Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: qiEFmT2DDwJQL7asg5gOCegAgLKnO3+zzSbRreW7gv0=
Subject key identifier: FE:6D:B3:53:16:03:7B:10:B2:40:C7:5F:D4:E6:D8:74:43:59:67:43
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019E1DFE0DF5775974FD28C15C7E7A40FBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0E68
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: Bn8nnEoLrkwQNhpgSRdkSFPVC+oEdBlhFSJA3y2pWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0d:f5:77:59:74:fd:28:c1:5c:7e:7a:40:fb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=fe6db35316037b10b240c75fd4e6d87443596743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:ed:a9:08:57:87:29:e7:ba:29:86:39:a3:
17:1d:db:c6:1f:31:ed:bd:bb:a4:20:4a:b9:72:3d:
c1:90:46:8e:7a:d8:2a:63:8d:37:05:e2:18:0d:b8:
5d:9b:7d:cf:80:13:9e:b2:6a:9a:24:69:63:af:c7:
d1:e9:ea:1d:f8:12:96:ce:1b:3e:42:11:08:41:b7:
35:33:3e:73:4f:60:48:df:3a:0a:98:8a:0c:84:58:
28:92:6c:ec:15:76:a4:9f:f4:71:f7:56:bb:6a:18:
63:64:cf:68:60:37:61:6d:fb:32:89:3f:ca:08:5c:
93:0c:49:de:46:3a:7d:2e:7b:be:a7:32:0a:2d:30:
5b:d8:b6:35:cd:1f:c1:42:d1:4b:bb:d8:99:9a:ee:
99:90:65:be:84:70:a2:94:1d:dc:26:2c:64:2e:9f:
64:2f:f1:98:11:f9:6c:6f:91:da:a4:e8:1c:27:3b:
4c:b4:0b:ff:e6:cc:9f:be:b8:2a:8f:d8:11:a6:56:
6a:2f:4d:ed:f0:8a:f7:ca:d3:39:c8:20:43:a2:94:
2a:a0:b2:0c:a0:c7:f4:8a:d4:6a:b1:55:5c:51:52:
d1:b0:81:c6:71:51:8f:38:25:2e:bc:ea:04:b8:e1:
fd:c5:08:c2:31:99:36:97:be:8d:05:19:4c:df:ad:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:B3:53:16:03:7B:10:B2:40:C7:5F:D4:E6:D8:74:43:59:67:43
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:60:16:b2:d3:ef:47:42:4c:12:08:97:52:28:4d:15:6a:
06:05:26:bb:0b:b8:a8:cd:76:19:58:de:b3:eb:ec:e8:fc:49:
8f:04:9b:91:b4:59:b6:08:aa:a7:f8:7d:55:9e:9a:6f:fd:83:
bd:02:e7:31:65:00:ad:20:c8:11:d5:5b:14:cb:fb:65:86:53:
1d:f7:c9:e6:2c:07:c7:b7:ba:60:50:4f:e2:41:85:84:66:de:
14:1a:c7:19:1e:70:44:9f:40:e4:71:6d:11:ca:2b:0a:a8:02:
d6:fd:b4:f6:17:d1:f1:41:ad:23:1b:6e:cb:e0:3c:8a:aa:82:
df:2d:09:2a:ee:7e:66:e9:20:9d:c7:1c:7a:ed:ef:6b:3f:27:
83:5f:78:62:c6:e0:f0:ec:1d:d9:90:8e:22:40:2d:fc:17:db:
22:31:9b:01:7c:40:0a:f4:c4:44:7a:a3:5a:fb:50:03:30:ab:
17:c9:d8:65:39:38:f9:97:dd:73:4b:be:d1:7f:42:e8:09:ec:
51:15:ef:ee:6b:af:88:ad:30:24:8e:00:8d:6d:66:06:23:a7:
dd:17:03:c9:0c:57:8a:9b:e8:1d:f0:ac:3c:6e:86:a3:e9:bc:
a9:73:b0:be:18:40:f1:19:6a:5c:82:da:5d:24:6d:d7:07:fc:
42:3e:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:39 2026 by rpki-client