Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: IzIn4A4rqsuMaZka77Fd8+rM+yyUF2nZxxyAGVIERrs=
Subject key identifier: A8:9D:70:6B:6A:96:C6:C7:3D:14:13:9F:98:B8:11:02:01:44:35:0A
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019E1EA2F1B9AF5925901D6E1AF34B11FDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:55 +0000
Manifest this update: Wed 13 May 2026 00:00:55 +0000
Manifest next update: Thu 14 May 2026 00:00:55 +0000
Files and hashes: 1: Su31KPktHrFLkChT839zTFn3AuI.roa (hash: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: 1XXQSI1vqsGdoSuM/JiWLNhtUV3+WRyDyi0q7LK6WKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f1:b9:af:59:25:90:1d:6e:1a:f3:4b:11:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: May 13 00:00:55 2026 GMT
Not After : May 14 00:00:55 2026 GMT
Subject: CN=a89d706b6a96c6c73d14139f98b811020144350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:d4:4d:a1:51:4e:76:51:29:53:e6:a7:aa:
82:f7:2b:f2:43:66:0b:df:6b:df:e9:b0:7c:6e:13:
35:b5:f4:06:07:9d:17:b7:cf:93:30:0b:3a:7b:36:
e2:f9:35:8f:8a:04:ae:5c:92:be:98:48:98:7b:9e:
19:75:17:82:04:5a:17:ac:0a:aa:4a:4a:e9:de:d6:
dd:d9:cf:c7:85:a3:2e:c0:9b:3c:78:31:2d:15:e0:
6b:36:bc:cf:7b:b0:2c:58:e5:11:bc:8b:b5:82:1a:
a0:b8:d4:0c:96:e8:64:35:96:f2:44:8f:3a:90:53:
5e:bc:c6:20:c0:24:02:08:69:d0:b1:32:47:08:95:
56:e4:87:20:be:d7:10:f7:46:ee:9c:a5:78:01:d7:
c7:54:39:c9:c9:33:ad:e5:75:8c:b4:d6:bb:ac:a3:
d1:ba:ea:14:bd:c1:de:04:bb:ef:ff:53:6a:f6:28:
f8:99:f1:19:9a:79:98:8b:dd:be:63:a3:bf:4c:12:
7a:b1:af:1f:1b:d3:24:b1:f1:ad:44:65:ee:5c:de:
54:1a:4c:70:89:74:13:4d:dd:68:63:a3:bd:98:c9:
cf:c6:00:3a:07:fa:41:22:35:fd:23:0f:a2:cf:49:
0b:b2:fe:4b:35:d6:fd:f6:7a:38:0c:2b:66:02:c0:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:70:6B:6A:96:C6:C7:3D:14:13:9F:98:B8:11:02:01:44:35:0A
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:af:5e:73:b8:d9:b8:25:84:f2:7f:f3:84:19:f2:ee:e2:
27:ab:1c:80:1e:5a:d3:43:dc:eb:b0:d2:bd:14:3a:17:f6:e7:
d9:a6:15:45:b1:ec:69:00:d8:c5:54:42:ff:d4:83:04:4e:5c:
63:e7:46:89:8f:17:52:db:f6:39:1e:74:49:76:00:7c:79:bf:
99:bf:e7:a0:d3:67:7c:62:fd:86:39:0e:99:7f:ad:69:de:78:
69:0f:4e:bd:81:95:a1:9a:b5:f9:ef:a9:4e:ac:53:5b:a5:03:
b3:08:2f:b7:1c:31:59:3f:cd:c3:f6:99:96:e5:99:66:39:42:
f8:b7:37:d6:f9:7e:e6:01:d6:00:1f:7b:33:55:21:e8:8b:c6:
06:7b:b5:50:0e:4e:41:f7:84:c5:9a:2a:9d:39:e2:90:de:0b:
82:0f:da:b5:93:7a:3d:8f:8f:9a:f1:70:b9:a7:21:a1:52:8d:
ae:9b:cd:26:86:f6:d2:3f:fa:fd:4c:55:7b:c7:2f:2d:f9:9b:
f8:26:d0:31:b3:6f:39:f3:c2:a9:d2:ab:85:d2:a1:d9:70:b6:
bd:99:5c:c0:0f:d4:af:11:2b:15:96:27:b7:c1:9f:2b:8e:5b:
d5:dc:bc:46:1f:d4:f5:f2:51:19:58:21:98:bb:4e:48:9e:b6:
ea:23:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:28 2026 by rpki-client