Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: iFwLZBmwbBdJbwtNHgDwBlhdAosGx4pKdmBkGCRmhhg=
Subject key identifier: 1E:6F:C8:F5:29:1E:5C:DA:E4:DC:4B:A7:E4:E6:5A:F2:08:A7:C0:B4
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 01A0F0791B6955D17850CE485397B50CC536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1A0F
Signing time: Wed 30 Sep 2026 04:01:03 +0000
Manifest this update: Wed 30 Sep 2026 04:01:03 +0000
Manifest next update: Thu 01 Oct 2026 04:01:03 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: dZolsp8a1BRnQixE4RLrbUgz7yFjadJm5g0bBVg6550=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:79:1b:69:55:d1:78:50:ce:48:53:97:b5:0c:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Sep 30 04:01:03 2026 GMT
Not After : Oct 1 04:01:03 2026 GMT
Subject: CN=1e6fc8f5291e5cdae4dc4ba7e4e65af208a7c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:f9:11:1e:a1:53:34:78:eb:12:3d:89:72:
f0:42:c5:33:09:d0:e0:54:8d:26:3c:fe:1e:03:e1:
e7:e9:86:a4:70:92:c7:a8:7f:91:a2:af:50:99:7d:
f1:27:72:88:d7:6f:77:f5:1a:65:fb:f5:3d:a7:4a:
e2:0f:84:f7:a9:b5:37:dc:82:fa:05:cd:43:d2:c4:
e7:19:b9:05:09:93:7c:1f:a0:70:57:aa:04:d9:e2:
c2:a9:08:11:2b:1b:af:31:7d:85:d8:d3:d6:f7:d4:
1a:4b:3a:16:4b:30:0b:f9:7f:15:8c:36:03:e0:25:
b1:16:c0:4f:46:57:36:3c:3f:e7:13:90:cb:62:87:
f3:4e:11:10:6a:e6:72:a2:75:ac:99:4c:2c:d5:16:
e1:8c:0a:19:0f:20:35:a6:bb:2d:55:57:00:37:59:
94:18:e4:2a:90:f5:d4:96:1f:ac:cd:7b:65:10:a7:
53:6f:3a:2b:3d:35:e8:8f:b9:84:da:26:fc:f7:e8:
71:61:32:73:a0:de:06:b9:ea:2d:64:aa:55:5d:b8:
a2:31:69:ce:50:be:4a:a8:a3:6d:1a:0c:df:20:4f:
66:ba:6c:8c:31:4f:e7:2e:1c:43:b2:4c:b7:82:73:
0f:08:da:f8:23:c7:4a:cf:da:18:63:98:c5:ff:9b:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:C8:F5:29:1E:5C:DA:E4:DC:4B:A7:E4:E6:5A:F2:08:A7:C0:B4
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:1b:da:45:b0:c3:5a:8f:3e:6e:89:9d:fa:e7:94:5f:cb:
c0:9d:68:2b:47:f3:72:9b:ba:50:ca:60:c2:3b:3a:53:4a:fb:
59:06:60:fc:1e:6a:e2:96:30:89:4a:61:1c:8d:89:27:67:45:
1f:2c:48:00:7c:61:81:f0:33:12:af:84:ab:df:62:02:43:55:
ac:fa:48:e7:34:9a:16:1e:28:8c:c5:1b:af:8e:64:3d:ee:96:
82:02:d8:3b:22:fc:56:55:0e:f1:e1:71:e6:94:19:66:d5:e4:
01:41:c4:6e:47:cb:e6:68:5f:14:79:86:1e:2e:f4:df:27:ac:
59:be:d6:7c:0d:2b:d0:50:3a:81:b5:25:7d:c3:db:d2:f6:3d:
3f:80:c4:3a:c6:8b:7b:35:80:71:58:42:08:f0:90:1f:8c:02:
36:5e:54:d6:af:dc:ba:6d:a7:78:b6:24:1d:b7:e3:a1:94:39:
62:0c:1a:cc:83:95:48:6d:83:01:f2:f1:4c:b1:19:cd:07:00:
06:a7:74:c7:c1:45:6b:e7:8d:8c:64:7f:09:4f:50:b7:c9:d7:
01:d1:8e:3b:32:72:c3:9f:48:6f:cd:c5:90:26:9f:6f:8a:11:
19:d2:7c:23:85:0b:87:cf:53:4e:76:91:b4:5f:e9:b5:c7:e3:
cd:d1:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:38 2026 by rpki-client