Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: SMiq0aJzDVGGWH9AuZgeW63wGemiDSajidz1z/SUGd4=
Subject key identifier: CB:FA:DE:E1:A0:DE:51:15:E3:1D:1F:66:DD:74:59:33:FD:01:B8:4F
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019D081D8BCB3FE4046FE2203E2D13CAC3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1809
Signing time: Thu 19 Mar 2026 22:00:47 +0000
Manifest this update: Thu 19 Mar 2026 22:00:47 +0000
Manifest next update: Fri 20 Mar 2026 22:00:47 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: 4eZxC2CnWZ7q3bFn0BS92CWVks5iM5zVaFPkO8hbWeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:1d:8b:cb:3f:e4:04:6f:e2:20:3e:2d:13:ca:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Mar 19 22:00:47 2026 GMT
Not After : Mar 20 22:00:47 2026 GMT
Subject: CN=cbfadee1a0de5115e31d1f66dd745933fd01b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:c1:6f:a9:d8:ba:4b:fe:93:28:85:ef:73:
f0:78:2c:b5:fb:89:6a:46:d6:79:5c:c0:5a:ab:41:
bb:ee:6a:eb:a1:4a:fd:34:c8:9b:1a:d8:af:82:3a:
ff:ef:59:da:54:e6:4d:ce:02:26:66:b4:46:d8:7d:
0f:98:3b:a1:84:75:6e:66:e0:9a:d3:66:b6:14:56:
36:fc:3f:ff:cc:26:32:aa:b8:42:7d:41:dd:bf:af:
be:69:e7:c8:98:4f:91:07:08:d5:69:a4:56:3b:51:
5a:9a:7f:a9:84:dc:36:02:52:c0:48:d9:6c:4c:f5:
19:e6:db:ba:23:18:cc:d3:b6:b1:af:73:97:55:70:
6c:d5:0a:83:a0:27:01:93:25:a5:ba:36:50:31:f4:
26:a6:b8:c0:67:33:78:5d:2a:b1:06:88:4d:69:8b:
27:7f:ca:2d:3e:43:c0:4c:6e:29:2a:f6:90:89:4f:
b5:8a:3b:ab:7b:1b:fa:c0:f6:19:bd:63:10:88:fb:
bb:b3:a9:ea:ad:0b:66:45:f0:3a:f8:06:f3:1c:3f:
e7:f2:a8:c3:79:62:30:1d:f4:69:e7:af:57:b4:e4:
e8:f3:80:96:9f:67:de:15:d5:83:01:8c:bc:f7:3e:
86:1f:b2:2d:75:b9:78:ea:8c:55:b0:53:2f:34:7e:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FA:DE:E1:A0:DE:51:15:E3:1D:1F:66:DD:74:59:33:FD:01:B8:4F
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:5e:21:af:d6:3c:b2:1d:27:dd:e8:80:94:5e:c1:c5:5e:
5d:7e:a1:47:a1:6c:49:37:df:c8:f8:d6:af:27:d1:a1:84:bd:
f4:77:86:6d:54:84:a8:42:f3:75:d9:72:78:7c:b9:d7:34:7b:
98:6b:5f:fe:0e:4b:12:f8:0b:bd:2a:dd:2b:04:40:ce:39:2e:
74:8f:f5:c5:11:c4:49:40:97:c2:48:ce:63:39:99:f2:36:2d:
98:6e:3b:06:69:62:d2:ea:46:ff:e1:ed:c4:3f:3e:09:d8:09:
ec:ca:a2:df:6f:22:5c:ce:2a:19:88:9b:e0:b7:ad:38:b8:e4:
ed:8a:6c:c0:e7:82:cf:63:34:54:83:f2:50:7a:36:75:a8:50:
16:ab:9d:96:ee:c1:b2:65:de:96:c0:bf:97:cd:e9:30:6c:8c:
00:6a:2b:0c:bf:11:76:00:45:0f:38:04:ff:d3:47:ab:5b:f1:
de:dc:cc:39:be:3f:fd:26:1d:a8:75:25:dd:97:62:b9:2c:38:
e1:30:0b:fc:ee:ff:01:61:e6:90:d5:20:e4:13:19:65:f5:66:
cb:f0:a6:9d:44:1a:a5:9b:b3:9b:99:7c:77:db:75:9b:1a:37:
3f:f0:a3:a9:11:a4:e6:be:b9:42:78:1f:f2:82:68:d9:06:0e:
0c:9b:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:34:37 2026 by rpki-client