Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: YkXm05QWNPZdv0jQvIdssLiWYNUWa/CQYwjMh6lmIck=
Subject key identifier: 0D:B5:56:57:51:E7:0D:0E:79:06:96:7F:77:1E:43:D7:1C:23:0A:F2
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019D3752B50EF37DF7912F67E4EEE81622DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 08C2
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (hash: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: xxmpBQGU5jsjqGfpjfCKrvTS86tjBoLNwNjwnpg59c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b5:0e:f3:7d:f7:91:2f:67:e4:ee:e8:16:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=0db5565751e70d0e7906967f771e43d71c230af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:29:31:44:53:64:98:64:01:99:16:2c:9c:
3b:79:5d:a2:65:3d:b8:5c:b1:af:6c:d4:45:ca:ad:
a8:06:e4:f4:a5:93:ee:9b:99:d9:df:0b:7d:f7:fb:
4e:b8:4e:9d:97:eb:44:80:85:fd:24:86:98:1f:94:
fb:fa:ae:89:8f:1e:22:99:01:60:2f:20:ea:e2:89:
9f:d1:40:33:14:60:e6:c5:74:22:08:f8:76:2d:c8:
0b:2f:76:ba:7c:42:45:62:38:63:d3:12:93:13:0c:
61:61:e7:49:63:88:6f:c3:f5:3f:e0:49:e7:d0:fa:
62:6f:ac:ff:61:04:af:b6:90:81:66:a8:2f:38:c9:
63:67:ba:f6:30:e9:4d:36:15:23:b3:cd:e8:34:b2:
00:e7:1b:f6:89:9d:f8:93:d1:e5:90:d7:45:b1:bc:
a7:49:a9:e0:62:f7:9a:c1:3a:58:25:f2:33:4c:7e:
4a:94:97:fb:db:d8:21:f5:b6:9d:d8:7b:76:d6:da:
49:30:93:25:6d:3d:a4:47:5b:02:9d:28:f5:5f:7b:
c5:73:5f:34:d5:92:1d:95:2d:98:b7:1c:27:7c:dc:
98:92:36:cd:e4:63:4f:b6:1b:08:c0:cb:16:87:ef:
18:1a:ec:77:d1:97:5b:93:47:14:53:66:20:44:0d:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:56:57:51:E7:0D:0E:79:06:96:7F:77:1E:43:D7:1C:23:0A:F2
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2f:ad:6a:69:f0:ad:50:99:ed:d3:f1:0e:2a:70:eb:d8:48:
d4:d9:da:6b:e9:63:22:43:c4:2d:3f:b1:ad:27:f1:0b:99:c9:
ac:89:7c:bb:84:bb:cd:02:c5:f5:ac:72:5a:d8:91:3e:7e:3a:
ed:80:e8:cf:62:16:e3:5d:a2:3d:5d:85:df:41:0d:8e:70:20:
28:a2:20:70:e3:5a:63:07:e4:6c:55:9d:e2:11:8b:6e:69:cc:
bb:d1:44:73:1e:27:29:49:c5:73:ef:d1:c5:98:e0:c7:0a:37:
5e:6d:98:e1:4b:8a:92:15:2c:cf:1d:41:82:d8:d2:13:5a:23:
ac:97:2b:ae:c3:fa:5c:47:8a:cc:55:2d:7d:97:50:c5:60:4f:
46:b4:32:47:f6:89:d0:19:c3:0e:4d:39:01:0e:39:1c:11:60:
7e:32:89:4b:cb:97:bc:c0:4a:25:56:b8:ef:93:61:46:82:a6:
3e:ab:c7:8b:64:19:22:5e:72:fa:19:11:bb:ce:6a:d9:a3:a1:
73:46:38:ef:7e:62:0a:2d:f3:eb:5b:25:5d:c2:dc:0f:4f:51:
cb:fd:cf:c7:d7:3f:1c:81:7b:48:3a:24:db:e9:d4:78:ea:6a:
d0:fa:05:c1:91:da:4d:40:63:6f:81:f9:59:5e:14:2a:9d:8b:
23:b8:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client