Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: oRoGfUDkMexltiktnyYPlU3XN1C/lSFHKWB2aabgjys=
Subject key identifier: F4:99:AE:08:8F:A2:54:F4:E6:96:F0:88:55:E4:96:8D:FD:3B:42:E8
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019D39411AD8E1529ACF5441322290DBFBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 12B7
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
2: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: qm/Pgz33t+gI7Py5WujuDfwxtRo5aD1q6OgXic/c61I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1a:d8:e1:52:9a:cf:54:41:32:22:90:db:fb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=f499ae088fa254f4e696f08855e4968dfd3b42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:04:77:70:de:ad:ad:b1:84:f4:8d:c6:97:
29:c6:32:82:c1:fe:bd:74:a3:85:a0:a3:3a:0a:32:
64:e5:be:bf:de:b3:cd:f5:5e:28:bb:22:d8:a6:54:
2b:2b:35:93:a6:0c:5c:95:6e:33:8d:e8:93:fc:c9:
99:d2:48:ab:70:83:8b:08:cc:a4:30:e7:9a:0b:0f:
8a:2d:5a:09:77:f3:2c:ca:15:d7:71:75:75:ec:09:
42:f9:7a:d4:fd:67:b0:a5:f7:b0:0b:02:21:64:28:
29:1d:6e:91:36:5b:ca:af:dc:4e:5e:7e:45:42:9a:
84:f3:47:04:e7:b4:fb:93:a1:89:07:ef:f3:0d:de:
7a:7f:c6:9e:14:8d:ac:51:a1:65:c2:7a:5a:d7:20:
72:ee:62:89:c8:95:69:c8:ae:45:c8:f1:dd:8a:53:
49:0a:83:38:d3:a0:99:39:ea:cb:e9:0e:0a:fa:3d:
17:7b:83:72:2f:38:34:45:14:1b:1c:47:b3:93:d4:
98:c8:6d:6c:8a:82:ff:6b:32:79:c7:69:b2:64:5e:
42:a4:f8:78:36:84:c2:b3:0f:74:20:47:67:5d:bf:
ef:87:b8:92:e1:1a:49:e5:23:46:23:0d:f6:44:78:
69:c2:8f:eb:5a:93:b1:ea:6d:0f:56:61:26:c9:a3:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:AE:08:8F:A2:54:F4:E6:96:F0:88:55:E4:96:8D:FD:3B:42:E8
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:43:f8:9d:4f:b4:70:9e:06:d8:67:4c:ea:e9:4d:63:88:
1a:76:e5:a7:fd:7d:1f:3d:89:86:a9:ca:48:f3:87:f6:ab:b4:
9f:ae:ed:61:cd:a1:76:18:05:8e:41:01:30:7d:38:5f:83:33:
d1:1c:44:b7:14:6c:c8:75:3f:e4:ba:aa:e3:77:d2:02:e1:8f:
2e:93:4c:98:21:24:6a:9a:48:ac:f2:8e:67:ce:77:14:fc:e2:
d8:40:fd:c6:f5:7b:f9:94:93:5f:57:c1:49:35:02:97:bd:4a:
dc:0c:5a:c3:a8:67:23:aa:8f:7b:9d:ed:a7:51:9b:a0:f7:7b:
05:13:5c:95:5d:9e:77:fb:b5:75:32:cb:da:dc:37:03:f4:1f:
4f:06:ea:9a:0a:e8:b9:9f:15:d3:e6:ae:66:b2:d6:22:87:ad:
1e:29:b2:f9:6c:da:a8:53:36:91:9d:f0:ea:0a:59:dc:93:1d:
cf:96:52:ce:e1:40:ac:ec:c3:82:81:6e:95:93:8a:b1:6e:c0:
58:18:6a:a2:c3:5d:a7:81:64:64:ba:96:24:96:86:77:d3:ad:
db:25:09:9e:a1:c9:2d:94:fd:c8:9e:67:08:44:09:15:6f:2d:
58:74:a0:7a:8a:c9:4c:86:ee:ea:25:2c:47:da:a3:6e:1a:a2:
cc:26:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:50 2026 by rpki-client