Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: j+caiXYrgFeU/vmR6UJtPga8qvu4k0NpKbVj21zISGg=
Subject key identifier: 26:31:15:DF:4B:26:91:46:F7:99:39:55:2F:7B:6B:35:FA:E9:A9:62
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019D2A3BD9EB34AF4407FBF08405DFBCE834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 062C
Signing time: Thu 26 Mar 2026 13:00:58 +0000
Manifest this update: Thu 26 Mar 2026 13:00:58 +0000
Manifest next update: Fri 27 Mar 2026 13:00:58 +0000
Files and hashes: 1: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: hps1xTj8Lat6T7uh2s3Sz+wAcQENwbNog29sXKKnbag=)
3: u2WfF9In72cKbk56xhUnLtQds5E.roa (hash: lXqEAMd861hGDluqkgvGTYLqDE2FQJtnTBvspyPWGQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:d9:eb:34:af:44:07:fb:f0:84:05:df:bc:e8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Mar 26 13:00:58 2026 GMT
Not After : Mar 27 13:00:58 2026 GMT
Subject: CN=263115df4b269146f79939552f7b6b35fae9a962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:ce:b3:88:06:ad:33:79:fa:37:d9:95:2b:
ea:aa:94:9b:af:2c:75:8a:9e:32:1b:f0:69:89:e4:
e8:55:9d:e2:1e:08:4d:44:8e:7a:fe:6a:e3:d7:ac:
65:e7:b2:bf:05:ac:ee:5b:36:f5:26:e2:1b:1a:3c:
14:3e:15:49:1b:0f:93:ab:b5:05:84:48:aa:ef:12:
5f:63:dc:53:42:c5:58:48:45:62:a5:8a:77:d8:f9:
60:9d:d6:0b:b3:ae:5c:57:c5:dd:14:93:ec:61:d6:
55:47:0f:44:44:c8:35:7c:bb:0d:a4:5e:24:e4:58:
01:cd:77:ee:5e:fa:55:22:15:19:27:c7:64:46:1f:
06:c3:6d:84:c0:0e:cd:01:0a:52:dc:58:48:74:95:
b0:0d:d0:6e:3d:0a:a7:21:5e:ec:04:57:ee:ae:b9:
e6:08:72:54:e4:dd:46:dc:c4:5b:2d:4e:12:e4:a7:
d0:4f:63:8f:3b:6c:7d:96:50:d6:52:22:ca:d2:06:
71:84:50:3f:e2:1d:7f:4f:87:13:3a:ba:cd:c3:fd:
14:2f:97:80:8f:0d:65:ee:84:7f:f2:a7:6b:c9:1d:
55:69:b4:1d:6a:b2:94:1b:81:6b:f3:76:ce:d5:45:
08:d2:ee:f6:22:dc:c1:a0:5e:29:81:a1:a0:f7:19:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:15:DF:4B:26:91:46:F7:99:39:55:2F:7B:6B:35:FA:E9:A9:62
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:30:2c:5a:e7:b3:92:8a:90:4d:ba:04:c0:d9:07:a9:95:dc:
c3:b5:dd:f3:86:9e:7b:04:be:ef:9b:bf:1f:c8:53:46:8a:53:
43:2d:63:38:10:8c:4f:6d:93:25:af:be:16:47:82:bc:4b:5e:
78:a3:fc:ac:10:63:c2:ba:06:43:bf:e8:4a:88:2d:43:23:c5:
88:69:6c:dd:8b:5c:bd:84:e4:cf:5b:1b:81:67:08:72:de:40:
dd:8a:01:23:0d:d9:d7:9c:00:63:73:66:66:b3:8e:d0:5c:8e:
ac:01:5f:7a:9f:0e:6c:2d:36:8f:aa:be:cc:bd:5e:16:88:55:
96:0e:ef:36:98:5e:9d:bf:36:03:9c:f0:fe:c3:6c:8a:13:a5:
07:9a:bf:9e:76:79:88:8e:75:08:d7:ed:21:21:cb:e6:d7:44:
25:81:24:3e:b8:ef:7f:3b:36:3a:39:94:df:01:80:11:fd:f7:
6d:32:0b:0f:24:b0:55:cb:2b:c4:e4:c0:9f:1b:43:12:a4:ca:
da:0c:64:9e:06:12:bb:4a:3d:8c:92:23:b2:98:25:47:a1:6c:
e2:3b:a8:e3:4d:ce:fc:ad:22:aa:d9:a3:d2:2c:7f:ba:fa:53:
67:62:c1:2d:37:b5:ce:e0:b9:75:dc:a5:86:21:63:06:95:4c:
72:5a:ce:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO9nrNK9EB/vwhAXfvOg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjYwMzI2MTMwMDU4WhcNMjYwMzI3MTMwMDU4WjAzMTEwLwYDVQQD
EygyNjMxMTVkZjRiMjY5MTQ2Zjc5OTM5NTUyZjdiNmIzNWZhZTlhOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPzOs4gGrTN5+jfZlSvqqpSbryx1
ip4yG/BpieToVZ3iHghNRI56/mrj16xl57K/BazuWzb1JuIbGjwUPhVJGw+Tq7UF
hEiq7xJfY9xTQsVYSEVipYp32PlgndYLs65cV8XdFJPsYdZVRw9ERMg1fLsNpF4k
5FgBzXfuXvpVIhUZJ8dkRh8Gw22EwA7NAQpS3FhIdJWwDdBuPQqnIV7sBFfurrnm
CHJU5N1G3MRbLU4S5KfQT2OPO2x9llDWUiLK0gZxhFA/4h1/T4cTOrrNw/0UL5eA
jw1l7oR/8qdryR1VabQdarKUG4Fr83bO1UUI0u72ItzBoF4pgaGg9xlBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYxFd9LJpFG95k5VS97azX66aliMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzAsWuez
koqQTboEwNkHqZXcw7Xd84aeewS+75u/H8hTRopTQy1jOBCMT22TJa++FkeCvEte
eKP8rBBjwroGQ7/oSogtQyPFiGls3YtcvYTkz1sbgWcIct5A3YoBIw3Z15wAY3Nm
ZrOO0FyOrAFfep8ObC02j6q+zL1eFohVlg7vNphenb82A5zw/sNsihOlB5q/nnZ5
iI51CNftISHL5tdEJYEkPrjvfzs2OjmU3wGAEf33bTILDySwVcsrxOTAnxtDEqTK
2gxkngYSu0o9jJIjspglR6Fs4juo403O/K0iqtmj0ix/uvpTZ2LBLTe1zuC5ddyl
hiFjBpVMclrOlg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:32 2026 by rpki-client