Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: SZjVzZmZayy1SHXMK1SLzGr+zUhjIfoo7/8jyeFFESA=
Subject key identifier: C7:AA:11:F5:0B:B8:36:23:CC:D4:1A:91:C0:B8:A1:3B:D7:7B:F6:54
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019D33763D2B19ADEB53E3AD6AF72969FD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 08C0
Signing time: Sat 28 Mar 2026 08:01:19 +0000
Manifest this update: Sat 28 Mar 2026 08:01:19 +0000
Manifest next update: Sun 29 Mar 2026 08:01:19 +0000
Files and hashes: 1: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (hash: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: fm/qAmHwu/0bOlXrMvr2qqo0IAo9jS99bnJBaHtgCQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:3d:2b:19:ad:eb:53:e3:ad:6a:f7:29:69:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Mar 28 08:01:19 2026 GMT
Not After : Mar 29 08:01:19 2026 GMT
Subject: CN=c7aa11f50bb83623ccd41a91c0b8a13bd77bf654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:e5:b6:36:de:b3:f8:0e:3d:98:da:a4:9f:
4f:bc:14:b3:12:57:d2:fa:a0:bd:a2:47:75:bd:a3:
95:fd:6e:f7:aa:56:dc:88:ef:4a:0d:a3:ec:7d:d9:
00:5c:4a:a2:8e:89:2f:8c:f6:74:fa:ba:59:87:bb:
5c:6f:8f:19:25:81:ad:da:5b:48:1e:c5:f2:1b:5e:
0a:ae:a2:37:19:d2:2a:28:0b:f6:d9:ac:6e:06:d6:
ec:ce:36:ef:fa:a9:8e:2b:0c:bc:38:f9:58:ab:77:
58:f1:c3:1b:08:1d:4c:16:36:4d:7a:15:2a:f1:56:
9f:07:87:5e:23:97:95:c4:51:96:0f:83:85:68:88:
59:0d:d4:3e:fd:0a:41:96:3d:4f:a5:2b:7a:2f:4c:
26:dd:8d:5a:e1:85:98:e9:b1:e1:67:1c:07:f8:56:
b4:76:d4:e0:9b:0f:9e:b6:c2:53:62:08:0d:d6:54:
de:18:f1:8c:f0:31:35:f4:1e:16:59:43:0f:af:2b:
59:e2:b4:f4:c2:de:4a:5c:5e:1d:99:bc:72:96:9c:
3c:f7:cf:cc:10:78:70:35:8d:cb:df:fa:4b:b0:79:
8f:85:64:cf:b7:b7:6d:98:00:49:b5:8f:35:7a:df:
0f:d7:d0:34:4e:31:5d:27:ee:7b:bc:72:3e:af:65:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:11:F5:0B:B8:36:23:CC:D4:1A:91:C0:B8:A1:3B:D7:7B:F6:54
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:19:10:63:c3:ab:dc:ef:54:80:f2:ea:a3:f1:78:cc:e2:dc:
ff:12:37:2c:f2:ed:7d:45:da:af:ae:45:9f:36:3d:39:42:15:
cb:6d:2f:2e:e1:9d:47:88:49:76:72:e1:87:90:84:3b:ee:d7:
84:c1:f7:e3:e1:a0:33:e2:95:48:9f:2c:f8:5e:78:c6:08:3d:
f8:59:53:da:1b:94:5e:ee:8e:c0:c0:6e:b6:66:e3:fd:40:b5:
c6:89:7f:42:db:11:ec:9f:a1:59:fe:9d:24:a9:b7:b3:65:ab:
d1:42:22:82:c6:5f:4f:fc:df:80:57:70:0c:02:26:ea:59:d2:
36:65:21:ff:8d:41:c5:c8:6a:d1:03:2c:c4:06:a9:9a:2c:4d:
09:58:e8:f4:b4:81:83:49:14:ce:da:bb:b4:ab:7f:8b:20:eb:
ac:30:bd:58:3c:e4:e9:3c:02:85:f3:23:e9:a9:90:ca:46:0d:
9d:31:14:8c:b8:ba:be:7c:bc:84:47:3e:9d:20:22:d1:c2:33:
b3:da:ee:7f:15:4a:2c:ba:84:b1:17:bd:9c:02:ef:e4:f7:01:
88:ce:20:80:10:e8:75:8c:79:4e:d2:ff:7f:8b:51:1b:f8:c0:
4b:f2:37:ee:1f:ba:e0:c2:4d:bc:e7:ff:ad:b3:4b:41:b6:e5:
4f:f2:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:13 2026 by rpki-client