3:07:09:2f:b5:dd:9c:
4d:fb:ab:7b:7f:03:2c:cb:7f:7a:11:7a:26:92:d7:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:8B:E8:31:7F:57:58:D7:71:53:9A:B5:26:D6:B9:AE:6F:AA:CE
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:82:4b:d4:98:fa:07:28:8e:72:aa:8e:4d:0f:17:b2:f6:5e:
dc:f3:f8:44:1c:23:7c:d4:51:f5:c3:ac:e6:e6:3a:5f:b7:5c:
a6:50:ea:42:3c:c6:4f:05:46:4f:64:2e:2a:b0:27:28:1d:ad:
86:d2:05:45:ac:6d:a7:8a:11:6b:74:a0:96:f3:57:69:36:82:
03:d4:d2:bd:13:86:d1:44:d4:8b:4d:8b:3f:d2:89:fd:a7:e6:
13:5e:74:cb:c3:ce:88:5a:54:9c:76:ea:88:92:c1:dc:2e:4e:
98:c1:e5:55:7b:eb:0d:08:46:39:ab:87:1e:22:0f:93:e7:ff:
63:7a:af:95:e8:7e:ef:ea:d3:d6:69:c1:dd:1b:f6:f6:89:1f:
4a:fe:cc:0d:2b:a6:14:83:ec:da:ea:db:a4:79:21:5c:8c:ed:
98:bd:36:05:f2:6a:3d:72:9b:75:0a:e9:80:5c:ec:27:2e:a7:
22:71:a7:6d:2b:70:92:53:88:03:e8:55:f5:1c:3e:26:d4:6c:
1d:00:01:27:ce:01:33:45:02:eb:b6:77:de:4f:6a:b6:da:8b:
96:83:ec:29:5f:2d:08:00:ae:e0:4d:55:36:91:32:9e:ce:0e:
0d:fa:0e:9c:08:77:e3:7f:82:e9:10:77:ea:2a:cf:62:b0:f3:
6c:6a:25:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGqTMkt1NSPkxUxgVxfrhOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmIwZTRkMzI5MGJiZTkwNDcwNzNhZTZiZjdmNzFhMjkz
YWQyZmEwHhcNMjYxMTA1MDYwMjAxWhcNMjYxMTA2MDYwMjAxWjAzMTEwLwYDVQQD
EygxM2M0OGJlODMxN2Y1NzU4ZDc3MTUzOWFiNTI2ZDZiOWFlNmZhYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05rh0fef+RP04wPz/cFlUTZ650Mv
Ab+hPUNuCOguFyrMC5qfCssGbTyKo05L/Zt5j+EQ3N+1vD/S4/2xCKPsCv/XwUZq
rnys0bP+xWwzqwpAfs1kBRC2hUJNakF53EmJGvmVkWYuP2fJgvqbRAQBbHPI96D6
SZF8qGc1T0W8/gp1Ci4LEaY9l49bYRzpYVJ0GJ4HfTqPVWgqPny3VrwZ/lwjFh2n
HSeOzGt+rHGednxeaFdePtY2W9CqmOW3flHr3sJtk3U10dXJkVd7DA5qAqwZYoI0
PDZaUwZJ9+Fu0mFA1hoSwkl9+OMHCS+13ZxN+6t7fwMsy396EXomkteAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPEi+gxf1dY13FTmrUm1rmub6rOMB8GA1UdIwQY
MBaAFEUrDk0ykLvpBHBzrmv39xopOtL6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoJL1Jj6
ByiOcqqOTQ8XsvZe3PP4RBwjfNRR9cOs5uY6X7dcplDqQjzGTwVGT2QuKrAnKB2t
htIFRaxtp4oRa3SglvNXaTaCA9TSvROG0UTUi02LP9KJ/afmE150y8POiFpUnHbq
iJLB3C5OmMHlVXvrDQhGOauHHiIPk+f/Y3qvleh+7+rT1mnB3Rv29okfSv7MDSum
FIPs2urbpHkhXIztmL02BfJqPXKbdQrpgFzsJy6nInGnbStwklOIA+hV9Rw+JtRs
HQABJ84BM0UC67Z33k9qttqLloPsKV8tCACu4E1VNpEyns4ODfoOnAh343+C6RB3
6irPYrDzbGolew==
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:22:35 2026 by rpki-client