Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: sBix6eW8Gii2gFX50a6wjpn8FWxSj9cQECby5Qi4c/g=
Subject key identifier: 2D:29:7F:23:A6:F4:1E:6D:79:96:A3:40:15:47:43:42:2B:5A:2C:DB
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 019D3A1CCA2D75C309EE985F9A2E468283C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 15:00:58 +0000
Manifest this update: Sun 29 Mar 2026 15:00:58 +0000
Manifest next update: Mon 30 Mar 2026 15:00:58 +0000
Files and hashes: 1: iBrzoJ4P7RKd300eOF4qUe3LCl4.roa (hash: QIdg4eDqVZUaeV5vnK1TSNPsCbX4Vczgh0HCqrqiwcA=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: 1G+rgL/7RYDCcNnWsEURhFZsOcSVAGCN6K2ntRQXPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ca:2d:75:c3:09:ee:98:5f:9a:2e:46:82:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Mar 29 15:00:58 2026 GMT
Not After : Mar 30 15:00:58 2026 GMT
Subject: CN=2d297f23a6f41e6d7996a340154743422b5a2cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:d2:0d:2d:be:24:fb:47:61:09:f5:4c:f0:
9c:b4:a5:8d:60:fc:a3:66:f1:a1:ea:b5:c6:69:b2:
fc:d3:3f:26:24:a8:29:73:48:35:4e:17:18:c0:e3:
c9:13:ca:10:de:60:e0:44:da:c1:18:df:56:52:da:
b8:c2:f8:07:66:17:c2:78:a3:43:0f:f0:42:e2:d4:
68:d2:28:1c:a6:02:aa:df:3b:09:91:3e:3b:c9:dd:
55:00:82:f1:77:90:ee:64:fa:99:b5:d7:39:c5:e6:
61:ec:d4:52:7b:0b:5e:4d:bf:f9:33:0f:ea:14:f6:
3e:f3:f8:7a:77:1b:eb:24:6e:6d:dd:d8:84:67:2d:
1b:ff:6e:32:72:19:db:c8:9d:3a:17:1e:55:67:d0:
ff:93:53:e1:0a:94:d7:9d:f0:11:6a:b0:26:04:87:
41:ac:65:a5:d4:9a:16:73:ff:dc:20:d2:79:e6:9b:
ef:7b:ab:46:b0:96:b4:1a:9f:31:d6:69:09:e2:ee:
bf:31:1b:47:f4:67:12:2a:59:0f:fc:5a:ae:de:eb:
d9:80:22:b0:af:fc:bd:af:2c:71:7f:34:a6:49:05:
76:e5:e1:96:93:47:d8:91:ee:0b:4e:ac:52:6f:3d:
a6:56:29:7a:1c:1a:3c:3b:b2:91:9c:d0:49:d9:83:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:7F:23:A6:F4:1E:6D:79:96:A3:40:15:47:43:42:2B:5A:2C:DB
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b2:5d:5b:3c:09:3b:fb:e9:76:d7:ec:29:4b:16:a6:9d:dc:
e9:5c:f2:1e:df:87:58:1f:85:d2:16:06:bf:20:b8:3f:ec:4d:
0d:94:1d:28:3f:5a:29:c6:14:ab:06:75:a5:07:55:54:bd:c7:
6c:06:97:f0:63:b0:8c:e2:89:9e:5c:46:5b:cd:38:27:b7:8c:
83:b6:b7:6b:59:15:df:df:82:07:03:65:6b:7d:e9:62:6e:fe:
e9:5d:89:df:b7:7b:cf:70:19:28:2a:18:9f:39:98:74:f9:5c:
9e:08:d7:5f:50:f9:c4:32:b1:ae:32:99:cd:15:1b:13:c2:79:
1e:cb:88:02:e3:bc:6e:2a:97:55:96:6e:91:12:4a:50:db:ae:
1e:6f:08:94:9b:44:97:de:00:06:1b:b8:a6:5b:d4:47:52:79:
1e:79:91:b1:54:30:f4:52:25:18:cc:c5:8a:d3:5a:80:4e:68:
5d:bb:ad:4f:6d:1b:4e:c1:88:c2:0f:71:21:36:bf:2e:c4:f7:
67:20:98:1e:47:5d:96:dd:60:3d:df:f1:28:c3:58:c7:ac:d4:
6e:6e:e6:81:ca:1d:36:7b:24:8b:0e:f4:0d:9d:0c:9f:36:e7:
46:68:b3:29:64:5f:28:6d:7e:f4:93:4a:1f:7e:66:66:cb:84:
25:b7:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:34 2026 by rpki-client