Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: PHGxgII7vF+NCvbR/4aqEUsbxZTaz+0nldwihDWWn+Q=
Subject key identifier: 62:69:C5:E9:61:10:3A:72:D1:F5:87:D9:C0:3B:A7:70:74:F6:67:A1
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019D37F751AC2221DDBAF6A68D241D9520C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 14DB
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: FPur01ce5veCVVaoG+H0TlJoyrMyD/XsWcq+5KSpopI=)
2: fBLAHwUkRrn6HYBRnTV7FYQGNDQ.roa (hash: 2J5IIevOI4AOjVlKsCvjgqwg6VuZoErPwilBziOfEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:51:ac:22:21:dd:ba:f6:a6:8d:24:1d:95:20:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=6269c5e961103a72d1f587d9c03ba77074f667a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:47:e5:8f:79:5c:b7:7e:3d:29:8f:9d:24:
03:08:09:e5:1b:0a:04:a5:a1:cc:a2:b3:33:bc:95:
ba:52:68:e3:90:e6:df:cc:42:94:36:a0:40:22:b2:
68:bd:ac:c5:ec:a5:7f:49:6a:6d:23:71:0b:a5:23:
b1:19:c9:7e:87:43:0d:5d:87:1b:74:b3:a9:4d:89:
81:f4:7a:98:d5:67:8f:8a:c7:02:c8:3f:e8:b6:cd:
09:ca:fe:9b:23:27:43:50:f8:73:a5:e0:7c:4a:ec:
a1:af:b1:e2:53:37:f5:49:fd:c9:6a:3e:ef:76:0c:
90:76:fa:f2:78:08:3a:60:bb:fd:e2:24:ff:e5:f2:
ef:ba:ae:f9:ad:26:38:fd:e3:12:e6:f2:27:61:64:
79:61:97:8b:b4:e7:c5:93:ce:a9:c9:dd:79:bf:2e:
2e:ad:59:99:26:6c:d2:98:ec:bd:a4:d3:b3:8c:db:
45:bf:4b:b3:51:fc:f4:a2:c8:de:65:17:d9:f7:c1:
c1:5e:a4:2b:62:c9:41:d4:f9:f3:cf:8a:e8:25:b6:
ba:5f:ea:6f:f9:ca:ac:7f:b5:ab:a5:d4:0b:1a:a4:
63:6b:bf:4f:1c:48:c0:9a:86:57:45:e2:00:21:1a:
40:7c:78:33:3e:89:f4:50:26:a6:34:13:08:dd:f5:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:69:C5:E9:61:10:3A:72:D1:F5:87:D9:C0:3B:A7:70:74:F6:67:A1
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:94:16:24:13:ad:5c:81:67:14:01:83:3e:da:d5:66:85:
2e:22:f9:31:af:f6:fa:98:fe:6a:1b:5e:33:38:43:75:85:5a:
d0:c7:2d:59:7a:9f:46:c3:07:53:3d:d2:1e:e5:44:08:b5:32:
b2:68:d1:34:bb:22:36:9b:4c:99:4b:4a:21:36:ba:f7:b7:9e:
1b:a5:e4:c1:02:87:0b:f2:5b:3a:b5:4e:ea:fd:e4:88:2e:d4:
10:0b:91:7c:6e:1f:c5:c5:15:37:b2:95:f8:80:aa:f5:77:5e:
f2:bf:03:f9:f1:25:d9:42:25:e4:ee:1f:e4:d4:69:dc:59:5d:
1b:46:f5:52:6a:75:15:6a:fd:c5:d8:21:9d:fd:e9:ad:7e:aa:
d5:70:6a:1e:0d:24:d4:8a:1d:3f:b6:bf:bf:f4:9a:8c:60:ca:
5e:99:be:79:53:6d:39:ec:a5:f5:32:83:28:29:8b:18:bf:33:
b4:6a:52:6a:6d:36:bc:57:76:ff:5a:38:2f:21:84:5b:09:1a:
5c:60:cf:8a:ef:dc:2b:58:f4:88:72:0d:26:fa:7c:cd:39:fc:
f5:06:87:93:07:57:d1:2b:19:be:c4:09:6c:c1:58:18:1f:c4:
56:75:98:be:05:9b:60:ae:cf:90:8b:bf:35:40:c8:01:6d:d3:
a3:f8:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:39 2026 by rpki-client