Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: 2JUSYs/CR73apIv6yGFD+UYxeP8G8uYbifDmwWEmsF8=
Subject key identifier: AD:ED:7D:99:65:55:92:72:75:7D:D5:48:09:48:95:54:12:27:49:E7
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 01A1A6DD012CF1287B422A6C5331B5803D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 1ADB
Signing time: Wed 04 Nov 2026 14:01:03 +0000
Manifest this update: Wed 04 Nov 2026 14:01:03 +0000
Manifest next update: Thu 05 Nov 2026 14:01:03 +0000
Files and hashes: 1: PZ4pye6_7166g23AECIvJy9Vhao.roa (hash: 4jYAbauCnevFtoSRsUY9ZzLogbgVs0jCgKmDbNXpnd8=)
2: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: /VhAKV5yXhuJ/ZLiz8ikVmWkItj21s3NIcCofkBBaXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:dd:01:2c:f1:28:7b:42:2a:6c:53:31:b5:80:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Nov 4 14:01:03 2026 GMT
Not After : Nov 5 14:01:03 2026 GMT
Subject: CN=aded7d9965559272757dd54809489554122749e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:da:20:c0:ea:1d:5e:a9:8b:e5:68:64:f0:
5f:6c:ce:38:96:41:de:6a:11:ee:dd:54:e9:a0:d6:
ea:cd:73:ca:19:e6:4e:33:ee:1a:cf:6a:ff:c6:fc:
33:2e:70:4e:08:5e:cd:f2:44:93:e7:85:8b:80:0f:
79:7b:8c:7a:25:62:10:86:f9:df:37:eb:55:67:e6:
12:06:68:15:84:09:40:79:5a:d5:c7:37:3c:c4:fa:
57:b1:67:42:1b:71:eb:fb:29:88:fb:36:89:3a:20:
bc:be:a0:72:bc:0d:a4:9c:25:36:11:5f:3c:39:5c:
bf:51:11:69:d8:c0:0a:12:b7:5c:c4:52:44:19:21:
00:89:1f:72:8a:e7:28:9c:32:35:98:50:6b:4d:1b:
db:76:88:d7:17:fc:81:09:f2:1a:d5:5e:98:db:31:
87:12:05:06:e5:d2:f1:5a:8a:f8:46:57:22:52:18:
af:78:bd:c8:2c:47:07:08:cb:6c:e2:bc:7e:31:99:
1c:99:d4:cf:15:0a:f9:4a:fb:90:2e:97:b5:4d:18:
0d:cc:ee:51:e3:a6:d8:82:8b:8a:96:a6:a3:98:fc:
76:f3:e5:a4:55:79:de:ae:ac:47:c4:6e:f0:4b:ac:
0f:08:c2:8a:0f:e8:30:a9:5d:15:bf:e5:51:df:04:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:7D:99:65:55:92:72:75:7D:D5:48:09:48:95:54:12:27:49:E7
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:58:ef:f0:0d:8a:0f:95:cf:76:0b:0b:f4:44:82:c6:dd:30:
a6:a5:21:e1:a6:85:9e:7c:f5:10:cc:63:a7:28:db:73:d4:d1:
86:93:fc:ad:87:a2:40:7e:93:86:d2:0b:55:ae:b3:02:96:63:
d9:22:a0:db:22:d2:f6:ec:82:74:e7:44:ad:9b:89:83:32:64:
29:0c:b9:db:62:6f:f7:4b:f8:d3:71:d7:84:81:3e:0c:01:14:
eb:12:fc:8a:6f:c4:14:79:0b:0e:ab:3e:a3:0b:5a:4c:fe:bc:
ea:4f:ab:c1:93:ae:8a:c1:db:b3:86:12:5f:9f:fe:5d:60:20:
89:45:e7:e7:00:1d:b6:33:7b:64:58:d8:22:d5:c1:a0:96:e5:
df:8f:29:f1:ca:d9:f4:ad:9a:f1:ac:13:a3:3b:d2:e6:d3:a4:
d1:c6:56:3a:79:17:c1:98:0f:73:41:fa:95:5a:71:7a:71:3d:
01:b9:20:2a:65:e8:9a:ef:f5:98:f7:32:3b:e5:a0:b6:cb:28:
ff:51:67:bb:e9:6c:10:82:7d:6f:ff:ed:2c:53:5d:f4:13:c2:
2f:5d:63:00:3d:d7:bb:e9:3c:25:30:63:5f:6b:50:dc:1d:13:
99:54:39:58:3b:ca:bd:f3:21:79:4a:6b:0b:de:80:bc:a0:40:
90:d8:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:40 2026 by rpki-client