Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: F/G1UF/Xx8riR3YNm88fawzd17wvADhrs5Rbs7cya+8=
Subject key identifier: 8B:D7:1C:0B:45:83:24:C9:B2:D1:CC:78:DA:74:FC:9E:80:AB:0A:8A
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019D26CD1C6B946B0E612B4A4753A8E3BB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1898
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: PPMSN5ftVbVmFA7MLiS8HWouZbQ.roa (hash: HtUbwNMUWX3DsqRNwPU8T/yihNDfkh2LcL+11x+HCT8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: XhZvN1kr1OwDjm5261XIG4MdRXhQWu4BMTKsmXF0N4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1c:6b:94:6b:0e:61:2b:4a:47:53:a8:e3:bb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=8bd71c0b458324c9b2d1cc78da74fc9e80ab0a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:75:5a:f5:dc:60:60:a9:67:db:86:90:10:
73:db:fc:50:c1:51:16:a2:4f:de:16:6c:59:5c:9e:
21:f2:3b:d0:db:07:68:2e:64:13:87:b8:98:0f:d0:
98:42:c0:01:75:ce:8d:f5:d9:52:bc:5c:e9:6c:e6:
f9:16:ab:4f:ae:0f:60:ad:33:7c:3c:3d:dd:ac:5d:
21:d2:99:31:97:ed:d0:e2:d8:15:70:bd:e5:80:5b:
16:7b:5f:68:93:0b:2b:89:b7:45:10:9a:f4:be:72:
e7:8c:11:32:70:86:de:f7:71:9e:92:26:39:db:fb:
df:58:b6:8d:5f:a4:5d:05:32:31:28:d9:9d:98:8d:
d3:3f:ef:ba:93:98:e7:c3:b5:16:5b:fe:b2:12:1c:
81:f2:56:3c:fe:97:bc:e4:7e:d9:4c:ad:12:d2:50:
cd:95:bb:3b:ad:00:6c:00:fc:79:7c:19:7b:d1:e0:
b7:59:fd:6e:01:fe:41:e3:67:2a:04:dd:c8:7b:75:
6d:cd:b7:e2:84:57:5d:32:3c:a7:47:fb:f6:a5:bc:
30:80:bc:49:0b:d7:f3:87:89:aa:46:b3:82:62:75:
ce:c6:f1:a2:dc:b7:5b:4f:68:fe:f5:7d:59:d7:68:
1c:8d:71:d2:c4:7b:52:35:36:e1:52:70:05:f5:81:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:1C:0B:45:83:24:C9:B2:D1:CC:78:DA:74:FC:9E:80:AB:0A:8A
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fe:44:17:b5:d0:33:63:78:5e:91:52:92:dc:6c:29:3e:d4:
ba:b3:b6:2c:da:81:e7:9c:32:bb:7b:d5:99:ca:4b:b2:b3:5e:
8c:4f:fb:72:96:7a:d0:35:02:04:8b:81:12:4e:4e:fb:b7:db:
b9:34:06:0c:b3:09:8e:a5:3d:55:8c:15:f8:c5:01:ad:93:6e:
8f:16:54:a8:2a:3e:c3:91:04:ac:d1:23:37:55:44:2c:2f:b8:
8c:04:a8:82:28:27:9c:9e:bc:94:da:22:75:9e:7a:2c:c8:7e:
b3:f3:55:74:8f:ca:34:06:5c:2b:43:74:bf:5a:af:48:6a:c4:
f4:22:c3:ff:4f:8d:2d:58:f8:76:23:bf:2b:52:86:9f:4c:77:
0f:7a:ba:ca:e0:a6:48:c3:b1:43:1a:97:bf:fb:01:ff:8f:a9:
a9:bb:b5:65:52:13:22:ed:18:21:f2:9d:61:35:0e:09:c0:29:
f1:15:1c:72:d3:57:4d:f2:72:72:bb:ad:6c:01:e8:c5:15:95:
53:2d:2e:33:1c:b7:03:d5:09:78:8e:c3:c7:be:9e:cc:3d:99:
f7:a7:f1:78:99:cf:9a:f5:5f:31:9d:3e:99:ab:e8:29:24:1f:
d9:0d:7a:24:ff:a8:42:40:6b:cf:a2:59:9c:38:c7:85:0f:33:
d7:29:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:40 2026 by rpki-client