Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: FuINoa9VaZLfXs8tNkaX3BMjgbV6uuenzEQL0ZVG8o4=
Subject key identifier: 85:12:F3:47:0A:E7:63:2D:A1:52:82:5B:22:3F:2C:AF:01:39:99:DF
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 01A0E2BDE761CE6DDF48B5B504B3146AAAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 0AF1
Signing time: Sun 27 Sep 2026 12:01:31 +0000
Manifest this update: Sun 27 Sep 2026 12:01:31 +0000
Manifest next update: Mon 28 Sep 2026 12:01:31 +0000
Files and hashes: 1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: 05UfpIDuxrWPzDdhPGPZfpH6THdCinqhEM9KILKRbBA=)
2: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (hash: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:e7:61:ce:6d:df:48:b5:b5:04:b3:14:6a:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Sep 27 12:01:31 2026 GMT
Not After : Sep 28 12:01:31 2026 GMT
Subject: CN=8512f3470ae7632da152825b223f2caf013999df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:9b:48:0c:38:b1:c6:84:10:fe:24:5c:97:
68:57:00:c2:96:65:46:83:89:f4:e0:2b:10:01:62:
c2:f2:7b:27:14:86:37:31:2c:2a:94:81:51:3c:06:
e7:f5:92:96:0b:63:07:cf:54:f0:82:e7:d5:a9:2c:
c2:83:c6:55:62:c4:30:39:b8:70:fa:c2:31:cd:0f:
bd:de:0e:40:07:e5:61:55:67:3e:36:ae:7e:00:69:
7f:63:0f:d4:08:50:f1:93:f6:c0:e0:57:d8:ce:ca:
b8:e1:91:22:76:89:e8:ae:2c:25:ec:9b:74:05:25:
be:23:d2:ee:f3:4c:6d:d0:2c:97:c7:48:75:d3:53:
ac:26:ab:75:99:76:17:35:a3:af:1a:07:a4:7d:e0:
05:d9:db:ca:b3:d0:ce:c7:49:1a:f4:03:6b:25:15:
fe:ab:b6:d9:d7:0b:df:d3:fc:6d:88:ab:c8:1a:bf:
a8:57:42:5c:08:9a:4e:48:82:67:7d:06:9b:54:65:
c6:bb:aa:80:0c:66:df:76:12:6e:d1:75:c9:ec:65:
1f:55:34:85:d0:ed:a3:90:4c:5a:aa:71:b6:dd:b2:
f3:a6:9e:82:dc:a1:ff:d4:9c:8e:a2:02:f1:e4:2b:
ac:fb:6a:ce:8e:4b:f7:2d:4f:90:97:8b:51:14:47:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:F3:47:0A:E7:63:2D:A1:52:82:5B:22:3F:2C:AF:01:39:99:DF
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:44:46:1b:dc:6b:4d:e9:91:c4:4b:67:4c:eb:b2:bf:12:ec:
84:e2:f9:52:49:c0:a8:e7:e8:84:28:d3:de:31:47:2c:04:70:
76:42:02:f2:c1:0a:45:6f:16:22:3f:c1:ef:21:f5:b0:67:0f:
5d:a5:7b:ea:1a:65:14:24:bf:7c:ff:af:fa:41:a3:96:8d:e9:
72:b1:20:9b:92:f7:ce:de:21:5b:a6:87:04:59:40:a2:ea:26:
a4:a3:b8:2b:02:ae:8d:12:9a:4d:58:b3:34:ba:e6:3d:5b:bb:
4b:2f:4a:7c:c5:9c:df:3f:bf:2b:0d:89:15:47:1d:8e:4d:6c:
76:16:c5:d7:0c:f6:df:4c:9d:fb:bb:65:60:f8:c4:a3:18:28:
e7:b8:21:8e:35:61:a2:72:08:40:82:e1:76:f1:2b:9e:4c:ac:
88:2b:ee:b1:3e:0b:2e:2a:8f:a4:66:e6:55:d1:01:f0:3f:ca:
80:ad:f5:e9:d1:ee:98:b1:7c:26:82:3f:71:1e:7e:06:80:08:
90:9e:7a:9a:36:c2:5f:d4:88:78:14:45:c1:5c:14:53:84:18:
51:e7:71:b3:f3:fa:a1:65:c1:80:27:45:27:e6:28:78:33:95:
db:8e:ee:15:91:89:5e:ba:77:e5:66:9a:76:bc:4e:df:e0:b3:
7b:7b:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:43:32 2026 by rpki-client