Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: 11km9S4efv4X9j61Cv2Gbx3K9NkLEiHJyMzVAB0VgtY=
Subject key identifier: B0:54:7B:11:21:8C:35:EB:2E:B8:BC:45:C5:EC:0E:6C:A8:FB:F3:9F
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01A192E8551586F835517C171B6C51BE0E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1ACD
Signing time: Sat 31 Oct 2026 17:01:02 +0000
Manifest this update: Sat 31 Oct 2026 17:01:02 +0000
Manifest next update: Sun 01 Nov 2026 17:01:02 +0000
Files and hashes: 1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: oXcf4y+max8DQfD9cioSE/KuH4JZKYTrsL3RgHjxlcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:55:15:86:f8:35:51:7c:17:1b:6c:51:be:0e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Oct 31 17:01:02 2026 GMT
Not After : Nov 1 17:01:02 2026 GMT
Subject: CN=b0547b11218c35eb2eb8bc45c5ec0e6ca8fbf39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:4f:43:c6:cb:f1:a6:c0:4f:51:d2:3f:84:
50:70:97:74:68:c7:66:8b:09:fb:d2:e3:28:40:91:
8c:87:c6:b3:76:ec:f3:f9:f9:b7:6f:97:2c:1c:d9:
4d:e7:28:10:39:80:e0:32:e3:f6:0d:00:11:fa:9e:
f6:f9:bd:2d:af:09:1f:45:84:28:f4:24:d2:30:58:
86:0f:db:65:5d:b8:49:67:82:40:a9:45:c6:0c:ba:
53:e9:6d:d8:f6:46:18:4f:b5:d2:9f:5e:2b:de:44:
87:bc:0c:a0:64:f5:85:1b:20:c7:ba:55:0d:4e:12:
a8:73:c9:be:2f:00:bd:17:d8:6f:61:5d:7a:f7:fa:
a9:1f:1b:cb:a9:10:ba:42:0e:e2:7f:64:c3:b7:ae:
d2:90:43:12:6e:c8:24:0d:5a:4a:4e:81:5b:ff:9a:
1e:94:3f:d3:05:99:f7:99:a5:27:37:b9:9e:7a:8a:
61:59:be:08:35:fb:5b:b0:bf:fb:e7:0d:0c:3a:53:
37:9c:bd:8c:44:95:0a:41:24:5f:12:db:fa:11:e2:
b4:d2:f6:c9:b1:c5:b5:fd:ce:92:4a:44:6f:37:83:
1d:57:b6:02:d5:bd:60:87:d2:58:11:f6:54:7b:3c:
60:aa:db:3e:df:33:96:da:24:5a:3c:e6:b8:e6:1b:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:7B:11:21:8C:35:EB:2E:B8:BC:45:C5:EC:0E:6C:A8:FB:F3:9F
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:9f:6f:55:b1:84:d1:d6:18:13:ea:3c:3c:7c:fc:5f:2d:
96:16:25:a1:b9:84:d0:e4:98:f7:c5:64:ee:19:59:b1:16:54:
50:2e:f8:0d:20:0a:01:c4:ba:97:d7:e3:95:dc:28:1d:03:77:
53:37:c1:4d:8c:12:d3:7b:f7:9b:5a:85:a0:be:1c:87:dd:66:
12:bb:27:45:2f:d6:e8:84:ee:55:d7:32:60:20:47:9f:4e:49:
f9:3d:4a:7d:c5:a9:51:24:b4:e0:d2:59:42:c0:74:ee:b8:fb:
be:28:5c:ec:48:8f:43:6e:2a:40:e0:e3:02:3c:ff:3c:ea:b4:
ef:2e:b3:ea:56:2a:c8:17:32:62:76:52:ba:4e:b4:a2:7b:3e:
40:5d:c8:dc:77:5f:11:04:c6:01:a1:30:55:0a:19:89:14:54:
f7:a2:eb:d5:78:72:e8:2e:5a:34:9b:5f:73:d1:8a:bc:a4:c5:
7f:a8:97:27:54:55:6c:b7:8d:26:43:0c:8a:d6:5e:bf:61:41:
ba:a5:50:31:bf:9e:57:fe:ed:1f:ba:0c:21:e4:f8:66:6d:d5:
90:49:67:40:52:54:42:89:1c:86:46:ac:75:34:8e:a8:15:8c:
c0:d7:69:e3:6a:ee:ae:fa:12:b0:57:c3:3f:3e:dc:71:9b:56:
9d:b0:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:51:55 2026 by rpki-client