Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: bos9giywhqQBJYFX6bO4QM3CW3Xne2VkAW01/BXPNa0=
Subject key identifier: E5:96:D0:A5:F5:75:D5:68:60:03:9E:7F:B4:50:23:2B:E0:34:40:1A
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019D25839D8C3D6C3A8CBB66A9021990CCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:15 +0000
Manifest this update: Wed 25 Mar 2026 15:01:15 +0000
Manifest next update: Thu 26 Mar 2026 15:01:15 +0000
Files and hashes: 1: Su31KPktHrFLkChT839zTFn3AuI.roa (hash: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: +9sd/tk0Q1bOMNZd2S5i973RMwVoQxs+AQ7UT/OUkes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:9d:8c:3d:6c:3a:8c:bb:66:a9:02:19:90:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Mar 25 15:01:15 2026 GMT
Not After : Mar 26 15:01:15 2026 GMT
Subject: CN=e596d0a5f575d56860039e7fb450232be034401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:70:69:6e:e2:d9:8e:44:b5:6e:7b:c5:e3:
62:eb:5d:2b:02:da:16:36:25:8b:ac:b8:8a:f6:0f:
14:34:4d:fa:4e:5f:e2:0f:99:ae:ea:bc:1a:b1:4f:
6e:29:13:b2:63:58:68:b1:3c:b2:6e:ae:0f:de:05:
66:26:22:eb:71:61:1e:17:8a:95:a7:38:20:85:70:
4a:17:27:cb:65:e3:0d:17:91:ba:71:cf:ca:4f:2f:
42:65:0a:81:c5:c3:a1:bb:e7:4a:3e:31:06:c8:bd:
6a:24:18:45:4c:61:57:da:47:06:7c:e9:99:4c:20:
4c:2c:d6:97:1a:15:7c:9f:d9:a4:2c:79:68:e2:97:
87:30:c3:2f:0e:7e:87:23:d0:ad:48:0c:a5:0c:84:
1e:5a:92:f9:46:98:aa:ac:96:ee:bc:ee:bc:01:82:
32:86:12:d6:c4:3c:30:7c:88:4b:8c:a1:8b:13:5e:
dd:81:ba:bf:7c:1b:9c:ad:4c:01:16:9c:a8:b4:68:
e0:b8:6a:d9:3d:a9:e0:59:72:12:b3:08:f0:ab:3f:
f0:03:05:b8:65:5e:75:46:5d:80:31:2d:d1:a4:5c:
d6:c2:fa:19:44:16:db:d4:6a:61:27:4b:a3:dc:6d:
00:ee:26:da:db:32:dc:46:c9:52:1b:cc:30:ea:79:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:D0:A5:F5:75:D5:68:60:03:9E:7F:B4:50:23:2B:E0:34:40:1A
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:7d:61:0e:c6:e6:f4:14:98:92:b9:5a:b4:68:6e:d4:d5:
03:9c:63:56:53:ad:fa:66:94:12:54:9d:65:60:35:73:7a:e2:
94:e4:9e:5d:26:bd:a2:2e:d3:2c:d6:e4:76:65:45:38:69:94:
db:22:b1:d0:75:0b:5b:34:e8:51:9b:6d:5f:59:a7:63:b9:84:
5a:63:00:02:01:d2:19:9b:f6:10:e6:71:31:7f:5b:f5:8a:71:
05:d1:d8:a1:87:a4:ba:e5:0e:34:a3:b3:d7:0d:83:24:f6:da:
a3:bd:75:61:91:92:5e:34:2b:75:3f:c0:bb:9c:b6:79:f8:fa:
59:cd:12:23:f6:55:38:cd:7c:e4:c1:c4:96:5a:13:36:21:9c:
8f:b6:76:86:1c:2f:47:25:9c:8a:92:57:96:ef:28:ad:98:a7:
ee:c3:ce:bc:51:fd:30:5c:2f:84:35:1e:7e:32:05:aa:87:e5:
b1:10:fd:5f:08:39:4a:2b:22:51:94:60:c2:bd:c3:25:8f:03:
9a:89:b7:5d:a4:90:b2:22:9c:05:90:6e:2b:5e:b1:49:58:db:
f8:36:b7:7b:b9:51:3a:da:31:b4:08:ff:f0:df:b9:fc:d8:a7:
6b:43:11:7b:f3:d6:8d:ed:45:ed:c7:83:b4:1d:2c:f9:79:39:
12:0e:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:09 2026 by rpki-client