Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: tdX2KDTgb6Yokg6uKBXpu9mpSfcHaOPr0mJtAe1WkHc=
Subject key identifier: EE:F5:1A:7F:B3:31:69:C0:C1:EF:5F:FD:79:69:70:EE:4D:5A:DC:BC
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019FF94880F8EE8ABC4FDC0B260D83CF15E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 198F
Signing time: Thu 13 Aug 2026 04:01:46 +0000
Manifest this update: Thu 13 Aug 2026 04:01:46 +0000
Manifest next update: Fri 14 Aug 2026 04:01:46 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: YXJhHIut1IjVUxBQtvydexJBs2dfl/xWtOj0l1P4p1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:80:f8:ee:8a:bc:4f:dc:0b:26:0d:83:cf:15:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Aug 13 04:01:46 2026 GMT
Not After : Aug 14 04:01:46 2026 GMT
Subject: CN=eef51a7fb33169c0c1ef5ffd796970ee4d5adcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:0b:89:aa:88:5a:51:81:54:e7:63:26:be:
8b:a9:1f:09:41:4c:c1:4c:c9:c3:33:4e:63:29:db:
f3:38:91:40:a8:58:7a:b1:c9:ac:b5:74:21:54:ae:
1e:f6:c0:75:9d:f1:25:70:63:ae:55:9a:b8:49:ed:
59:fc:e2:97:3f:58:e2:4d:53:15:c7:15:2c:0a:f1:
ae:1a:db:67:fa:5b:68:ed:88:04:1b:f9:07:62:86:
32:45:8c:c5:4f:ad:2c:25:e1:db:89:70:73:e3:1b:
eb:fa:50:8b:72:e1:55:00:fe:f3:69:6c:7a:da:43:
57:9e:b4:3b:e3:aa:b5:b2:47:a1:9e:3e:a8:c1:68:
93:ab:0c:4d:11:17:e3:ef:81:5b:50:6c:92:7b:06:
88:16:1b:b4:c5:49:d1:05:4c:d1:1b:d3:14:a9:5d:
42:b2:dd:35:0c:ee:3e:1f:5e:76:c9:65:1f:cd:be:
43:fd:68:19:7f:0e:bf:f4:3a:7b:f5:ef:6f:03:67:
ce:88:39:71:26:74:ba:76:91:af:a5:2b:d8:f5:a7:
76:1c:a9:a9:1e:a2:77:00:9f:39:3e:f0:b3:bf:84:
c1:96:0e:62:95:f6:81:69:c9:53:e1:89:47:91:b3:
20:4d:cc:92:40:89:1f:e8:c0:59:71:1f:a1:fc:69:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:1A:7F:B3:31:69:C0:C1:EF:5F:FD:79:69:70:EE:4D:5A:DC:BC
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:78:2c:b6:73:8b:da:1e:d5:08:b2:cf:44:0f:19:18:0f:82:
17:99:2e:3c:39:c0:9c:1d:87:eb:f4:1b:0a:59:c4:40:77:14:
e3:8e:1f:d8:4c:9e:b7:00:8d:2c:c1:7b:1d:96:25:01:7d:a6:
b1:5f:30:ca:72:be:6d:c9:1e:31:87:7b:fd:31:06:e5:e5:7d:
f1:3f:95:22:c3:fc:dd:f0:a8:57:b4:56:57:79:2a:70:c3:5e:
56:a8:b9:04:c6:13:2d:a3:96:0e:d4:c5:25:fe:44:de:24:c3:
6a:36:5e:46:5c:8e:f9:5f:6b:4e:c9:9f:8c:ad:86:f9:ff:8f:
a2:3d:f9:5f:a2:5b:d3:f8:a1:25:64:c8:2f:9e:9a:38:84:27:
af:47:70:9e:1e:92:27:b4:05:ba:af:ba:2b:5a:94:53:cf:dc:
a9:e0:d3:1c:c3:bf:bc:03:c7:0c:ca:e5:29:c3:b4:58:24:15:
78:43:da:52:5f:7b:af:a5:2a:51:da:74:f9:01:fb:82:ee:0e:
c3:24:57:3c:bd:de:6b:80:16:73:db:dd:dd:05:da:e3:73:c6:
b4:69:a0:0e:d2:85:4d:8d:91:66:5b:01:66:bd:ba:f0:c5:13:
4a:eb:9b:91:ae:3a:ec:43:03:f2:a7:0b:87:bf:0b:5a:5f:78:
b6:9f:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:10 2026 by rpki-client