Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: u1gRV3t406pIuESQro0k6xUws977owKjQjPfuABJMM8=
Subject key identifier: 34:FD:B4:0B:0F:BA:F3:89:12:A0:0D:DC:BF:01:12:C2:60:CC:60:CC
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019E314E72D1978DCF275A50FF5FB0FF59FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0E72
Signing time: Sat 16 May 2026 15:01:25 +0000
Manifest this update: Sat 16 May 2026 15:01:25 +0000
Manifest next update: Sun 17 May 2026 15:01:25 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: cKSUcrpS0kB0bJb+HLIykgLT7uXlCJdFZeLzyp8JRMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:72:d1:97:8d:cf:27:5a:50:ff:5f:b0:ff:59:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: May 16 15:01:25 2026 GMT
Not After : May 17 15:01:25 2026 GMT
Subject: CN=34fdb40b0fbaf38912a00ddcbf0112c260cc60cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:c7:84:f2:89:38:a8:af:4c:44:5f:1a:f4:
e8:8d:e7:d9:4e:b0:57:fe:dc:4d:16:e8:0b:e5:31:
e0:3c:0d:85:4c:03:7a:c6:ff:b2:12:e8:91:63:07:
b0:5e:53:2c:cf:a3:a6:e1:9e:95:28:df:47:cd:ee:
c3:75:ea:b7:e4:82:44:e3:ed:c1:5c:95:d2:54:aa:
a7:71:57:d5:20:2e:cd:61:d3:45:ba:9a:8e:e2:43:
d9:fb:11:b4:99:21:e0:a8:d3:47:30:95:2f:3c:fc:
12:12:42:ca:6f:dc:59:04:25:12:31:87:28:3b:e8:
ae:1c:82:f8:2b:ce:23:84:a5:78:37:f7:3a:50:a1:
32:fd:68:12:bf:37:e8:a9:06:d5:ee:ce:3e:5b:11:
fe:39:1a:ed:57:85:64:bf:d2:bc:ae:db:58:7d:68:
ac:1f:23:4b:39:27:be:b5:53:8c:98:14:7d:5b:a5:
64:b1:70:3c:cf:c2:06:ab:48:ac:3e:ed:73:60:89:
cb:04:fc:96:61:a3:78:fe:a6:bc:9d:fa:9a:f5:f0:
d3:9a:77:25:88:30:ce:9d:d1:bb:96:aa:ab:c1:46:
d6:f4:3f:33:23:bf:79:9d:19:fc:51:11:3c:5f:cd:
38:0f:b7:54:1c:ff:93:97:1a:6c:f8:13:21:0e:1b:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:B4:0B:0F:BA:F3:89:12:A0:0D:DC:BF:01:12:C2:60:CC:60:CC
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:54:a6:c1:e2:be:26:17:e0:3a:af:b5:9f:dd:47:45:74:
6c:6f:fe:25:8c:44:68:18:65:6b:27:68:f9:56:d0:1b:6d:8f:
62:cf:88:f6:45:13:5c:3e:e3:dc:cd:4e:d5:7e:c7:56:85:fd:
c2:76:00:77:1d:9b:5a:99:be:75:54:18:d3:bd:f8:c9:cf:ec:
f8:53:3f:f5:c5:15:73:42:f1:f9:d1:20:b1:67:12:e2:f2:28:
e8:47:68:12:64:76:ac:80:d8:53:74:8e:c3:80:cd:df:b8:c0:
53:76:9b:ef:3a:91:a3:a1:31:ea:30:84:9b:82:e5:e4:a3:94:
45:56:d3:1d:58:e0:99:4b:61:78:4d:f7:d7:0c:86:c6:3c:7d:
e5:e9:76:05:c1:fb:1c:2f:64:a3:f9:45:a5:54:08:ba:7a:aa:
d4:c7:89:cc:ab:06:22:b3:bf:b0:bc:33:0f:b8:ac:64:c0:d1:
91:64:3e:2a:b9:56:e8:fe:99:63:8f:f1:c1:61:91:2d:2c:2d:
7b:94:09:d5:ef:9c:91:a3:41:24:88:bd:da:91:fb:72:4c:0f:
62:b6:96:20:93:9b:8c:04:2f:4c:d4:55:5c:cb:86:1d:81:a3:
44:f0:dd:15:8f:39:c2:e7:4a:86:80:22:67:92:a3:98:d3:b3:
35:b7:c3:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTnLRl43PJ1pQ/1+w/1n8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTRiMDliZWVhYjkwNWZmNDFlNjgxMzI1NjA1NGIxODIy
OTQyOTcwHhcNMjYwNTE2MTUwMTI1WhcNMjYwNTE3MTUwMTI1WjAzMTEwLwYDVQQD
EygzNGZkYjQwYjBmYmFmMzg5MTJhMDBkZGNiZjAxMTJjMjYwY2M2MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA7HhPKJOKivTERfGvTojefZTrBX
/txNFugL5THgPA2FTAN6xv+yEuiRYwewXlMsz6Om4Z6VKN9Hze7Ddeq35IJE4+3B
XJXSVKqncVfVIC7NYdNFupqO4kPZ+xG0mSHgqNNHMJUvPPwSEkLKb9xZBCUSMYco
O+iuHIL4K84jhKV4N/c6UKEy/WgSvzfoqQbV7s4+WxH+ORrtV4Vkv9K8rttYfWis
HyNLOSe+tVOMmBR9W6VksXA8z8IGq0isPu1zYInLBPyWYaN4/qa8nfqa9fDTmncl
iDDOndG7lqqrwUbW9D8zI795nRn8URE8X804D7dUHP+Tlxps+BMhDhvfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT9tAsPuvOJEqAN3L8BEsJgzGDMMB8GA1UdIwQY
MBaAFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDIt
NGJjZTQyNDcyM2Q5LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MDBlYjYtODY4Yi00YTMwLWI0MDItNGJjZTQyNDcyM2Q5
LzEvdEJTd20tNnJrRl8wSG1nVEpXQlVzWUlwUXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2ZUpsHi
viYX4DqvtZ/dR0V0bG/+JYxEaBhlaydo+VbQG22PYs+I9kUTXD7j3M1O1X7HVoX9
wnYAdx2bWpm+dVQY0734yc/s+FM/9cUVc0Lx+dEgsWcS4vIo6EdoEmR2rIDYU3SO
w4DN37jAU3ab7zqRo6Ex6jCEm4Ll5KOURVbTHVjgmUtheE331wyGxjx95el2BcH7
HC9ko/lFpVQIunqq1MeJzKsGIrO/sLwzD7isZMDRkWQ+KrlW6P6ZY4/xwWGRLSwt
e5QJ1e+ckaNBJIi92pH7ckwPYraWIJObjAQvTNRVXMuGHYGjRPDdFY85wudKhoAi
Z5KjmNOzNbfD5g==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:35 2026 by rpki-client