Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: RUf9EPzj+sHfBwVtb3MMoXMDQzOtRnfxiNZgGUZ9YqI=
Subject key identifier: AF:16:BE:B9:27:02:38:CC:87:40:FD:02:70:7E:AA:75:25:4E:FB:4C
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 01A0ECD3CF6B1C603CF5EA8EBF0446D5C67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 0F6D
Signing time: Tue 29 Sep 2026 11:01:39 +0000
Manifest this update: Tue 29 Sep 2026 11:01:39 +0000
Manifest next update: Wed 30 Sep 2026 11:01:39 +0000
Files and hashes: 1: igu1HBQCLR1V-K0-3zcWvVR38_Q.roa (hash: haVmzp4loEFEIlfjU/Ifex5GRzP7g2ubGaSjmF5LzcI=)
2: mi5UdugB7saftfqiUyQPEhUTU6U.roa (hash: fCT43nAEnI224CXuau2ugHoxaLrrDRNyaSrjl9LFtAY=)
3: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: rqSbLJnmIw3yh7heuKFf/ti6Z8cKLLPOY2Srmp3aJtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:cf:6b:1c:60:3c:f5:ea:8e:bf:04:46:d5:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Sep 29 11:01:39 2026 GMT
Not After : Sep 30 11:01:39 2026 GMT
Subject: CN=af16beb9270238cc8740fd02707eaa75254efb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:61:88:18:4c:1e:39:69:f2:65:4a:93:55:
b8:39:be:5d:e0:bf:f4:5e:90:b4:6c:41:4c:94:4f:
6d:7d:f0:55:cb:b3:01:69:89:a0:cb:39:60:0f:0c:
3a:4b:10:2c:fb:08:2a:c6:60:e5:ec:71:b5:b0:fe:
54:34:11:94:6a:b7:9b:bf:2a:94:99:4b:2b:91:c8:
d8:8a:b0:ee:75:78:bc:b2:f4:10:02:17:23:e7:36:
12:68:7e:75:34:7c:a2:9c:3d:a7:97:72:db:c9:ce:
7d:f1:7d:31:ed:c3:98:31:ce:6f:45:53:15:09:0b:
c3:d6:83:8e:4f:c4:c8:d2:38:3d:c2:6a:c3:00:bc:
f9:de:69:e7:2a:8a:1a:c6:12:ba:20:55:0d:c9:1e:
56:e6:04:97:08:23:3c:71:1b:a4:04:8b:bf:b3:b8:
8e:5f:61:86:ce:b4:68:bc:47:33:79:9b:9a:54:d0:
8c:3c:52:03:3c:9c:8d:89:6b:a1:0d:a3:84:2e:20:
09:25:07:45:f4:81:c9:09:b3:95:f3:89:45:23:41:
58:16:6a:1a:88:e6:b4:32:7c:34:86:78:97:69:70:
bb:07:86:eb:0e:4a:7d:23:d9:36:29:a6:2c:00:61:
c3:4a:4a:94:17:e5:3d:cb:cd:24:d1:3a:53:4c:ba:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:BE:B9:27:02:38:CC:87:40:FD:02:70:7E:AA:75:25:4E:FB:4C
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:af:36:fb:b0:ea:b1:e5:ab:4f:c6:ff:6c:3f:e7:20:14:
98:57:9a:9a:7a:8e:af:0e:14:dc:bd:d4:21:8d:99:8d:28:54:
c1:de:99:e5:5d:ca:ea:8f:2a:21:33:13:00:d2:b9:c0:4f:57:
b6:9b:f1:c1:e3:23:a9:12:3b:bc:12:fb:87:e0:bb:d0:dc:0c:
ef:70:14:df:f7:41:43:d1:4d:80:0f:16:f9:01:93:36:0f:70:
1b:36:2e:f2:3f:ae:03:54:36:6b:18:fe:1c:cc:3e:d8:bd:03:
30:36:45:5c:f2:c8:ef:e4:f4:1e:b7:1f:e4:b5:28:fe:12:eb:
61:6c:0a:ee:00:7f:d8:7e:d1:c6:05:29:72:75:c1:04:a2:3a:
84:d8:02:23:60:36:4a:54:c0:72:af:80:08:8f:d0:2f:a3:dc:
9f:68:59:52:8b:5c:f6:db:2b:ff:d2:eb:c9:68:ff:e7:82:05:
22:33:38:a6:70:45:f7:56:95:35:91:f3:5f:43:bf:a4:d6:e5:
d9:6b:38:b7:e4:e7:81:34:d4:16:18:ec:a2:d0:df:82:61:3e:
c2:c9:da:60:5d:37:90:bb:f8:61:16:ab:39:0e:8e:9a:c7:d1:
70:c6:8a:73:1a:b8:90:32:94:f0:09:0b:98:3c:f0:e4:ef:6a:
ef:ae:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:37:23 2026 by rpki-client