Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: xsd2ET3X0gksi0KVul7Rc+PoVjFfYm5FunCk5c5H0r0=
Subject key identifier: 2B:D2:30:96:64:BD:77:81:85:E5:93:37:09:E7:34:AE:D6:72:C0:D2
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019EF8DCAE22892479440A1129097DCA3D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 197A
Signing time: Wed 24 Jun 2026 09:01:12 +0000
Manifest this update: Wed 24 Jun 2026 09:01:12 +0000
Manifest next update: Thu 25 Jun 2026 09:01:12 +0000
Files and hashes: 1: Su31KPktHrFLkChT839zTFn3AuI.roa (hash: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: UZpFu5QrPXMo4s8TS6xn22O/wPrvbMXbWRvq7AvH4gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:dc:ae:22:89:24:79:44:0a:11:29:09:7d:ca:3d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Jun 24 09:01:12 2026 GMT
Not After : Jun 25 09:01:12 2026 GMT
Subject: CN=2bd2309664bd778185e5933709e734aed672c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:cc:a7:ee:a9:23:0f:a7:d8:f7:26:a3:b9:
0a:10:9f:c7:ec:fc:e5:fd:14:e3:1e:c5:7c:6a:e3:
46:9c:4d:0d:4a:bd:96:4f:a8:e1:80:4a:10:10:e9:
20:af:35:b0:13:3c:3a:c8:f1:a7:4c:fb:67:88:ce:
20:72:54:c2:a6:2a:c8:f8:04:6a:b2:81:3f:11:cf:
0f:db:49:80:78:d1:56:f8:f7:bd:30:bc:58:9a:8c:
21:91:21:81:7f:7d:a4:2f:81:39:84:09:51:c3:f8:
6c:4e:56:5a:25:c3:04:db:d8:06:55:55:19:d9:8f:
8b:0c:31:df:c9:47:d7:d3:cc:6c:25:e5:87:6a:58:
fe:a3:83:97:d8:29:79:b1:66:eb:9c:8f:07:55:ae:
61:d0:a9:9c:67:73:25:ae:2f:e8:aa:95:2b:75:b5:
40:3f:55:8f:4d:6a:3b:72:e7:ad:3b:e0:9c:71:b4:
19:4d:32:fa:8a:50:15:72:36:f9:e4:b9:cb:61:91:
a5:e1:61:f2:e2:73:7d:f7:74:c1:33:83:a3:84:33:
b5:86:ca:38:c1:28:6a:c4:3a:09:01:3a:27:db:99:
89:f1:e3:39:d8:b3:7a:36:55:55:bf:46:52:d6:b1:
a5:14:dc:7e:67:6c:51:a7:85:6d:a8:cc:b7:74:1b:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:30:96:64:BD:77:81:85:E5:93:37:09:E7:34:AE:D6:72:C0:D2
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:95:91:92:38:f6:25:66:be:ec:f7:05:9e:4c:1a:ad:13:
6a:52:dc:4c:d2:64:dc:3b:3d:61:2e:40:c2:d9:ed:41:df:b1:
6f:4b:88:ad:a3:4e:05:02:2b:ac:80:4a:9b:8e:04:58:11:b3:
d8:26:61:ec:c0:df:44:69:0c:18:0d:52:0c:2a:74:76:21:f0:
2c:4d:0e:20:7f:2c:56:86:4a:c2:e9:a8:8d:ff:24:45:94:b5:
e1:71:4f:ba:2b:8d:1a:30:07:d7:cc:1b:91:ff:98:af:92:84:
cf:2e:33:67:1f:ed:3c:af:a1:4b:c2:4c:9d:56:2f:26:30:b2:
a0:f1:83:8e:0d:8c:d8:2c:f7:58:be:a4:87:b9:f5:c0:28:f0:
e6:20:56:67:bd:09:5f:12:4d:d5:f0:4a:1b:00:80:c0:a0:19:
fc:08:17:0e:03:35:44:a7:e5:26:c4:76:cb:ac:e2:2b:3b:e4:
5a:1e:d7:4a:ef:b4:1e:33:87:05:fe:7d:54:2e:12:4e:f2:3a:
5a:f2:4d:e2:1d:88:44:03:e1:c7:b0:37:e5:9e:b3:13:81:a7:
91:b6:04:5c:c7:b0:6d:9e:fa:36:5c:97:02:b6:79:f4:8d:a2:
93:33:05:d2:1f:08:96:87:26:3e:cf:d9:3f:bf:81:1b:60:83:
76:7d:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:24:02 2026 by rpki-client