Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: qp8KnxdTW5yTcVqwyBfGX4rdjwZWyfXaBar1PyF518s=
Subject key identifier: 37:18:8D:86:49:0D:37:CA:F1:C8:76:F1:F9:F0:EA:05:C7:AA:E2:1D
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 01A0D012CEF807EBB971AB4D4508BE800956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:28 +0000
Manifest this update: Wed 23 Sep 2026 21:01:28 +0000
Manifest next update: Thu 24 Sep 2026 21:01:28 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: 7Owtmm/gh1tedtKcmo7zUZXhxBlpmyKoGDx3jAdLAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:ce:f8:07:eb:b9:71:ab:4d:45:08:be:80:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Sep 23 21:01:28 2026 GMT
Not After : Sep 24 21:01:28 2026 GMT
Subject: CN=37188d86490d37caf1c876f1f9f0ea05c7aae21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:f8:b7:39:ab:0a:a9:24:30:f4:62:2a:a2:
27:70:5e:5e:b5:a8:52:0c:02:2e:f2:39:2b:36:03:
49:26:51:68:ad:15:9a:a2:70:e3:b2:04:a9:d5:3c:
1b:d6:32:33:45:51:a4:0a:9a:d3:94:22:61:5e:db:
9a:77:c0:37:0f:a4:02:af:e7:ba:01:4f:63:46:5d:
8f:3c:17:19:85:2d:6d:e7:80:23:e7:81:c6:9e:ec:
5d:bf:0f:ad:c3:c1:d0:91:75:36:1b:0b:5a:70:90:
21:0b:fe:08:aa:ae:e3:6e:0b:bd:82:c4:d9:5e:72:
59:7d:2f:b6:fb:cd:ed:89:af:9f:71:0b:21:0f:16:
2d:42:49:e8:43:83:c0:3b:98:db:7b:10:79:78:63:
91:9d:17:5d:01:a4:07:df:b7:73:35:8e:f7:b0:b6:
c3:fb:b1:d6:4c:fb:fd:25:bd:0e:7e:b4:d2:e3:88:
aa:7c:6b:6b:18:e1:33:67:b5:ab:42:79:8e:ff:68:
d9:7e:5b:2c:d1:50:cd:6c:90:31:bc:41:ae:33:66:
2a:de:7e:ab:b6:83:fa:00:84:13:0f:b9:45:7b:fd:
67:7c:39:0c:59:e6:b4:4c:b0:2d:f2:9f:0d:bb:3c:
02:4d:fb:96:5c:09:3c:74:7a:fb:46:36:99:53:a1:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:8D:86:49:0D:37:CA:F1:C8:76:F1:F9:F0:EA:05:C7:AA:E2:1D
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f2:9e:a9:48:0e:71:bf:52:96:fd:07:87:cb:98:87:94:1f:
d5:06:3c:1a:fc:82:9d:04:68:12:aa:d0:3c:33:c4:76:9e:80:
41:f5:38:28:de:46:b9:58:e4:0a:d2:70:05:69:72:ce:46:a3:
7e:5a:c9:47:fd:7b:f3:dc:64:e1:b1:a5:28:7b:bf:3d:38:93:
ef:2a:7c:db:e1:64:b4:cd:b9:e1:e6:e6:d9:f1:2a:eb:d5:51:
fe:1d:18:d7:90:6a:42:24:56:5e:b2:7b:f2:aa:8b:ff:8f:10:
76:08:b1:d6:16:f9:e0:67:ad:bc:fa:61:ec:1f:19:82:af:08:
d0:cf:20:55:b4:e4:74:49:8d:25:d4:a1:96:aa:6c:bb:cb:46:
d9:ed:95:9a:84:d2:ec:12:ba:ec:5e:74:2b:37:14:65:8b:39:
f2:46:06:5f:e8:12:ee:18:51:c3:85:16:f2:f8:f0:3c:8d:fa:
0e:a9:cd:a1:e3:db:1c:5e:86:3b:94:7c:c3:de:23:1d:06:82:
b1:54:40:3f:b2:3c:03:37:08:fb:1c:6a:62:76:77:c5:24:a8:
40:d7:8e:7a:a8:80:c0:01:0e:3b:18:5b:05:a0:89:9e:81:7b:
ef:27:51:dd:38:30:ae:db:e3:08:98:85:2e:83:e7:cf:08:a6:
0c:67:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:02:46 2026 by rpki-client