Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
File: tOLY-xGLsLYMB_1Vc439n8vB5qg.mft (raw, json)
Hash identifier: Q2XcwDNbBVrh4tTyWH+MTgIPjC871/XNsjIRL0SCiUY=
Subject key identifier: 7D:B4:70:D6:87:1A:43:08:CE:DB:AD:71:3B:CB:B5:6D:84:E0:66:43
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A146F239BAE1DF62CD856A7C85C9028273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
Manifest number: 43
Signing time: Fri 16 Oct 2026 23:00:41 +0000
Manifest this update: Fri 16 Oct 2026 23:00:41 +0000
Manifest next update: Sat 17 Oct 2026 23:00:41 +0000
Files and hashes: 1: 3i2zVkw6aach0o_CXp_SFGOpLVA.roa (hash: Y97XAK1phbFipWlwjVjm6O/rcJme8j23ZjHd436Q+2E=)
2: _VigQvf0Dyf23xGtLwUHzrTkZtA.roa (hash: fIK7iGnc84nGrsjgl6rp4thRhx3d9ulBPkLIYk4JgEM=)
3: tOLY-xGLsLYMB_1Vc439n8vB5qg.crl (hash: ylbWfstCILLq/ptfQboodhBQOsCuiiOwB/+D/r40sFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:39:ba:e1:df:62:cd:85:6a:7c:85:c9:02:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Oct 16 23:00:41 2026 GMT
Not After : Oct 17 23:00:41 2026 GMT
Subject: CN=7db470d6871a4308cedbad713bcbb56d84e06643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:2a:36:5c:92:da:ae:d5:ff:6a:59:74:e9:
28:ad:f8:52:01:cf:14:54:08:a3:fb:f0:16:f8:e3:
ea:0a:17:11:a7:0b:4d:54:b3:42:d6:e3:d6:fd:02:
a4:d3:10:fb:68:35:21:a3:25:b5:df:86:f3:f2:4e:
9e:60:4a:bf:18:db:a4:18:dd:7a:92:87:f7:b8:f8:
3d:5e:ec:64:58:48:e7:6b:02:88:df:6c:61:83:49:
24:4c:9a:40:ea:56:f2:aa:37:1d:b4:2e:9e:6c:59:
ab:cd:9a:31:d1:ee:f2:21:d7:99:b0:49:37:92:be:
24:ad:90:fe:0d:5d:b5:bd:4f:6d:b8:a4:a3:bf:83:
b8:9e:0e:3c:a1:a3:99:dd:57:b0:4f:53:36:58:ba:
7e:56:92:fd:c0:3e:ca:d0:8b:65:5b:2a:c2:0c:cb:
d2:17:f8:33:e5:2d:45:38:31:7e:29:0a:4f:f4:ff:
fe:21:9c:f6:30:2c:01:58:9a:73:84:d4:9c:ce:72:
db:8d:4a:be:65:d5:64:0f:95:e1:43:69:2a:b4:90:
54:88:4a:35:a3:2c:58:a2:d4:8c:4d:1e:c3:9e:5b:
f2:36:7b:96:6e:b5:6c:4d:35:8d:b6:9c:f8:c4:28:
8b:e8:41:e2:db:66:13:38:62:56:e1:a7:53:46:67:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:70:D6:87:1A:43:08:CE:DB:AD:71:3B:CB:B5:6D:84:E0:66:43
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:3a:d2:21:5a:cd:5e:ea:4b:ea:03:43:bb:2b:72:75:eb:
4e:01:36:c7:d0:7b:fd:9c:5a:33:3f:90:e3:e3:b4:1d:fe:e8:
bd:e7:3a:49:92:6c:5a:eb:b4:62:b1:ba:87:1f:a3:08:17:85:
81:95:ad:a4:79:ad:a8:2c:9c:b8:04:e5:78:a5:39:32:77:cc:
d6:04:74:9f:67:47:8a:1a:a1:98:e3:95:33:55:99:ec:29:75:
ec:5d:43:c1:ac:56:c2:f2:a5:1b:24:65:2c:bb:63:c0:3d:dd:
a2:72:7c:ab:30:53:41:fd:fb:c8:b1:60:a1:a7:5a:7e:da:e4:
f7:4e:24:79:46:57:09:88:0b:32:ff:35:35:8e:c2:b6:91:48:
a0:1f:bb:4a:d5:a3:35:03:ec:a1:db:f6:e2:60:7e:01:ad:df:
4b:e8:1e:2f:77:68:c7:de:3a:f6:f1:84:71:9f:02:a7:78:27:
b5:e9:79:44:3e:98:40:13:d0:d0:db:a6:e9:c6:d6:19:21:a5:
0e:5a:bd:e3:58:b0:a2:9b:4a:97:f6:93:31:82:c9:73:4d:d0:
8b:6e:0a:05:19:9b:f0:f9:b8:b5:94:51:01:d3:85:7b:85:0a:
13:10:78:38:35:86:cc:2b:79:9e:be:5a:66:af:bc:ea:af:11:
ff:71:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:26 2026 by rpki-client