Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft (raw, json)
Hash identifier: aDidx3aA5cYN0A284i9xZrruwZNWwfJJl5odYJF26nE=
Subject key identifier: 1E:02:FF:C6:AF:DC:B6:9D:EF:B3:88:8B:1B:1D:93:5A:CE:95:CB:8D
Authority key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
Certificate issuer: /CN=b48584effa051f0cbc39c319163e4f2338604982
Certificate serial: 019CAB34991868C204FBA17839D80BF635CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
Manifest number: DE
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: mTKfXNqZr-ethdBjOn6lFjS-PNs.roa (hash: HOGNlGeAoZ/b5RPWvVv+b+yxDspoiWHKwc8eGW2VV4w=)
2: tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl (hash: H8dxS147vCJh9fbazjYAZuO1hT4vu7/MnJBLs++JYeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:99:18:68:c2:04:fb:a1:78:39:d8:0b:f6:35:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48584effa051f0cbc39c319163e4f2338604982
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=1e02ffc6afdcb69defb3888b1b1d935ace95cb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:f9:8d:a4:42:d5:a3:02:67:bd:52:b1:4b:
0b:9f:17:f3:ad:02:06:44:34:64:6e:34:ab:b2:16:
4a:d4:77:66:0e:10:be:a3:cb:60:3f:a6:49:1a:1c:
1f:e2:ea:9d:02:90:4d:11:4a:b6:5d:85:7a:5f:5b:
5d:69:e5:56:80:52:4f:dd:e9:90:83:3f:2e:85:b6:
f8:14:2f:81:bc:4c:18:69:1d:19:bd:1e:a3:46:c1:
e6:5b:3c:cb:7d:d4:d5:9a:d8:32:b8:1c:da:02:da:
d9:b1:1a:db:69:21:4f:bf:f5:e5:94:af:d3:e8:46:
32:bb:49:b2:b4:9e:53:78:92:a2:90:c2:5b:ba:ae:
58:6c:03:15:14:95:b0:f0:ab:42:11:f5:eb:f1:10:
dd:f5:94:24:35:61:84:a5:0c:8e:1c:59:eb:10:ab:
31:48:ba:fe:e8:0c:39:16:ac:0c:a9:9a:4c:59:ba:
44:dd:0d:d2:8e:86:fc:83:d0:4d:88:88:db:4b:b5:
8f:c1:00:f2:26:72:db:2b:9d:80:ae:bd:1d:09:5d:
df:db:a7:46:5d:df:1d:36:14:0f:b0:31:d5:ae:19:
43:56:48:64:75:7a:79:24:f5:7c:41:db:d5:ab:fa:
4a:7c:32:c9:e8:fd:fb:be:67:1b:21:98:c7:d4:38:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:FF:C6:AF:DC:B6:9D:EF:B3:88:8B:1B:1D:93:5A:CE:95:CB:8D
X509v3 Authority Key Identifier:
keyid:B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:51:f1:db:f0:1f:51:61:04:7c:2e:6b:a7:0f:ce:bf:63:02:
6d:70:86:c2:b7:69:7a:e8:05:49:15:ce:13:6c:2d:d4:de:dd:
63:9c:d4:95:2f:49:1c:77:60:07:b1:a2:a4:01:b0:8d:c5:00:
b3:2c:a0:57:3d:f9:04:91:45:06:f4:bf:41:3f:cc:16:de:d3:
db:5d:cc:5b:07:72:87:50:51:88:88:0d:c2:56:8a:f9:1e:2f:
5f:92:51:d8:80:27:53:a9:4d:1f:2a:e4:ba:d7:80:1b:54:51:
30:e9:75:fe:08:5c:de:4a:20:df:18:65:8f:77:d7:3c:72:bd:
78:36:af:48:14:56:ef:b5:4b:b6:e8:ec:3c:d6:66:9a:1f:c6:
02:20:f1:c9:4f:4d:80:c1:08:d3:ea:66:f8:bf:c1:80:5e:a5:
6f:b8:66:f6:b7:c6:27:ac:38:f2:44:f2:91:76:95:15:70:ff:
9e:ac:c4:f8:c5:ab:ca:61:5a:10:3b:39:8d:7a:7e:55:73:69:
77:e6:94:d6:7f:93:1e:a5:43:29:1e:89:05:3c:96:28:33:5e:
15:6e:a6:37:52:08:ff:53:43:45:fa:4b:ed:15:18:00:6b:aa:
17:32:7a:7c:73:6e:c3:10:c1:b6:19:82:91:e6:bf:27:a0:93:
77:c1:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:04 2026 by rpki-client