Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: wdN0EEXmeC3j+/HYSPtMjNeNhQsHkROAuQW5UV9i36Q=
Subject key identifier: B7:DE:36:61:EB:42:59:F2:2D:E2:F7:BA:69:FD:EC:43:8A:94:0E:E2
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019F94A4B8687E10771561480D3D1E9C046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0F2A
Signing time: Fri 24 Jul 2026 15:00:50 +0000
Manifest this update: Fri 24 Jul 2026 15:00:50 +0000
Manifest next update: Sat 25 Jul 2026 15:00:50 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: vSM7updl0xalUUMgc/MVyObQHbpRjC2E1rvUBELeuIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:b8:68:7e:10:77:15:61:48:0d:3d:1e:9c:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Jul 24 15:00:50 2026 GMT
Not After : Jul 25 15:00:50 2026 GMT
Subject: CN=b7de3661eb4259f22de2f7ba69fdec438a940ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:c8:b0:94:71:fa:14:59:14:1a:2d:d3:4e:
0b:e3:d2:eb:c8:59:f8:71:fc:c2:5b:21:63:93:74:
35:03:27:68:3e:67:ed:ec:79:4f:f4:0d:1d:d5:3b:
8d:65:3e:ef:76:9c:e7:e5:b6:7f:29:7d:6b:0a:68:
10:67:8f:58:98:00:f7:b4:70:66:f9:18:61:92:df:
a0:d5:da:4f:54:98:d6:1b:39:9c:28:30:9e:8f:4f:
56:e6:10:3d:cd:80:a3:53:39:e0:c9:57:27:91:af:
0c:1b:4d:4d:67:eb:2a:ed:fd:2f:b2:5b:45:de:e1:
24:4e:c1:85:af:95:5d:91:87:77:47:02:d5:b2:3c:
53:19:fe:88:ca:ab:5c:7c:7f:ed:10:70:91:1c:ca:
34:99:b2:87:4d:7e:ab:73:5e:81:42:a6:ed:3c:74:
49:c6:49:d0:49:1a:2c:57:bf:e2:5d:0e:b8:6e:b7:
fe:f9:b7:5c:ff:96:81:27:93:ff:91:b5:0e:5f:40:
d7:df:61:49:9a:6f:30:3f:0a:05:9e:70:88:f5:e9:
90:c0:fb:c0:a6:16:37:47:bb:5e:e2:6e:fe:72:1b:
56:8f:de:b4:c4:d5:02:9c:00:7a:e8:a1:d8:69:32:
84:29:d3:a7:6a:3f:64:e5:a7:17:d1:b5:f5:2c:de:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DE:36:61:EB:42:59:F2:2D:E2:F7:BA:69:FD:EC:43:8A:94:0E:E2
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:52:45:71:4a:7e:5c:0a:f0:8b:76:f2:75:e5:1f:f2:38:0b:
fe:ac:0c:23:63:d6:1b:43:7b:b0:5f:74:ca:7c:af:94:d4:1b:
ed:86:60:b5:aa:ae:64:fd:2a:31:35:8f:00:b2:3b:36:dc:9d:
d1:9b:e2:23:e8:f6:f8:7e:4f:1f:d3:2e:a5:b7:01:41:7f:90:
a3:1e:a3:a8:5e:3f:cb:c7:7a:02:99:06:a5:a4:c3:f0:f7:14:
49:f7:a5:88:4b:b1:34:30:b5:dd:17:d5:a2:4a:f6:9e:bf:32:
94:63:b4:a1:e7:a0:37:57:37:4a:48:cc:74:96:1d:79:fc:95:
ee:80:19:9c:74:16:eb:b1:c8:9e:cc:ae:e7:c4:1b:85:10:0d:
ad:b9:94:a2:36:5f:0e:e6:bf:f8:28:90:ac:e3:8b:08:e7:63:
5f:c3:c3:c6:1d:a8:ae:aa:5a:e0:59:37:ff:eb:2b:f5:35:a2:
1a:23:3c:16:4e:50:7e:b7:90:7f:a4:6f:d4:29:ae:84:d1:89:
ad:14:18:88:8f:88:eb:b5:f8:3c:28:53:5f:4c:f7:0f:19:be:
22:d1:a6:4c:fe:9b:e7:4c:6f:dd:31:15:07:2b:7d:1d:d8:55:
a2:6e:f9:7f:81:07:05:49:da:b0:bb:ca:fb:e6:81:45:71:92:
22:b7:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:17 2026 by rpki-client