Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: rpb4cm1Lvp6LhpOd6jkzKN3FKkb20j1yn8XpEVKMPn8=
Subject key identifier: 76:7A:20:D4:F1:58:BE:15:01:0E:53:CF:41:E7:26:92:F1:76:2A:13
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 01A15E55C8A087B30B4E2140EFD17D156F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 1017
Signing time: Wed 21 Oct 2026 12:00:42 +0000
Manifest this update: Wed 21 Oct 2026 12:00:42 +0000
Manifest next update: Thu 22 Oct 2026 12:00:42 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: ArtLfY0NF2Z92svRSWxw2ZkYbNZGd22yoLSytrEk/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:55:c8:a0:87:b3:0b:4e:21:40:ef:d1:7d:15:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Oct 21 12:00:42 2026 GMT
Not After : Oct 22 12:00:42 2026 GMT
Subject: CN=767a20d4f158be15010e53cf41e72692f1762a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:fb:08:13:68:be:ac:2b:89:1d:79:e8:e1:
f3:6e:29:c2:1d:4b:79:f6:8a:7f:1d:ad:38:b7:58:
f0:7d:ac:9d:5e:b9:6a:94:13:89:33:90:98:fd:2f:
86:18:66:b1:3d:15:24:5b:57:14:f4:06:11:8e:4b:
d5:9a:1e:b9:14:de:5e:9a:2a:c0:2d:d2:1a:ae:13:
76:12:92:3c:c9:fe:52:84:b5:40:18:ed:c8:c8:98:
ce:99:11:48:f7:f2:a8:5e:f5:fe:43:1d:2b:33:25:
83:b8:7f:1b:6f:12:86:23:fa:97:47:de:44:d3:1c:
11:a3:75:b4:fe:75:72:c5:b4:7a:83:e5:f6:76:e5:
7c:8b:e9:ea:c4:24:98:3f:6b:20:ff:f9:d9:6b:07:
a7:6a:c3:8f:25:7e:9f:db:ea:ac:a4:11:6b:9e:c1:
e3:d8:39:7c:7c:5b:03:06:e4:92:39:fa:da:3c:f0:
88:1b:ac:85:33:31:70:44:9e:3e:69:54:26:08:34:
88:16:19:a8:12:56:43:6f:4f:0a:39:11:0d:e9:f7:
25:1f:9f:06:ed:48:8b:78:08:a9:9e:f1:71:80:52:
73:8c:63:a0:d5:9a:b2:a5:83:72:80:c5:c3:c9:08:
ac:45:6a:07:df:89:66:2d:80:23:24:f6:42:f6:8e:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:20:D4:F1:58:BE:15:01:0E:53:CF:41:E7:26:92:F1:76:2A:13
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:20:f8:bd:73:6c:72:92:9a:ac:62:bd:da:2a:22:86:19:60:
5e:d8:45:85:fe:ab:3d:04:76:a7:15:33:a9:5b:19:68:5e:9e:
41:e8:03:86:94:ef:a0:e7:3d:2b:0e:0f:7b:a0:cd:9e:eb:a4:
cd:c6:ca:b9:88:3d:0d:0b:63:e8:aa:01:70:09:04:91:22:65:
21:b8:54:0f:8b:9f:1e:2b:dd:c9:b8:ad:1d:63:50:dc:ba:db:
d0:6c:80:53:c6:4f:89:7e:0e:f4:6e:9b:10:12:ed:1f:20:68:
70:7c:65:80:f0:9d:08:8e:e2:86:d5:f9:82:2e:af:c4:62:58:
ec:eb:f2:fd:7d:e1:a2:bf:4e:24:50:5d:49:b7:62:1e:0d:59:
7d:71:50:7b:e4:8a:3b:e3:ed:d8:ec:00:80:54:44:a5:8b:3d:
a2:41:20:73:da:24:40:c2:86:af:f8:3d:6a:f7:e1:27:38:53:
ce:82:45:a3:5c:ed:8a:d3:0a:0f:f9:bf:62:44:23:4a:7e:7c:
2f:cf:e7:93:29:40:05:13:71:b1:2d:01:8f:88:69:2b:77:7b:
27:51:63:5b:df:ee:64:7a:3c:df:c4:c1:99:19:31:41:3f:42:
96:6e:3c:11:42:f8:fc:9b:bc:0d:61:a1:06:fe:8f:23:95:73:
a5:10:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:14:48 2026 by rpki-client