Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json)
Hash identifier: ZHiMQ+XPaVhyPtJR42u8SpDKHXTrQPHQehAobNj7uu8=
Subject key identifier: 37:74:E2:D4:C7:65:78:BC:A9:29:20:C7:C6:B6:7E:77:4F:F8:C5:A2
Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982
Certificate serial: 019D26CCBEDB7A77FBDB4AF314C6D9239379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
Manifest number: 011E
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: mTKfXNqZr-ethdBjOn6lFjS-PNs.roa (hash: HOGNlGeAoZ/b5RPWvVv+b+yxDspoiWHKwc8eGW2VV4w=)
2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: e65cg2B2CsiNCjh/3zeDbtb5u4Uju5iFGeLDXQ4DhpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:be:db:7a:77:fb:db:4a:f3:14:c6:d9:23:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=3774e2d4c76578bca92920c7c6b67e774ff8c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:d8:21:8e:5a:e1:b3:e8:7e:93:62:91:09:
2d:e0:e6:e8:c5:0a:b4:3d:f8:89:05:23:6a:a5:65:
57:b5:45:58:8d:31:8a:0f:36:e7:34:7e:a2:d8:2d:
88:b9:3d:81:80:d9:6d:7d:31:1e:c0:fb:24:40:7f:
f2:ef:e1:4c:fe:db:7e:89:6c:10:1b:1c:c5:57:b7:
f8:23:bf:0c:b4:d4:6e:55:59:d8:03:0e:e9:8b:2f:
aa:d1:b2:78:12:06:df:7f:06:3c:6c:b5:70:82:42:
88:b7:84:d2:31:cd:99:e4:b1:cb:5e:8c:c8:2d:1c:
66:ee:ac:ae:08:c8:df:ec:bb:21:25:84:6c:cb:de:
26:00:3f:7a:b4:32:84:b8:ce:3f:6d:7a:e9:c9:1a:
02:08:50:a9:e9:a9:15:5f:ad:d4:21:9e:c9:37:3a:
63:6c:3a:4e:1d:92:b7:83:51:99:bb:d0:bb:6c:e0:
6b:0b:77:f0:58:f5:43:bd:4a:22:88:d3:9b:c6:eb:
bb:59:c9:9e:6d:cf:f4:e8:67:a7:20:7e:e2:24:d5:
cc:9c:b0:92:cb:b6:8c:90:c4:b1:68:f3:c2:5c:16:
53:88:4b:b8:72:0c:dd:b4:5d:6b:44:23:21:d4:84:
9e:ec:be:96:09:8c:37:92:c6:d2:0d:6b:7c:1b:0d:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:E2:D4:C7:65:78:BC:A9:29:20:C7:C6:B6:7E:77:4F:F8:C5:A2
X509v3 Authority Key Identifier:
keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:03:6c:6b:ac:ce:8e:51:89:f4:d9:32:cd:9b:d7:1e:86:
28:ff:46:2e:7d:82:01:14:b4:cb:01:c0:8c:48:d2:95:a1:32:
08:cc:a3:88:45:6b:45:9b:31:0e:85:ee:21:eb:09:a2:7e:a5:
26:b8:5c:b7:7d:d2:2a:e3:15:2c:3d:e7:1f:42:d9:79:ff:a7:
69:3a:63:7f:8c:34:df:f8:da:0f:7e:d1:ba:b8:cb:b3:50:a6:
d3:e6:ed:17:d7:4f:fb:b1:48:e7:23:c1:da:26:18:69:11:ec:
a9:51:3f:a3:fe:0e:38:41:7d:11:1f:89:52:84:c3:af:d4:35:
4b:78:94:6a:ec:99:5e:64:dd:eb:a0:49:42:f8:5a:de:46:b9:
60:d4:5a:14:36:fe:e1:92:b5:71:a0:90:93:55:8b:a4:fc:02:
c1:eb:c2:5b:0e:f7:f9:e1:c9:63:7a:4b:90:bc:c0:6c:f4:14:
b3:9e:39:9a:ea:12:17:ae:3f:0b:ed:66:77:08:81:95:b8:3c:
88:df:b3:54:e0:d3:d3:02:61:09:a8:67:bd:b1:74:e3:8e:70:
80:13:8a:f6:77:8d:cd:a0:ec:7f:81:07:75:4a:e0:33:7d:e7:
c7:da:0e:ab:99:4f:d7:ab:4f:f2:01:66:8a:25:a8:60:e4:c3:
11:ec:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:13 2026 by rpki-client