Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: 8tWqydAzPOVPBS49Fut610t0Zn3WozGJlnKWjf+Hmus=
Subject key identifier: 06:E3:AE:E8:C8:3C:E0:A7:B7:D8:30:2A:91:88:33:E6:6D:3D:37:1E
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 01A15EFB2B01AB620E3CB2C1DD09FCBB8816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: 012F
Signing time: Wed 21 Oct 2026 15:01:21 +0000
Manifest this update: Wed 21 Oct 2026 15:01:21 +0000
Manifest next update: Thu 22 Oct 2026 15:01:21 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: Rg84XhhnbJLPoFwc2XzOjoW+p5yPP7Lss3JraWURIts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:fb:2b:01:ab:62:0e:3c:b2:c1:dd:09:fc:bb:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Oct 21 15:01:21 2026 GMT
Not After : Oct 22 15:01:21 2026 GMT
Subject: CN=06e3aee8c83ce0a7b7d8302a918833e66d3d371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:4e:2e:92:6b:d5:77:e6:50:a5:1c:ba:e4:
13:94:f7:6b:31:c5:a7:9a:5f:b0:9a:38:6b:ec:9f:
75:67:bd:22:f5:fe:78:8c:aa:5d:42:36:55:6d:e8:
7a:aa:e3:db:c9:c3:74:17:47:9b:1a:59:0c:5a:c8:
3e:30:13:8b:12:87:79:1b:e4:14:ab:59:af:d9:00:
fe:52:de:18:98:f1:05:df:37:95:b3:c7:7d:e2:cb:
0b:d1:99:2a:3f:55:85:30:63:5d:b3:1a:ab:a2:2b:
c4:46:59:6c:12:6d:d1:e0:26:41:2f:86:c9:be:dd:
d0:e9:67:93:b7:15:8c:1b:35:b0:ae:77:cc:a5:8e:
1c:a0:43:5b:70:39:7b:8e:2e:fe:1c:7a:67:df:bf:
7a:73:dd:6a:f9:5d:ca:e3:f3:60:7d:89:29:8b:85:
03:cb:e0:27:4c:a0:fa:db:b2:c6:ff:79:fd:a0:50:
db:8e:ba:5a:37:6b:90:aa:d1:00:71:4d:75:fe:f1:
24:0e:c4:ef:bd:23:26:84:26:d3:24:22:45:b3:00:
da:e0:f8:16:9c:1d:50:0e:10:08:f7:ed:49:26:6d:
ca:b6:e4:43:bd:e2:f6:05:31:e3:1a:c9:7a:9c:31:
7b:4b:9f:cd:c7:9f:03:a4:d2:e9:ad:ee:f1:46:e5:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:AE:E8:C8:3C:E0:A7:B7:D8:30:2A:91:88:33:E6:6D:3D:37:1E
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:64:9a:c1:93:ce:68:bd:48:6e:b9:fe:3e:29:49:5e:99:ea:
ba:7a:29:34:24:dc:cb:29:1e:1c:22:eb:be:0e:20:82:cc:6d:
fe:5b:fe:23:e5:16:7d:77:0b:8b:57:c8:a4:90:40:06:db:47:
b3:72:73:52:41:fa:e6:18:93:d9:85:1b:5f:6d:df:b2:88:16:
98:9d:11:49:ee:99:95:7d:6c:af:b4:35:8c:3a:05:3f:84:15:
7b:fd:a2:5a:e6:05:8d:88:ee:ec:8a:1a:36:12:98:8e:2f:7b:
a1:4b:bb:68:24:66:78:01:3b:a0:19:b1:0b:2b:92:ed:d7:a9:
68:fe:2d:00:40:7c:ab:61:1e:c4:25:7b:2c:ad:61:b9:55:42:
48:2c:06:66:07:c9:65:83:3a:2a:25:75:56:38:83:ed:e0:e2:
e8:00:12:77:d6:cc:bb:22:a3:a6:fd:49:19:ee:45:3f:f2:2e:
12:9f:9d:a9:63:96:60:5b:30:bb:c4:c6:a4:1a:e8:d9:9b:4d:
e7:fb:c9:42:2b:e0:01:99:b3:cd:b8:9d:83:98:6c:5a:f8:10:
14:b7:74:b4:34:fa:82:fa:62:d6:99:44:c2:72:a8:6a:00:3b:
19:b9:45:c7:5d:b9:bf:8e:46:69:71:90:e7:2f:c8:23:9a:7a:
b7:1e:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:40 2026 by rpki-client