Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
File: tW8vzp5iphaOKy6UggRb8ssKtug.mft (raw, json)
Hash identifier: tbwzJlnNBeFCDzDdj+LF2LjdzrerIkN1ML6Hi/qLRZ0=
Subject key identifier: 0F:B4:59:36:63:9B:94:21:2C:74:B4:3B:8B:94:FE:4B:A4:2B:CA:29
Authority key identifier: B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
Certificate issuer: /CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Certificate serial: 01A0DD60BA2FF83394305AD7E2F12F7B7297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
Manifest number: 0133
Signing time: Sat 26 Sep 2026 11:01:38 +0000
Manifest this update: Sat 26 Sep 2026 11:01:38 +0000
Manifest next update: Sun 27 Sep 2026 11:01:38 +0000
Files and hashes: 1: 3IFlA7XZRz-rJyiUo52SmKm4VsU.roa (hash: Gp8N57OCRY5f9RVcKJ2qU+3skzf1F3jJT8s5mJ+AwBs=)
2: 7736_nToC6_CfZA3vNW8JlycZkw.roa (hash: qTCz6bnUFVur+0FIZ7NwiiZDPPJYY+f61AOIZhFi/d0=)
3: 8aHRTpyqrZwmlKL5qTAdEJsldDs.roa (hash: AW2nD+ri9684i4RILLJIuGJYxrfZ5GhpSinii7eCfWo=)
4: GHURGpRE834eZ2_KZTFwWxuppv8.roa (hash: WRvbd2UtsJ1xRECpaj1BhLPH6oTWrrzWPFG8UDazSpY=)
5: cqhb3bXp1pw8R32KgFZ4AHtG7E4.roa (hash: JNpWI7YhRtStEMNAYyk9syd5M/0cSgBJsvybOc5Rf1Q=)
6: h4sliK0wW-wV_fLIV-hVMdt8j90.roa (hash: nC61aBs28ehRtgiS7EhPTBum3rJp7V4Sc7tA8g7RTn0=)
7: kHopWsCnh3m7FxnT3tcRkFfqaQM.roa (hash: ocyuk6We8YCU54sXDPg1tErWhvAYC1ikurMBcUfNHcM=)
8: tW8vzp5iphaOKy6UggRb8ssKtug.crl (hash: SZM2txdjLtgsPE6t/JSAar8d1wK/P9uCR2WsBI2dgGc=)
9: uTRz9R7UnWpYTEZZ0EurWz9FGaE.roa (hash: RCnycBNTC0AKgh9QE+ed5b58elagi9rLufbae6B+st8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:ba:2f:f8:33:94:30:5a:d7:e2:f1:2f:7b:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f2fce9e62a6168e2b2e9482045bf2cb0ab6e8
Validity
Not Before: Sep 26 11:01:38 2026 GMT
Not After : Sep 27 11:01:38 2026 GMT
Subject: CN=0fb45936639b94212c74b43b8b94fe4ba42bca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:0d:93:18:f4:14:87:b5:d0:56:72:f6:9a:
04:c1:f1:37:5f:b4:5e:14:30:4a:40:00:45:40:f8:
0f:50:ff:fa:55:e6:54:60:cd:25:26:ca:0b:e3:9c:
03:cd:cc:5c:9e:5c:71:1e:90:8f:bc:ec:05:0c:61:
30:fd:80:bc:c4:db:b6:74:9f:0a:54:4b:43:93:cf:
b9:6a:e1:0c:aa:26:61:0a:2d:e2:82:41:d7:b1:97:
61:d2:f0:70:a9:af:06:6e:18:b2:77:60:3e:cd:75:
14:75:85:19:2b:dd:6c:99:c7:46:4d:f0:aa:5e:a1:
ec:73:8a:f3:3d:00:50:23:66:67:bc:1b:f3:0c:9a:
70:5f:ac:fb:7e:bb:89:3f:50:e2:05:37:e0:e8:cd:
a9:f2:c2:26:09:f7:3a:15:f4:8f:ed:2f:28:93:23:
35:c9:4a:46:48:61:d6:56:a2:f0:f9:f1:8f:fd:2f:
32:ef:13:8c:2a:e9:da:60:73:51:00:ed:9c:91:0f:
29:4b:22:a1:44:26:ca:0f:07:db:ce:f4:b7:84:5b:
b7:d8:09:0e:dd:e6:51:ab:a5:1c:1e:d4:d4:8a:70:
ed:62:b5:16:1b:57:47:20:c4:ed:36:7f:12:21:a6:
2d:4b:08:be:c8:37:58:68:9a:2f:d8:15:db:47:d6:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:59:36:63:9B:94:21:2C:74:B4:3B:8B:94:FE:4B:A4:2B:CA:29
X509v3 Authority Key Identifier:
keyid:B5:6F:2F:CE:9E:62:A6:16:8E:2B:2E:94:82:04:5B:F2:CB:0A:B6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW8vzp5iphaOKy6UggRb8ssKtug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a24b4e-6c5c-42c3-9b8c-68727c6fc1d3/1/tW8vzp5iphaOKy6UggRb8ssKtug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:a7:b1:b4:19:16:71:dc:ce:e4:1f:a2:a5:38:53:fa:9c:
c7:e8:98:87:dc:24:6e:35:6b:52:ce:68:b9:b5:1e:04:4e:6c:
ee:bb:89:29:ec:6a:0c:1c:50:03:51:29:91:0f:84:d3:36:72:
44:7b:b2:45:cb:7a:68:c9:a8:7a:f1:30:4a:6c:e7:15:45:6a:
75:f7:f9:d2:4e:31:ad:a2:5d:40:d5:4f:9d:1f:df:1f:97:f4:
e9:cd:c6:e4:26:7d:83:d5:a8:e2:d8:fe:62:dc:f5:02:dd:11:
b6:34:48:c4:3f:07:5a:04:20:38:5b:91:c3:b1:2b:68:fb:87:
b0:ee:d1:b2:22:fa:3d:e0:3e:cc:ba:28:19:d5:f8:dc:e1:d7:
1e:fe:e1:2e:f5:6c:1c:0b:8e:2a:94:84:72:72:e8:fc:90:b0:
7c:f8:67:e4:98:e9:1e:ff:c3:d1:81:d6:09:84:74:cf:a6:cd:
73:18:18:7a:fb:53:5d:d2:40:8e:59:30:a2:53:7d:06:75:6a:
91:e3:85:f8:d8:a4:4a:9e:d7:cc:1f:dc:7f:03:ff:52:64:2d:
9c:e3:e4:b9:3a:2f:f6:3f:53:81:14:b1:17:4c:d6:4c:ee:7c:
96:eb:eb:22:96:b3:97:f8:4d:56:dd:30:a1:da:bb:73:ab:57:
69:82:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:53 2026 by rpki-client