Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: t9Xy4ci17rjdTl0+l9sVz/3uqjvwqWhJ0nvXDeKkpWc=
Subject key identifier: C3:DB:96:70:FC:C1:BE:21:9E:E8:60:B5:4F:AC:94:9B:C1:A3:FA:4E
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019D37C0E46DE0B78328827C906B3148CBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 0633
Signing time: Sun 29 Mar 2026 04:01:21 +0000
Manifest this update: Sun 29 Mar 2026 04:01:21 +0000
Manifest next update: Mon 30 Mar 2026 04:01:21 +0000
Files and hashes: 1: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: utplXP9NorFNox9/rm4Jl5WQya2tkqcO1QUbwkQMN04=)
3: u2WfF9In72cKbk56xhUnLtQds5E.roa (hash: lXqEAMd861hGDluqkgvGTYLqDE2FQJtnTBvspyPWGQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e4:6d:e0:b7:83:28:82:7c:90:6b:31:48:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Mar 29 04:01:21 2026 GMT
Not After : Mar 30 04:01:21 2026 GMT
Subject: CN=c3db9670fcc1be219ee860b54fac949bc1a3fa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:96:76:70:37:00:2e:7e:1b:b6:30:e4:4d:
15:39:c3:97:d1:35:bd:71:d9:55:16:1c:b4:41:a7:
fc:5c:6b:f5:09:a7:41:f9:a3:66:e8:37:28:fd:29:
a4:f3:59:27:e9:5c:fb:ef:2f:53:48:65:f3:52:56:
ec:f4:f8:b4:ba:59:88:5c:1c:8d:3b:b1:47:17:05:
d4:6b:2c:fb:3c:08:a2:6d:d4:8f:4f:82:fa:40:29:
fe:26:28:f8:cc:77:fa:02:49:e6:44:f5:e9:bd:9c:
71:8a:4a:d5:ac:55:39:4e:40:97:54:7d:40:0d:e1:
e5:af:e3:8c:3d:0c:ab:2f:c3:66:e6:30:63:37:24:
e9:82:79:b2:d4:5d:34:82:c6:c1:78:5a:c9:a0:bd:
d9:96:d4:ab:7c:74:a8:1c:be:ba:4a:17:20:63:ef:
b9:ce:51:d8:f1:b9:11:ba:e3:21:b9:4e:88:19:c8:
9e:81:52:89:13:a0:bd:ce:ed:ad:6b:55:1f:8f:6c:
4a:fc:a0:4a:71:d7:00:b4:67:26:02:b7:c8:4d:d5:
37:c1:15:9e:80:ff:44:59:bb:cd:84:e6:ec:07:78:
62:75:77:0e:fd:65:46:d2:9e:6a:bd:a8:c7:3a:39:
e8:ef:bb:09:34:46:d8:3b:47:49:eb:f3:6c:12:cb:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:96:70:FC:C1:BE:21:9E:E8:60:B5:4F:AC:94:9B:C1:A3:FA:4E
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:ec:a3:bf:7c:e8:db:51:2a:f1:ce:ca:98:fd:da:b1:ed:
43:f4:2e:d7:b8:b5:60:51:e8:72:98:6e:67:b7:61:f2:40:ec:
0f:2e:57:28:b0:fa:cd:6e:52:dd:b3:21:d3:a0:20:e4:30:1f:
06:12:fe:c8:99:8f:70:6d:23:0c:93:13:7a:95:07:39:a7:6f:
9b:48:7c:20:f8:8e:d9:c2:92:72:84:4a:cf:b6:54:d1:bc:a3:
59:a3:41:5f:23:33:27:90:c1:eb:8a:c2:96:ff:d4:32:86:12:
6e:44:fc:72:ea:8b:e8:7d:f1:73:4e:b5:24:74:cf:44:16:ef:
9d:3c:26:1a:49:70:78:7d:b2:d0:5e:0d:33:db:c5:aa:06:43:
ae:00:f1:ed:c3:fc:fe:f8:4f:24:7b:2e:9a:90:f6:ac:27:6d:
c1:70:6b:a5:80:00:4c:6a:ac:cb:e9:e0:e6:e3:5b:e5:96:ba:
7f:4d:11:50:77:5a:ce:cd:66:59:79:5f:9e:d6:24:b8:2d:de:
f7:ad:14:4b:23:70:ca:a8:53:18:dd:6f:ff:68:e0:87:af:ed:
83:1d:9f:0d:21:62:0e:b9:4c:61:34:f1:79:9b:c4:ef:bb:f4:
45:ef:13:d8:50:de:88:59:a0:a9:22:04:80:0e:19:6f:e0:d1:
da:7a:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:33 2026 by rpki-client