Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: nfuPZxgyoDYm5kkUxq9t6XRga1cdYCbQPNqVtziud9I=
Subject key identifier: 99:BD:EE:C5:32:AC:75:07:FA:28:02:E9:16:17:D4:02:18:A0:65:D2
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 019D26CD3B6918AD4CD33C7E2359F97FD917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 0902
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: kRZA6d+tav4HVcz31miEcfgclrtOf7zCzap0f8LXR44=)
2: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (hash: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3b:69:18:ad:4c:d3:3c:7e:23:59:f9:7f:d9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=99bdeec532ac7507fa2802e91617d40218a065d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:92:4f:8d:d5:98:f0:a2:b7:a4:73:be:7a:
14:71:54:ef:eb:78:a7:63:0b:7a:14:26:9d:dd:35:
22:f5:7d:d5:66:b6:5c:4e:a3:43:a4:fd:2a:b1:60:
f7:f9:36:b4:5d:90:2a:63:2f:fd:d8:b1:03:f6:53:
04:67:16:ba:90:81:ae:c2:80:be:8b:47:17:71:d2:
2b:b8:fe:84:14:54:e8:d3:05:35:f8:c5:25:81:cd:
ce:21:85:db:1c:ea:e1:a7:4e:d7:36:a0:a0:3c:87:
20:cc:7b:cc:ff:69:3d:7b:2e:27:9d:84:f9:9a:92:
ca:f0:58:f7:c1:a7:09:41:ac:99:09:35:2b:d1:c8:
e2:85:e1:17:4e:ef:09:51:f3:73:6c:5c:a1:3a:ff:
11:c8:0b:f2:b3:6c:f6:c4:f9:5b:20:14:57:e0:18:
80:5f:19:3e:d9:ce:08:d5:51:97:e6:21:f2:51:51:
f9:60:aa:3b:b2:77:fd:b1:4d:54:e4:89:31:b5:f2:
b4:b5:3f:55:04:15:71:66:44:bf:ba:95:f5:cb:c4:
d4:af:dd:d3:84:cd:c5:96:d9:4d:dc:1e:f0:67:b4:
08:a0:ea:09:db:f0:2b:00:c2:16:35:36:c0:05:fb:
61:49:e5:a7:86:e3:57:75:97:6f:f4:59:1f:da:7e:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:EE:C5:32:AC:75:07:FA:28:02:E9:16:17:D4:02:18:A0:65:D2
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5e:af:c5:ef:a2:ac:ca:cb:13:ee:46:0c:fa:e8:38:a6:8d:
35:cd:b7:d2:ef:99:af:73:3b:33:1e:c4:d0:b9:65:c8:df:4d:
27:25:42:e5:04:f1:f9:63:e6:77:91:d5:f7:09:f3:86:84:99:
ad:34:5c:f1:17:26:50:d1:91:20:28:18:de:a2:90:fb:75:ff:
32:05:71:c0:d8:54:ab:a5:67:61:fa:b7:28:d4:a1:6d:03:dd:
05:8e:16:c5:73:e1:7c:9d:94:d9:86:19:d2:bf:b0:e4:fd:70:
21:ff:26:61:5e:7f:4e:9e:e9:d9:95:d0:03:d4:15:81:3d:8e:
3e:01:08:12:6e:aa:a6:0c:25:59:0b:39:68:ef:0f:73:88:ed:
24:b8:8f:18:54:bc:3f:61:23:ad:37:83:5b:a3:8c:46:c0:42:
74:83:60:97:71:4b:2c:3d:d8:3d:54:44:df:58:22:9e:66:84:
17:bc:e3:1f:1d:16:78:ee:8e:ae:9a:32:2e:34:6d:f2:9a:d3:
e4:3d:49:a4:9c:e0:45:c8:51:69:f3:22:04:c4:60:15:00:79:
d3:13:1d:09:13:08:e6:60:0c:c4:70:52:82:b2:b6:b3:f0:f0:
ec:6d:20:83:63:d5:20:5a:fb:0a:67:ff:a8:bc:59:2c:3c:c6:
68:88:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:58 2026 by rpki-client