Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: kH1OwytD+WJmMg96NDiv+6gC1EBvK84ua3aV+vgZQPo=
Subject key identifier: 51:B7:33:9E:49:37:92:CE:94:54:41:26:2E:32:A0:00:06:66:66:3B
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019DFF4FAACEE37662DAA46D22AB1E3D17FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1889
Signing time: Wed 06 May 2026 22:01:44 +0000
Manifest this update: Wed 06 May 2026 22:01:44 +0000
Manifest next update: Thu 07 May 2026 22:01:44 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: cKspZwlRbqyMEH4K9PalC9jp0+AMSq03Fes5GAOialc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:4f:aa:ce:e3:76:62:da:a4:6d:22:ab:1e:3d:17:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: May 6 22:01:44 2026 GMT
Not After : May 7 22:01:44 2026 GMT
Subject: CN=51b7339e493792ce945441262e32a0000666663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:70:84:7d:37:53:4a:e2:6e:9e:b5:03:93:
f2:85:3c:1c:b4:92:f7:90:34:21:9c:cf:49:1f:bb:
8e:f2:a1:47:68:32:93:66:8c:d2:ea:2c:00:6f:de:
f5:73:56:74:87:3d:66:38:3b:05:94:81:1d:c5:cc:
cf:d5:49:3b:72:0e:c8:07:0f:76:2e:6d:4b:4a:49:
09:a8:00:e2:ee:c5:24:26:17:aa:be:65:f0:c5:12:
a4:f7:50:29:0e:0d:2e:e3:af:d7:8e:84:b3:ac:91:
56:87:de:14:62:dd:e3:84:31:12:99:b5:d5:ff:73:
cc:44:9f:22:fe:6a:1a:7f:32:eb:58:da:9e:6c:33:
0d:6a:16:53:bc:03:a1:42:50:59:21:c7:b5:d0:83:
b0:26:16:c9:b8:dd:e7:89:f1:47:e4:dc:45:26:58:
4f:91:34:d6:09:44:14:43:fa:c7:a6:52:ec:30:99:
95:35:87:0e:0a:e9:63:ec:30:d8:85:69:e8:d8:16:
40:4e:e1:51:7f:06:e4:ec:1a:08:1c:d7:fc:65:12:
2e:81:e9:b7:cd:a7:80:ad:11:d3:e2:ee:54:b7:cd:
58:80:f5:06:ab:52:10:ca:fc:14:0a:6f:c7:b8:07:
e3:0b:d9:a1:99:b2:26:d5:48:63:69:79:38:2c:93:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:33:9E:49:37:92:CE:94:54:41:26:2E:32:A0:00:06:66:66:3B
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:eb:92:d5:59:07:ef:19:ef:f4:17:28:9c:ca:9d:7e:0a:12:
3e:e8:b9:e3:de:23:ed:48:92:66:84:2f:79:c3:44:e4:01:5c:
2c:66:da:fb:df:cf:ef:08:a6:a0:57:d9:30:09:cc:ff:73:21:
2f:93:75:10:15:dc:bb:14:64:a8:34:d5:4e:1d:04:4c:8a:06:
79:97:3b:17:26:bf:c5:90:99:dc:d1:9c:d4:7d:2e:bb:43:68:
05:a6:e4:cd:e3:7c:c9:9f:04:71:fb:ae:f0:5b:2e:33:8d:f1:
1a:76:62:11:d9:05:b9:a0:3f:dd:68:bb:09:00:4d:2d:91:ae:
5b:e2:c3:c9:c0:95:c8:46:c3:ba:fb:90:71:3f:53:5e:78:f0:
77:46:ac:14:20:8b:ed:a7:16:a6:dd:14:98:21:df:97:c8:a3:
67:11:31:c5:ba:14:72:bc:d8:97:b2:02:e6:43:c0:de:44:ed:
9c:85:51:ab:59:9e:11:5d:26:a1:8d:78:03:95:c6:d3:b2:91:
b5:6b:04:4b:98:df:23:ad:7c:a1:ef:9d:00:ef:f3:0d:85:ff:
47:b3:16:ee:75:46:6e:5a:58:31:f3:30:ee:12:72:e6:52:2d:
67:19:ff:b0:12:60:7d:aa:81:35:04:50:91:d5:f1:70:19:f7:
0a:14:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:34 2026 by rpki-client