Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: dPfCz8xm5y5fhem9erWUeohdgAL9RVc4tkjHQY3D1Hw=
Subject key identifier: A7:81:E6:EB:6D:CB:24:3F:97:9E:43:3F:58:E2:CD:A2:3C:23:67:43
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 01A06D951B2E0DAB62F0B01DC58E2A37FC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:23 +0000
Manifest this update: Fri 04 Sep 2026 18:01:23 +0000
Manifest next update: Sat 05 Sep 2026 18:01:23 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: buNaznHHsG/bAImqDKvmUKy6iQ1UMYKdQYrPFrECxao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:1b:2e:0d:ab:62:f0:b0:1d:c5:8e:2a:37:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Sep 4 18:01:23 2026 GMT
Not After : Sep 5 18:01:23 2026 GMT
Subject: CN=a781e6eb6dcb243f979e433f58e2cda23c236743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:9a:a2:c6:cf:57:f6:7d:66:fa:d9:ce:4f:
de:3d:a0:05:ae:33:05:cb:2f:d9:9d:e7:4c:9a:d8:
16:c7:bd:ea:d7:05:f6:22:44:02:77:c7:e6:8d:36:
ce:15:f1:16:89:cb:01:e8:0c:f4:a1:41:2e:e9:f5:
78:fb:ca:7b:9b:ab:22:f4:00:d6:3b:4e:19:84:6a:
87:4a:b3:24:eb:c2:fd:0c:3e:2b:e3:ff:00:ee:a8:
39:02:63:1c:f7:0a:40:bc:64:2d:3b:d0:4c:70:ba:
21:bf:62:73:3e:4e:41:d2:53:17:2a:ba:7e:a6:77:
8e:6d:44:29:89:4d:9e:8b:b9:35:1f:97:b2:d3:67:
d8:e3:5e:0f:d3:6d:a8:72:55:a9:bc:16:5a:63:15:
72:3b:cf:fc:72:03:9a:25:9c:80:61:4e:00:96:fe:
59:32:ef:96:d8:01:e7:96:69:9f:5b:b2:c9:10:37:
0d:db:44:30:83:e3:20:d9:cc:7a:47:57:ec:e5:fa:
96:53:55:6b:08:af:7a:27:7b:d1:20:c5:e6:b6:61:
64:ae:0c:65:1d:5a:a8:a3:a3:62:e4:d6:5b:fc:c4:
d0:0b:03:9e:6b:f8:69:51:15:c9:aa:37:05:b8:ca:
48:99:26:41:5d:0d:63:b9:c6:60:ba:e9:c3:85:d4:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:81:E6:EB:6D:CB:24:3F:97:9E:43:3F:58:E2:CD:A2:3C:23:67:43
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:9d:d5:03:a2:4f:e7:7d:50:ff:65:15:f7:bf:2f:86:64:
c0:ed:a7:cf:46:dd:1e:fe:cd:21:79:1a:6d:7b:90:29:82:81:
b6:aa:b1:62:b6:91:fc:b2:72:3e:04:99:35:f4:9b:00:fe:6b:
e1:b0:ff:a6:2e:de:b6:7d:1a:82:f6:a1:8b:3e:af:03:07:1f:
b7:9e:70:41:e0:62:f4:cd:36:d4:8d:27:71:c7:8f:b4:06:c2:
20:5f:38:8f:e3:f0:2f:22:57:3e:0f:75:12:b3:34:53:77:77:
34:1a:52:50:47:b8:45:a8:3d:af:ec:22:57:7b:87:3a:96:ca:
15:b0:9a:c0:ee:31:50:e9:54:1a:1f:db:76:c0:3d:fb:12:cc:
7d:b4:89:c6:4a:43:c9:9f:b2:88:00:46:f3:01:3c:7c:8d:cb:
d6:ed:7e:11:6c:e3:29:11:e3:03:dd:fe:be:bf:82:02:f8:c8:
3b:24:63:91:66:8a:be:69:67:94:00:41:69:5b:61:51:32:a7:
2b:d7:ad:55:5f:88:fd:8f:97:96:f9:50:a6:65:d3:9b:70:e1:
6d:dc:ca:6e:56:07:91:22:2c:5e:0e:a2:02:31:32:c8:a5:86:
d5:99:f5:a4:d0:f7:c9:40:4a:9e:bb:05:64:13:b8:59:15:59:
6e:ae:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:15 2026 by rpki-client