Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: XgKASW6IbjYYc5qdkkjXfKTYC6QzfiwokiMOXSxJdck=
Subject key identifier: 6A:9D:E0:1E:59:50:16:62:A0:CF:FE:0D:CD:24:55:48:41:F0:B6:D6
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 01A0C09EBEEE935C83A1773A24F968FBACD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 21:00:24 +0000
Manifest this update: Sun 20 Sep 2026 21:00:24 +0000
Manifest next update: Mon 21 Sep 2026 21:00:24 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: TPdOvC9QkHCC3zdYfhYKarxrQAKM8cv1fBBFWK4kFo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:be:ee:93:5c:83:a1:77:3a:24:f9:68:fb:ac:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Sep 20 21:00:24 2026 GMT
Not After : Sep 21 21:00:24 2026 GMT
Subject: CN=6a9de01e59501662a0cffe0dcd24554841f0b6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:17:93:a3:6b:38:52:a9:97:93:a3:87:c6:
7f:a4:8d:49:9b:cc:e5:90:22:f9:c8:f2:09:ce:b8:
43:6f:37:aa:9e:a8:7b:61:17:1a:cf:c4:af:0c:6b:
5c:cd:2d:c2:a9:c0:56:00:b5:08:0b:6a:cf:5b:9d:
17:0f:9a:e3:20:c8:bb:ff:ec:9e:38:44:de:bc:5e:
61:08:d9:b7:3c:9c:b2:f8:3c:9f:9d:43:86:ab:f9:
79:6b:54:20:43:76:f1:b1:95:1d:00:9b:2f:01:b6:
7b:4c:77:a8:bb:a8:3f:3b:08:30:81:a5:7c:09:96:
e5:88:8a:87:f0:fe:68:1b:f5:1b:59:fc:62:35:6f:
22:04:3c:82:d1:e8:18:8a:98:8f:b8:08:af:24:11:
14:c1:5b:c0:20:e1:78:bf:40:ea:03:94:aa:80:7d:
b0:1c:ff:4c:d7:81:0f:2f:46:88:33:ac:28:af:4a:
eb:72:52:a4:c3:02:a6:8f:92:fd:4e:dd:04:be:4a:
99:04:b4:2d:4c:ea:63:c4:ed:30:35:70:d5:4b:56:
9b:16:85:72:60:3c:b2:65:29:90:d1:40:d3:8b:55:
67:9f:bf:31:da:68:3b:ca:48:ca:94:ac:2e:b4:99:
06:71:ba:62:a6:82:2d:62:75:83:98:90:ff:ac:2f:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:E0:1E:59:50:16:62:A0:CF:FE:0D:CD:24:55:48:41:F0:B6:D6
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:10:63:c5:a9:73:a7:67:db:fb:b6:d8:27:3d:78:65:e2:
e9:aa:5a:20:2b:69:83:b0:25:a3:6b:cb:56:f6:e4:33:75:dd:
89:19:e7:d1:c9:e0:3e:69:cf:70:88:e3:22:f1:b0:15:e7:75:
6b:17:23:39:a8:e7:9b:07:2e:fa:cf:01:c7:79:4a:c5:f6:85:
3f:f4:08:7e:3a:44:ae:ca:67:78:f3:ee:0e:56:41:8a:5a:b1:
79:cf:43:d9:51:af:89:1b:98:26:71:e8:d8:57:9c:a7:23:ad:
e5:34:a6:84:f4:b5:3c:6a:bc:bc:03:61:2f:0c:5a:c2:72:a2:
20:6c:d9:b8:4c:49:cf:b9:a6:43:49:e1:5c:22:1f:51:67:24:
c3:89:1d:30:bb:21:3a:e7:a2:5c:6a:9c:00:66:b0:78:94:d5:
0a:e2:cf:59:d5:09:96:48:6f:2d:c8:db:7f:e7:6a:f6:12:c4:
17:09:95:0d:53:89:52:ec:d3:da:e4:43:74:12:e3:44:36:37:
b6:ec:22:c7:4b:a9:b5:d2:fc:c3:43:8f:d9:da:4d:9a:43:c1:
26:0c:0a:6e:13:87:6d:b4:b2:64:ca:a3:87:4c:f5:c2:16:76:
24:6e:82:58:6b:10:a0:db:59:56:eb:75:58:ce:45:55:34:c4:
1c:4b:c6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAnr7uk1yDoXc6JPlo+6zTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmMwOWJhZWJjYmFmNjNmNWU5YTgyYzBhMWQ5ZDdiM2Vh
NzdhNjUwHhcNMjYwOTIwMjEwMDI0WhcNMjYwOTIxMjEwMDI0WjAzMTEwLwYDVQQD
Eyg2YTlkZTAxZTU5NTAxNjYyYTBjZmZlMGRjZDI0NTU0ODQxZjBiNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZAXk6NrOFKpl5Ojh8Z/pI1Jm8zl
kCL5yPIJzrhDbzeqnqh7YRcaz8SvDGtczS3CqcBWALUIC2rPW50XD5rjIMi7/+ye
OETevF5hCNm3PJyy+DyfnUOGq/l5a1QgQ3bxsZUdAJsvAbZ7THeou6g/OwgwgaV8
CZbliIqH8P5oG/UbWfxiNW8iBDyC0egYipiPuAivJBEUwVvAIOF4v0DqA5SqgH2w
HP9M14EPL0aIM6wor0rrclKkwwKmj5L9Tt0EvkqZBLQtTOpjxO0wNXDVS1abFoVy
YDyyZSmQ0UDTi1Vnn78x2mg7ykjKlKwutJkGcbpipoItYnWDmJD/rC/YLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqd4B5ZUBZioM/+Dc0kVUhB8LbWMB8GA1UdIwQY
MBaAFLS8Cbrry69j9emoLAodnXs+p3plMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxQQY8Wp
c6dn2/u22Cc9eGXi6apaICtpg7Alo2vLVvbkM3XdiRnn0cngPmnPcIjjIvGwFed1
axcjOajnmwcu+s8Bx3lKxfaFP/QIfjpErspnePPuDlZBilqxec9D2VGviRuYJnHo
2FecpyOt5TSmhPS1PGq8vANhLwxawnKiIGzZuExJz7mmQ0nhXCIfUWckw4kdMLsh
OueiXGqcAGaweJTVCuLPWdUJlkhvLcjbf+dq9hLEFwmVDVOJUuzT2uRDdBLjRDY3
tuwix0uptdL8w0OP2dpNmkPBJgwKbhOHbbSyZMqjh0z1whZ2JG6CWGsQoNtZVut1
WM5FVTTEHEvGrw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:54:58 2026 by rpki-client