Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File: tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier: wPCmNYsG752R5h22S/nSn9oBVWjXQpiGYM1XEwoofAA=
Subject key identifier: 58:DF:85:0B:54:4C:77:79:AD:66:B0:A0:EE:0D:79:D3:A6:5E:AE:BE
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial: 019D28BB698EB39EF16980B6A24D7D5FCE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number: 096E
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: T4gByfkD+mRhr0nFrcxca+/hwE0YpMmaZVuGNNmGwtM=)
2: w9I-TITWUP65GSq15FkjvyWMmjA.roa (hash: zy+zixulBGIOWMUqfVrmypdwCmfjRlJukmDFjYyZjjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:69:8e:b3:9e:f1:69:80:b6:a2:4d:7d:5f:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=58df850b544c7779ad66b0a0ee0d79d3a65eaebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:37:21:15:69:e8:23:80:31:80:90:8d:ac:
fd:93:48:9e:2a:70:90:f9:f0:14:50:1d:62:01:50:
80:b3:76:5e:c2:6c:92:90:02:78:79:1d:11:17:c8:
9b:c4:fc:2e:47:3a:6f:f6:c7:59:16:46:1a:3e:9e:
51:08:58:18:59:3c:d1:e8:cb:98:dc:80:80:2e:a8:
eb:b3:8e:70:72:05:11:21:50:c8:0c:d2:0d:3a:99:
04:0a:24:5c:26:06:d9:9d:08:ce:7d:e6:16:a6:4b:
90:c5:2f:b7:14:ab:8e:58:8c:df:82:b5:fc:5c:f6:
60:e8:22:97:bb:4c:61:c4:4e:b5:b0:e1:2f:f9:77:
51:78:27:e7:1c:8d:37:f7:e4:41:ba:19:f9:d7:40:
d9:d5:9b:29:07:60:45:f3:37:06:41:70:0d:f3:3f:
57:98:8a:bf:86:e2:0f:38:65:08:70:d4:6e:a0:aa:
c9:51:1a:30:6c:f9:73:3d:3a:c9:1c:38:41:1f:e8:
6a:05:89:84:1f:4d:58:1d:50:15:76:0a:a7:68:a7:
db:fe:f0:a6:6f:e3:ac:5f:e3:c1:3f:c3:df:f9:37:
b2:b5:18:83:30:e7:a6:17:43:07:d9:c2:1b:6a:43:
6b:26:c0:44:c0:b9:69:c8:16:a5:7f:d7:8c:99:f6:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:85:0B:54:4C:77:79:AD:66:B0:A0:EE:0D:79:D3:A6:5E:AE:BE
X509v3 Authority Key Identifier:
keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:43:64:2f:c9:c2:a9:57:fd:ce:b1:8a:56:9c:fb:84:59:
a5:56:2e:09:59:da:90:b5:0e:24:a6:98:3f:13:d3:d5:d2:34:
4b:2e:57:da:91:e2:53:89:74:75:84:60:a2:64:87:47:ec:bb:
69:44:fe:dc:91:a4:e6:1e:4f:b5:ce:a9:f2:ac:c0:b6:3d:c3:
21:c5:be:3d:8d:7b:f5:d3:45:27:28:fb:fe:6f:ef:f6:aa:11:
1a:28:01:19:56:6f:bc:b8:93:6a:c5:4f:1b:e4:1e:e5:bf:29:
ca:91:4d:65:db:bc:7b:f6:49:21:6e:a7:1e:47:00:ff:46:c6:
a4:de:9a:f4:3a:bb:cc:70:4a:31:68:25:df:be:eb:05:26:a8:
db:8d:d6:5d:5b:80:75:44:90:b0:01:50:85:c5:bb:cd:4c:eb:
de:e9:3c:cb:6a:2c:98:ef:74:ed:b7:68:d4:5c:3c:73:c9:91:
2d:5b:e1:d6:ff:de:82:f1:f6:80:4c:a4:55:43:41:d7:e8:48:
0f:76:8c:bd:12:f0:b6:b8:72:d9:c7:f0:46:b9:97:48:b6:f6:
8b:a3:0c:8a:07:9f:eb:41:62:aa:7d:19:7e:32:c6:4b:c5:34:
b8:97:00:d9:28:68:c6:a0:23:ce:eb:d0:6f:ee:44:40:b4:a3:
37:9b:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:08 2026 by rpki-client