Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: I6U20K4Qi8+G8NtrL5OFYCoWh7pzC89Bx/ncdDGWCyg=
Subject key identifier: 37:3A:EF:54:4E:1B:D6:53:60:C7:A7:75:58:0D:ED:30:07:C8:55:1D
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 019D09D54C61207094F28F65E4812377827F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 08F3
Signing time: Fri 20 Mar 2026 06:01:06 +0000
Manifest this update: Fri 20 Mar 2026 06:01:06 +0000
Manifest next update: Sat 21 Mar 2026 06:01:06 +0000
Files and hashes: 1: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: HMjpbQ7Rb6w4boCzNEVeHRuDB6zVMgf/EdwV94C+0AI=)
2: vlOzrXADwVbr-4L_grlu0PIS3Rk.roa (hash: 3PRB7VQuDMBjsXiJij2GAncqz8RGuTBHCw9ZZ/+ej1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:d5:4c:61:20:70:94:f2:8f:65:e4:81:23:77:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Mar 20 06:01:06 2026 GMT
Not After : Mar 21 06:01:06 2026 GMT
Subject: CN=373aef544e1bd65360c7a775580ded3007c8551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:84:f1:54:1d:a6:8c:d3:8d:99:d7:1f:f0:
8b:ed:76:39:c3:27:40:da:04:ca:de:c1:12:88:66:
8d:08:a6:43:de:9a:d2:bc:bc:28:cb:57:a1:dc:e7:
ec:93:ac:29:68:5a:a2:0e:f3:b9:74:eb:e5:53:b8:
12:68:e8:71:9b:ab:7f:c9:99:94:98:45:dc:3d:d0:
7b:5a:d0:63:d0:da:24:87:35:64:c0:ca:a0:14:2a:
c5:bd:c9:33:8f:8e:05:72:be:00:91:d7:19:15:09:
00:37:b8:b2:56:a6:9e:68:c8:75:0f:71:90:7c:8f:
f2:bb:2c:03:4f:de:86:7b:64:5e:71:4e:57:29:80:
33:d8:01:41:6b:bd:ee:87:f5:df:54:83:f8:1a:e6:
a3:bd:bd:fe:93:22:75:e0:54:58:95:02:5e:02:08:
42:49:c4:33:25:67:38:f4:eb:cb:15:c1:bc:ad:0a:
71:73:9f:1d:f0:1b:39:cf:76:41:23:a0:e8:ef:1d:
30:4a:fd:02:fe:5f:3b:4f:f8:e2:08:1e:97:67:24:
a2:b2:3a:f9:e5:8f:31:7b:63:f7:d1:89:ff:2e:45:
be:e7:35:b7:98:2f:53:c1:c3:a7:61:c1:bf:95:6c:
c1:fc:8f:4f:e3:d6:83:d7:c0:5b:68:ec:90:3b:8c:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:EF:54:4E:1B:D6:53:60:C7:A7:75:58:0D:ED:30:07:C8:55:1D
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:f0:7d:cd:f7:65:57:5d:0f:e9:78:31:e8:57:d6:3b:5a:
fe:65:dd:28:40:89:29:1f:f6:9a:eb:db:ec:8a:16:2f:91:d1:
db:1b:3b:da:4c:65:d5:57:e8:8c:3b:86:70:6e:6d:7a:c3:3d:
1c:39:08:d2:73:53:95:e8:ba:6d:78:29:cc:3c:2f:f1:ff:e9:
e4:a1:f2:99:11:56:bc:bd:e1:56:ae:98:4c:69:97:9e:ef:c5:
07:de:6f:6c:d7:3a:d6:9d:d9:3b:56:d1:8d:5b:60:1d:53:d4:
c3:35:46:ba:d9:42:4c:ab:27:5b:ef:b5:35:1e:22:d6:2f:86:
b1:01:2a:7c:30:4b:9d:18:ac:a7:f3:e6:dd:01:80:4c:87:df:
a0:f6:8c:72:07:16:7b:c7:00:b8:d5:c6:fe:b2:e5:cf:8e:a6:
aa:57:91:c9:0a:f3:cc:1c:b1:7f:a9:15:75:35:e3:eb:46:f8:
ef:ca:9c:01:24:00:cb:0f:a5:9f:21:ed:e6:18:91:6c:2f:ce:
2c:10:46:36:7e:a6:eb:65:f3:28:05:00:57:9a:e2:58:43:50:
10:19:9f:81:7a:a8:c3:9d:c2:48:79:95:40:28:62:e8:3f:f1:
cb:66:7a:85:34:3a:a7:6c:88:9f:3f:a9:ca:1c:65:58:3d:dc:
6a:7f:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:56:41 2026 by rpki-client