Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: Vf5fMPESXfyE/RLnMeWJJ+4MK9x5202mZ6DSCnNDFW0=
Subject key identifier: C6:1F:EC:6C:3F:E6:D5:74:6E:A6:6E:57:70:DC:3C:BB:30:AA:D8:4D
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 01A002B8A70E69BF9552FAE2090828DC99CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0F63
Signing time: Sat 15 Aug 2026 00:00:50 +0000
Manifest this update: Sat 15 Aug 2026 00:00:50 +0000
Manifest next update: Sun 16 Aug 2026 00:00:50 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: rqh/zLZgLcInsdcyt3hQRC4nYaekvJ71oLUt9fMeoQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:a7:0e:69:bf:95:52:fa:e2:09:08:28:dc:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Aug 15 00:00:50 2026 GMT
Not After : Aug 16 00:00:50 2026 GMT
Subject: CN=c61fec6c3fe6d5746ea66e5770dc3cbb30aad84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:86:53:b9:98:76:34:1e:c7:36:5a:d0:73:
f9:2a:6e:a0:ec:85:9a:14:a6:2f:5a:12:16:8c:75:
f7:89:3a:de:bb:b6:ff:96:ef:0d:6d:10:67:0b:78:
a9:7e:99:66:12:55:c3:5a:92:c7:bd:c9:9d:30:47:
ce:7f:14:d0:e6:77:ea:a3:ae:8b:c6:ec:f8:94:7a:
dd:31:04:a5:f2:be:5c:79:59:dc:b8:c5:da:47:ff:
a2:4b:9b:52:fe:39:62:ba:4b:39:e9:b1:da:90:d3:
b2:4f:0b:4c:26:6c:f6:b6:8e:41:e5:6e:b4:85:e8:
ec:cb:04:1f:90:c1:fc:f7:9f:fb:e9:5d:4e:06:f2:
78:1f:69:df:08:e8:d6:bd:f4:e3:da:8b:9c:be:79:
72:94:8a:16:8c:69:ec:81:eb:e6:57:79:25:3d:ee:
71:24:3e:53:0e:4a:0e:c2:b4:b8:4a:13:23:a5:ed:
cd:ab:97:35:5d:31:56:cd:5c:3d:ea:f5:41:a8:ef:
0b:77:36:3a:7f:1f:9e:3c:26:a4:81:a2:8d:30:c6:
0a:b1:f7:29:2b:f7:4b:04:67:de:76:29:3c:dd:ff:
02:5f:91:d4:a1:69:31:87:1d:6c:ef:10:9d:7c:51:
ed:bb:66:b3:cf:d7:b7:a6:15:d0:0c:97:1a:3b:65:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:EC:6C:3F:E6:D5:74:6E:A6:6E:57:70:DC:3C:BB:30:AA:D8:4D
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2a:72:83:4c:19:1f:35:4b:cc:6e:97:d0:2f:2f:04:96:f5:
a6:29:d3:6f:c3:1f:59:59:ba:2c:2a:24:f4:00:9c:fa:24:56:
cd:17:f1:0f:26:03:b2:fa:e3:6f:78:98:36:05:38:a2:fb:73:
44:e3:d1:ee:8e:c7:42:bb:99:25:b6:af:3a:49:78:6c:41:97:
e5:3c:24:b5:46:22:07:7b:93:74:bb:89:32:57:df:be:90:35:
86:fc:ff:aa:4f:c2:db:69:07:04:fd:17:d3:c2:a5:2a:f2:35:
f0:fb:df:ee:64:01:68:f7:65:3d:91:20:96:be:73:93:50:fc:
44:f9:34:73:a3:42:9c:48:6a:fc:15:f7:75:35:4e:fc:6c:c0:
21:cd:bc:f4:a8:45:ed:49:6b:71:1c:c6:23:38:b2:8d:0d:68:
e1:95:aa:c2:60:4f:9e:2b:07:14:48:fa:2b:5e:a1:20:07:e2:
32:fe:75:b7:8c:7d:17:25:a8:6a:85:7d:1f:b0:b5:9a:65:ae:
92:3a:89:57:bd:9e:0b:7c:09:88:a3:8b:a8:40:be:cf:22:7d:
58:a0:9b:72:02:cf:51:56:68:55:26:8c:13:cb:cd:6c:42:fd:
93:db:81:15:0c:ba:4f:b4:82:f2:94:75:e0:64:ff:5c:31:bf:
dd:42:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:29:31 2026 by rpki-client