Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File: tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier: cZ8sjSBmzKYAmUdul2ZHXYNVE8CstPBoDayNSULqagE=
Subject key identifier: 8F:D7:26:24:98:A0:92:84:78:7F:AB:F8:A4:8B:4C:C4:EA:40:06:05
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial: 019D382E7F53E0D35B0D9DBA765327E3942E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number: 0976
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: rILdLYWw95ir/Ve3fdXzAssZp/thl8RXpDIKYfPUBa8=)
2: w9I-TITWUP65GSq15FkjvyWMmjA.roa (hash: zy+zixulBGIOWMUqfVrmypdwCmfjRlJukmDFjYyZjjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7f:53:e0:d3:5b:0d:9d:ba:76:53:27:e3:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=8fd7262498a09284787fabf8a48b4cc4ea400605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:de:a4:a9:87:6c:fc:4b:fc:13:10:45:51:
a2:c5:13:14:f2:e8:d9:05:8b:0a:c4:8f:d1:65:25:
d4:96:32:c6:f1:27:7d:8f:d3:4a:da:43:ae:04:66:
b6:fe:f8:13:c3:ca:72:23:38:cb:75:9d:6f:ec:85:
1d:82:c9:e4:e6:d0:bf:8c:1c:4e:67:b7:00:da:da:
19:c4:f2:45:b3:88:32:69:2d:60:ab:f4:f6:c2:08:
ef:c5:d5:5a:9c:91:76:c7:93:48:2a:a7:be:a7:45:
34:3d:ea:0a:91:81:6e:79:c6:ae:5d:96:69:1f:34:
60:b9:88:52:48:8d:9e:00:e5:1b:d8:a9:12:ef:75:
80:60:79:04:f1:08:54:f9:2c:bb:0b:cb:bc:bc:e0:
bb:5f:1e:65:76:c3:cf:b8:2f:b0:47:14:3d:5c:57:
a4:24:6d:40:c6:63:f8:24:8b:31:82:63:b2:ee:88:
30:28:92:fe:a1:c9:0d:58:fb:d0:bf:1e:90:6a:4f:
ec:37:13:20:f6:9c:a2:d1:59:cb:76:0b:57:e6:ed:
3e:e7:3f:97:16:f0:f6:93:af:45:a4:b1:7c:1d:5d:
3a:8a:53:49:70:33:96:d9:9d:eb:8b:5e:a5:e3:5a:
91:42:63:4a:79:97:de:dd:52:91:32:3b:24:84:6f:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:26:24:98:A0:92:84:78:7F:AB:F8:A4:8B:4C:C4:EA:40:06:05
X509v3 Authority Key Identifier:
keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:85:82:e3:1d:42:22:24:c4:a3:39:56:8c:c8:f2:13:e9:
23:5b:6b:5f:b6:8d:06:28:44:f6:d9:25:1b:94:e0:c0:46:62:
5f:66:19:65:d0:9d:6d:3c:a3:df:ed:b7:8d:5e:ac:3d:fa:00:
ad:ba:60:6c:02:03:c9:55:a5:bc:4f:81:e9:24:ac:0b:79:6b:
30:48:ac:27:0a:3e:8b:b0:b4:74:d3:6d:e6:eb:58:44:27:a4:
04:08:97:ec:c5:84:f1:62:cc:ca:54:8f:5a:f3:06:34:ae:c5:
12:54:ea:3c:40:4c:5d:0e:59:32:19:f1:d7:b7:25:39:2d:3e:
e0:f9:86:9d:e8:20:e5:cd:fe:07:53:88:3f:9f:fa:6c:43:ba:
52:c8:04:93:dd:0b:76:1c:49:7e:a7:23:ed:1b:b4:87:b1:0e:
b5:eb:d6:9d:7c:21:c1:bc:c9:99:55:34:5c:b2:e9:f6:92:38:
b3:8b:92:a1:ba:75:31:46:d1:a1:23:de:e8:61:fb:8d:0f:b3:
e4:3d:a0:2c:76:56:83:67:dd:0c:1b:44:83:1f:b3:29:ad:6e:
27:32:0b:3e:e0:da:fe:b5:38:94:59:fa:2c:d4:aa:b4:d8:05:
c7:ec:c1:e0:ba:63:87:d7:59:76:4b:c7:95:8b:73:04:b2:76:
f8:ff:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client