Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: CiinZE8sstCiaHMwtOUyGJCIByycuinvji1VqS+UpTM=
Subject key identifier: A8:0E:CA:5F:7C:F7:EB:97:3F:90:21:DA:59:A5:19:BD:81:40:3A:A1
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 01A1DF8343EFBD40C7084460AD3A82050F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 14:01:24 +0000
Manifest this update: Sun 15 Nov 2026 14:01:24 +0000
Manifest next update: Mon 16 Nov 2026 14:01:24 +0000
Files and hashes: 1: J-_lvkY-gbWWkONoRhqgK0EK2D8.asa (hash: 4LqCnff8vAi0kItPEvZBIVvYZbsEZWY7hH0bV/Ok5mo=)
2: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: 9b4qyA7fyq8pX0VWhovBP22KMETf4YaFiS85wGouY84=)
3: x89rzjrs6Nt2XEc3vV8pZLa4I9c.roa (hash: ye+jK9rOukJBboMMHLahiU263X6F4SzisjCcXlAZk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:43:ef:bd:40:c7:08:44:60:ad:3a:82:05:0f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Nov 15 14:01:24 2026 GMT
Not After : Nov 16 14:01:24 2026 GMT
Subject: CN=a80eca5f7cf7eb973f9021da59a519bd81403aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:1f:c3:38:6d:65:08:d6:5e:c6:e2:f5:38:
1c:e2:66:b9:3c:01:0b:2d:49:f3:84:d6:e7:3a:74:
a7:85:97:a3:3f:24:fe:57:c2:45:9e:d8:7f:52:80:
5d:c9:e5:50:94:c9:9f:2f:3a:ab:8d:ca:12:02:7a:
3a:74:e7:58:bd:d2:ce:ef:d7:f7:39:fd:6e:69:1b:
25:f9:82:83:fe:fe:0f:08:10:f4:e2:aa:fd:8a:27:
c1:3c:28:d5:af:58:e7:18:23:6c:7d:a5:e0:0f:dd:
fe:f9:1f:66:94:e6:05:32:0c:83:93:d9:5e:5d:d7:
aa:f8:52:91:95:00:06:4a:3d:1c:60:d0:a9:2d:dd:
99:b9:a8:bb:f7:a3:1b:49:9e:04:c7:16:51:b7:0a:
29:10:69:8f:68:c6:fb:e1:ed:7e:a6:7d:0f:4a:04:
e1:cd:10:a6:37:79:b6:bf:6a:7d:8b:b7:0d:5a:de:
c8:ab:8f:cf:27:0e:02:7e:5e:c9:44:b8:d9:60:0f:
0f:5b:c3:ae:bf:61:80:a7:ed:61:e3:08:5c:6e:a8:
1f:9f:ec:c1:84:b5:81:3d:23:e2:19:bd:37:51:70:
f2:f3:02:b3:ba:79:14:4d:72:21:6c:08:65:b6:a1:
ed:06:9d:6e:64:ce:3c:a2:01:22:c4:3c:a5:0a:15:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:CA:5F:7C:F7:EB:97:3F:90:21:DA:59:A5:19:BD:81:40:3A:A1
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:2b:b0:63:bc:a1:3c:75:7b:0d:4a:b8:9e:24:a0:ba:1e:73:
8c:78:0d:32:a6:9e:27:14:30:0c:5e:6b:49:f1:7c:12:0e:ec:
71:ab:2d:d7:9d:92:4c:62:40:33:f2:d6:5a:ee:02:34:ce:cc:
15:d3:75:94:57:b4:4b:e4:a9:49:c8:0c:45:11:01:a1:02:1b:
b7:fe:7a:e0:68:d4:1b:fd:6f:01:32:8e:cc:d8:d5:08:32:3d:
2c:7e:63:e8:c5:a8:88:af:2b:64:99:47:90:6f:62:41:5e:ef:
ac:98:0c:43:05:69:9f:26:e5:fd:b4:d3:2c:f8:37:1d:7b:33:
70:02:3b:38:c6:5c:61:d6:9b:f8:19:32:8c:63:15:c3:f5:67:
93:04:cd:15:f4:ea:85:30:21:82:14:13:86:7a:6c:53:8c:b1:
f1:ac:1e:da:3d:b0:1a:fa:1d:5b:e7:13:90:c2:e0:9f:c0:15:
e3:6b:f8:74:f3:b0:6d:84:33:dc:65:21:4b:4c:d5:45:59:b7:
b2:08:b8:3d:c1:4a:ff:ce:45:f6:83:82:ab:00:7b:97:5d:e5:
76:a0:cb:5b:2b:3f:bf:2e:35:32:bc:56:54:58:8a:7f:cc:60:
3f:d6:21:02:5e:64:f6:b4:5c:6a:31:45:0f:89:de:11:2b:0d:
fd:38:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:19 2026 by rpki-client