Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: HYx/1s2Vq7VxFY1ZKIOJIUcC2+BHeLYC4cfoXKYd0TE=
Subject key identifier: 1F:DD:59:81:1A:B1:B3:6C:BF:6D:69:E5:B0:4D:D9:40:9C:04:2E:7E
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019EF86FB2267A1905A08EC20B43AECD219E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 190A
Signing time: Wed 24 Jun 2026 07:02:10 +0000
Manifest this update: Wed 24 Jun 2026 07:02:10 +0000
Manifest next update: Thu 25 Jun 2026 07:02:10 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: QU3XAApTe5iM4eWv5BE7CDy6FVY/8O0SKIz7qdJvK5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:6f:b2:26:7a:19:05:a0:8e:c2:0b:43:ae:cd:21:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jun 24 07:02:10 2026 GMT
Not After : Jun 25 07:02:10 2026 GMT
Subject: CN=1fdd59811ab1b36cbf6d69e5b04dd9409c042e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:52:f4:87:16:35:6a:30:e5:ef:8f:0d:ad:
90:b6:68:b0:ec:8f:48:92:72:7a:2f:21:1e:a8:ea:
41:89:c5:8f:5a:6d:f1:88:6c:ad:5e:c0:f3:9e:9d:
b4:cf:2e:17:89:e8:43:3b:30:52:9b:31:44:28:89:
1e:01:a1:f3:d6:10:1a:63:41:16:3c:39:db:1e:85:
09:b3:9d:28:12:86:52:8e:97:90:31:f9:98:eb:f8:
72:24:5b:58:96:a2:bc:27:fb:f4:2d:93:81:f3:84:
6b:f7:1b:e7:0b:23:cf:49:16:b1:d7:a6:7b:a8:f4:
6a:7a:c7:37:53:06:95:c7:e4:7a:2f:ac:95:92:a7:
81:31:01:fa:d2:fa:c3:d5:66:4c:fe:aa:20:80:5a:
6d:73:dd:bd:a3:d3:0f:f6:df:b8:2d:44:0f:46:4e:
75:79:23:a2:d3:17:70:06:a9:fe:3a:29:40:2d:f2:
2f:1e:7e:05:5c:94:d2:e3:35:cf:7c:4b:26:26:d0:
59:cd:ae:35:8d:1d:a4:d5:55:80:24:f5:df:27:62:
5d:76:be:e9:35:aa:8c:03:35:25:de:d1:81:b1:e1:
5f:e1:cb:ba:81:e3:15:4b:ff:12:f2:40:cd:8a:05:
86:ae:e3:df:b8:be:2c:4b:f2:08:16:5b:1a:6c:08:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:59:81:1A:B1:B3:6C:BF:6D:69:E5:B0:4D:D9:40:9C:04:2E:7E
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:f3:63:43:3e:db:5a:de:77:ff:00:a4:3e:17:04:74:e3:
32:79:9d:19:8d:b1:e1:df:3d:83:aa:a3:f0:61:81:b9:89:27:
c7:ab:08:67:7a:1f:57:6a:ee:70:3d:a2:e9:cc:c0:00:d9:74:
da:e0:95:71:d6:d0:e3:d2:aa:bb:b4:a4:5d:e5:d8:13:b0:84:
07:cf:85:97:82:64:61:a7:e3:a0:7a:eb:89:fe:ed:6c:9b:dc:
3a:c0:23:fc:bd:6b:75:db:84:22:06:9e:58:03:ec:00:3d:ff:
bb:cb:a6:fb:e9:2f:ae:1a:39:1b:cc:9a:6f:21:85:11:eb:3f:
29:67:01:96:e5:05:24:34:5e:64:87:a8:33:a9:f1:a2:0a:1a:
30:a5:20:96:70:4e:d0:da:4e:2e:a6:60:88:2e:f2:a0:42:3d:
e6:7b:6d:09:2a:cb:ce:84:fd:6a:39:73:56:1b:28:df:b5:b9:
38:95:30:df:fd:fa:8e:03:76:b4:0e:46:78:38:bf:78:48:57:
4d:78:06:63:64:17:67:02:d3:07:43:10:03:a5:6c:0b:81:30:
a4:db:62:6b:74:73:bd:3f:23:83:6c:04:98:1e:e2:ff:6f:ce:
f1:a7:1f:db:b8:93:16:fc:7e:e1:1b:ff:db:0e:39:45:c1:ed:
0f:90:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:38 2026 by rpki-client