Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: UsvFovjF/O2zIVdxwM/NtoPwO/e91p4VbQR+1FItdbk=
Subject key identifier: 11:A5:E0:4F:9D:AE:FD:5C:0A:B2:46:F4:BA:FA:6D:96:EF:B9:12:8B
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 019DCE9903C7192A2B06DB3C40DE2EC193B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 0DCF
Signing time: Mon 27 Apr 2026 11:00:27 +0000
Manifest this update: Mon 27 Apr 2026 11:00:27 +0000
Manifest next update: Tue 28 Apr 2026 11:00:27 +0000
Files and hashes: 1: igu1HBQCLR1V-K0-3zcWvVR38_Q.roa (hash: haVmzp4loEFEIlfjU/Ifex5GRzP7g2ubGaSjmF5LzcI=)
2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: PAC/JC6DZCUsh5ZzjzA0h9ZjSExPvD97aqmZWYtwqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:03:c7:19:2a:2b:06:db:3c:40:de:2e:c1:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Apr 27 11:00:27 2026 GMT
Not After : Apr 28 11:00:27 2026 GMT
Subject: CN=11a5e04f9daefd5c0ab246f4bafa6d96efb9128b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:4b:84:c8:51:8f:1b:0f:60:e3:50:47:1c:
97:32:f2:71:99:6a:bd:de:eb:66:cc:30:b2:71:47:
ce:1e:ec:12:3d:84:50:2d:4e:f6:6a:73:2a:7d:5e:
04:bc:99:50:99:7c:24:f3:1d:10:22:7a:35:1f:b0:
88:10:61:a2:17:8d:0a:f3:de:a5:2f:21:1e:64:7d:
0b:03:8e:85:a3:a7:67:ad:64:7f:31:e0:54:85:82:
d5:53:91:4c:dd:36:08:b7:18:19:f0:66:c4:7c:58:
c2:3b:23:90:7e:68:df:0c:5d:c7:72:53:92:a3:da:
da:8e:ad:40:73:2b:7e:91:d4:68:dd:ab:19:dc:f8:
e1:d4:38:00:7d:b0:b7:48:a0:c4:9c:4a:88:5c:0c:
c3:98:32:9b:81:e6:93:de:86:f0:d7:81:bf:ca:91:
48:56:25:59:89:77:5c:2e:37:81:42:11:de:b8:81:
1e:fd:ef:4a:29:67:58:cc:72:ba:d3:c2:d2:28:63:
4a:bf:13:4b:37:c2:6d:d7:9f:64:13:6d:5c:ed:60:
f4:fb:57:55:8b:e5:75:7f:2e:8d:05:0d:a6:6a:66:
ee:52:ae:19:98:db:62:9d:4c:fe:90:f8:b9:8d:22:
08:d8:42:38:68:b2:02:cc:4b:a5:f0:05:e2:b4:cd:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A5:E0:4F:9D:AE:FD:5C:0A:B2:46:F4:BA:FA:6D:96:EF:B9:12:8B
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:47:3b:09:e7:69:22:eb:60:78:5d:97:e9:a5:48:7d:ca:c5:
c0:06:44:98:f7:07:ca:4c:13:e1:bf:97:3a:89:18:ae:c3:89:
7c:97:f0:58:c0:ee:b5:cd:7d:e4:8b:76:7c:57:e8:10:4b:83:
af:93:7a:47:54:92:47:b3:41:a0:ef:e6:0a:f6:bc:e6:46:72:
a2:79:62:80:15:c6:ad:6e:a3:49:d7:6f:d5:bb:75:19:38:a5:
47:83:ec:38:bc:bb:d5:fc:02:d1:6e:12:b1:30:87:05:39:bb:
43:55:27:83:e8:14:25:12:61:0a:ac:f8:e3:48:41:3f:30:ea:
ed:3b:fe:3e:e7:bc:6f:7f:af:88:ec:da:c2:79:24:1c:83:8e:
a2:37:aa:1d:bc:73:42:49:f1:9a:85:05:b4:c5:ef:8d:1a:d0:
e5:f8:10:9c:33:0d:7c:1d:0a:1f:2a:d6:c2:9d:88:c1:57:af:
b2:9f:39:4a:b1:b9:dc:f7:2b:a8:f1:7a:3a:f4:0c:43:ec:69:
00:b0:9b:26:c9:03:4e:1b:e9:c4:74:d7:99:97:b3:a3:1b:01:
54:e5:69:21:3b:71:88:63:be:96:a8:5c:37:4a:f8:f4:a7:33:
20:ce:f6:cc:ec:c8:92:0b:45:ac:2d:cc:1d:34:7c:55:8c:91:
cc:b0:2f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:46 2026 by rpki-client