Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: ei6hwhtOPMKXurN0qY5vok2/MLnzLdyOsg7J5bSTxys=
Subject key identifier: 9A:3E:00:D3:17:F4:33:11:DF:A3:FD:67:ED:40:38:8C:93:3B:43:34
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019D37527D9E557D1327874DAB2B9198E206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0DF0
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: PryhJuPWT5nqb9oyXQgOBbIOUUk.roa (hash: cS2lZTx5DGqFrOEx5ExlTcVafDaIZ/DGkeU2FaJuTW0=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: b6rxsZthkVciCGoeTjcN4YNF2fp+nMogUzjW+p2QbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7d:9e:55:7d:13:27:87:4d:ab:2b:91:98:e2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=9a3e00d317f43311dfa3fd67ed40388c933b4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:02:54:e2:e3:9a:54:02:cc:b7:2b:27:23:
62:02:b0:11:b5:ba:1c:04:8b:b5:86:8d:de:f9:b8:
e7:b1:fc:42:92:10:83:19:7d:83:dc:68:1a:42:5f:
56:01:15:df:49:76:b0:ab:40:2c:27:7d:2a:d6:95:
43:b4:e7:90:08:bf:e1:10:5b:96:85:f7:52:ff:e7:
dd:67:42:b6:cb:e1:06:1e:be:63:ec:a7:05:82:b5:
e6:92:ad:4b:ea:a6:5c:d9:3c:9e:fe:ff:07:54:71:
74:68:ae:9d:b3:f9:57:4c:32:d7:4e:09:44:6c:45:
24:32:ea:c7:05:ce:a6:49:5a:4d:fd:c1:a1:79:2b:
18:51:a9:8e:a1:7f:b3:49:51:18:6e:5b:75:75:dc:
cd:54:f0:0e:10:e0:58:91:57:d4:30:11:a0:d5:c7:
86:f4:1b:a8:92:63:49:63:1e:b3:32:47:cb:b5:c1:
3e:e9:14:32:83:84:25:86:ba:25:b3:6a:52:18:39:
ad:61:f6:47:42:9c:5f:d9:90:97:92:e2:d1:f9:8a:
43:4e:fd:13:ee:bb:71:ef:ca:9c:f5:10:d8:43:97:
07:3f:96:30:a1:00:5c:0c:f1:c7:ab:cf:fa:82:f7:
29:7c:d2:0b:8a:da:62:fd:09:a2:98:b5:61:7a:f9:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:00:D3:17:F4:33:11:DF:A3:FD:67:ED:40:38:8C:93:3B:43:34
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:42:7a:2d:ac:45:31:fe:86:ad:e5:ae:4e:72:ac:2c:49:
7d:92:9d:67:80:6c:d8:06:c7:17:29:9d:43:67:15:98:79:e3:
38:82:b1:7e:fc:53:79:f4:4c:5e:a6:68:31:53:ce:8e:3a:e3:
3a:0a:ae:d4:14:14:54:e8:7b:c4:f3:fd:d2:c4:94:b6:6a:1e:
e8:0b:7e:b0:24:e1:6f:54:15:f2:d2:2d:51:64:c6:12:a7:82:
bb:a2:99:9c:75:fc:4d:f8:d9:f7:03:eb:88:ea:e3:f7:4e:76:
d0:6d:fe:56:8a:66:35:f1:53:b6:55:1c:c2:00:8d:6f:27:43:
09:30:1f:ed:cd:11:1c:a0:1a:9e:d5:06:e0:22:ac:59:8c:0b:
e2:5c:fb:66:62:b2:d6:5c:bf:c7:2b:51:9b:e2:a7:49:74:d1:
7f:6f:09:8f:b6:39:9b:6e:95:b9:00:d1:50:f8:87:a7:5b:7a:
7b:2e:10:fb:3c:ca:79:87:16:ce:ac:a0:40:aa:4d:f3:1d:b6:
06:3b:d5:fd:67:d4:8f:8f:df:94:9b:20:77:a6:9c:bb:83:4f:
d9:15:2f:72:0a:22:b3:c2:1a:c5:ec:bc:8f:d4:f8:88:3a:cf:
49:24:49:4a:e6:a1:5c:a5:69:d9:7c:01:b9:b7:c3:0e:6a:f6:
b3:23:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:05 2026 by rpki-client