Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: Sf1197iXvI05i3hsvZsoYT5Fyw/OvwrXIxvdwBzglpk=
Subject key identifier: 1E:20:61:5B:6E:79:AB:13:03:60:2A:6E:EB:99:96:F4:47:AA:2D:E8
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 01A0EE53EE7D300DDCC6CB8527A7AC57BDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0FDD
Signing time: Tue 29 Sep 2026 18:01:12 +0000
Manifest this update: Tue 29 Sep 2026 18:01:12 +0000
Manifest next update: Wed 30 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: gp9miav+DewJoFfGB76e38TeK+YidebifkGD5ZeU8GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:53:ee:7d:30:0d:dc:c6:cb:85:27:a7:ac:57:bd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Sep 29 18:01:12 2026 GMT
Not After : Sep 30 18:01:12 2026 GMT
Subject: CN=1e20615b6e79ab1303602a6eeb9996f447aa2de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:9a:9e:45:10:cf:bb:8e:7d:f6:e5:25:ac:
ce:da:97:47:83:41:9b:75:ae:11:2c:45:bc:ba:8b:
7d:52:a1:7b:77:58:1c:72:01:23:d7:a6:95:4f:31:
12:7c:20:1d:90:9d:01:90:1b:12:c7:2a:14:6f:c9:
62:78:8e:4e:2c:81:79:3e:27:55:8f:2c:73:fc:4d:
5e:ea:1a:03:52:88:48:43:61:91:7c:3a:94:b7:38:
c0:b5:56:63:ec:df:22:e0:a5:bb:b2:dd:b6:3c:82:
14:66:df:03:91:9d:87:e4:bf:19:ca:fb:47:dd:66:
af:94:3f:f8:bc:70:80:34:6e:99:eb:6d:ab:39:81:
b5:66:93:02:5b:8a:28:c5:73:6a:1c:ed:a7:21:0a:
86:6b:86:91:0e:cd:12:1c:e2:07:df:db:7e:7f:8d:
e5:6e:6f:cc:82:bc:c8:08:cb:7d:80:a3:2e:c6:b7:
0d:31:f2:93:0d:78:98:84:4b:27:c3:62:35:fe:ba:
c8:63:df:ea:6a:13:8d:a0:52:36:7d:da:ed:d5:c5:
47:56:19:01:b0:cd:37:6e:f3:46:97:94:c7:15:3c:
3b:1a:1c:f9:e9:62:ae:2f:c3:07:74:65:51:da:4f:
a4:e3:62:c3:15:cd:b7:2b:a4:d4:25:87:99:e1:2c:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:61:5B:6E:79:AB:13:03:60:2A:6E:EB:99:96:F4:47:AA:2D:E8
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:14:c1:ba:5c:7a:2a:7d:d3:c3:6c:65:14:9f:ef:14:f9:
ce:f6:8f:4b:10:83:82:5d:6d:0a:b5:03:e5:22:23:e5:10:83:
17:f0:40:e1:7c:4a:50:b0:bf:69:d4:b6:7a:54:60:4a:f5:24:
62:6e:0c:fa:67:ff:6d:58:d1:c6:db:12:43:5f:35:5a:f7:fa:
a2:58:9a:ba:3c:58:1e:b2:c7:1a:1e:e5:b5:ac:00:48:22:05:
64:a5:4a:7b:eb:00:b1:75:d4:50:7e:fe:2e:d4:4b:86:c5:51:
f5:1f:3c:39:8f:bd:5b:e2:38:f5:06:2e:77:e8:35:63:d9:4a:
2f:ca:98:63:35:ab:26:16:73:d7:6a:9f:ad:5e:6f:c8:c5:fb:
00:21:bd:98:83:0b:b5:1e:13:e7:5d:73:4e:c5:10:fc:c7:de:
cf:05:15:72:d1:67:85:cb:fb:29:1e:1b:56:43:9a:cb:4d:61:
97:d6:fd:31:88:8c:ef:5a:4f:7c:d2:d4:56:86:6a:50:36:47:
2a:5e:73:18:2e:58:76:0c:e1:79:c7:e0:5f:fb:0b:0f:bf:e6:
d0:42:d7:57:43:4a:73:f8:76:f4:a0:0e:52:b8:64:7c:17:60:
92:2b:bb:3e:0c:be:ca:1a:dd:e6:e2:f7:0c:19:af:30:ff:4f:
3d:d5:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:02:10 2026 by rpki-client