Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: Ns599HcsJaSCYSa5HsHJAAHC8gry+CPeC9rOgZSVMlg=
Subject key identifier: 38:9E:59:DC:8F:85:81:C8:73:1E:12:B6:1E:64:3E:8C:E3:6F:E9:F4
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 01A0DB0470E1BFB1653A55F05958A35351BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0FD3
Signing time: Sat 26 Sep 2026 00:01:36 +0000
Manifest this update: Sat 26 Sep 2026 00:01:36 +0000
Manifest next update: Sun 27 Sep 2026 00:01:36 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: Ut/x5YueGd1N6c9MYJhdrWHfSIsDLbhqlxN61TffzhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:70:e1:bf:b1:65:3a:55:f0:59:58:a3:53:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Sep 26 00:01:36 2026 GMT
Not After : Sep 27 00:01:36 2026 GMT
Subject: CN=389e59dc8f8581c8731e12b61e643e8ce36fe9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:ee:c2:12:f0:d0:bd:9d:2e:9b:04:1e:7f:
a7:a2:70:96:69:97:6a:b1:e1:98:e8:f0:9b:7b:4c:
a0:59:d0:47:c6:6a:83:88:3a:e7:7b:86:c2:87:35:
be:0c:9a:eb:ae:71:b5:69:d9:de:57:32:5f:59:89:
59:95:19:64:f8:c4:19:51:8b:80:cc:e6:5e:7b:b5:
68:cd:b2:a5:a5:bf:5f:e1:31:2e:20:55:f3:d8:d1:
02:2d:27:40:4b:9b:58:23:ba:ed:d3:41:75:02:2e:
20:85:51:96:28:b7:0c:78:39:e9:a2:f2:db:8a:47:
cf:a4:41:7f:91:02:4e:ab:a1:a2:0f:d6:97:2f:a0:
55:fc:eb:e5:eb:71:20:8e:3c:0c:4a:ed:de:c3:99:
8e:71:08:96:70:7b:09:8d:75:ed:e1:db:0e:b8:9a:
9b:30:51:f2:5c:78:0d:97:4d:77:45:af:eb:4a:51:
c5:5d:6b:b2:17:f7:36:99:56:42:05:4c:3a:70:a7:
53:7c:11:62:56:b0:b2:7e:31:5b:92:a4:12:26:9a:
7c:6e:df:f3:9b:ab:5d:7d:d7:b1:05:d6:5f:97:d5:
4c:63:27:8f:61:9a:05:4a:d6:f8:16:a6:2a:23:4b:
ec:88:62:a8:12:25:a6:ed:2e:13:c9:eb:44:77:10:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:59:DC:8F:85:81:C8:73:1E:12:B6:1E:64:3E:8C:E3:6F:E9:F4
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:ac:c5:54:3f:f6:fc:51:ef:72:ab:90:7c:17:f5:3e:47:
f9:35:05:cb:fa:46:90:bf:b2:9f:f9:1d:6d:35:94:3b:b6:30:
34:e2:f3:23:d2:c7:29:4a:2e:94:0a:49:b9:75:24:ea:6a:15:
ac:34:35:0f:d3:05:9e:a3:02:d4:52:a4:c5:b8:3a:cd:fd:a3:
fd:45:2a:20:0a:2f:41:dc:b3:ed:7a:47:60:2e:78:0f:61:1c:
26:81:4b:5e:bd:43:09:77:f9:96:e9:b4:03:20:c6:83:08:8a:
24:07:9d:6f:1b:fc:45:d9:76:da:c8:41:36:ce:a3:77:11:ab:
7d:f9:57:40:78:0b:f4:04:a1:53:c4:48:68:b8:dd:3c:08:ce:
ed:84:42:bd:71:a0:ff:9d:74:ca:44:df:05:80:c3:ce:14:03:
1c:c9:a3:eb:15:72:ca:11:59:80:18:3f:aa:8e:22:1f:bd:6f:
08:5e:d2:e4:40:fc:16:e0:5e:16:73:ff:0f:a6:86:1b:6c:d1:
89:1f:7c:2c:02:0b:36:be:3a:e8:2b:3a:51:a7:ff:4d:ff:02:
8c:93:26:ee:39:25:bb:ea:a5:41:be:9d:fb:71:2e:50:fb:3e:
c1:84:bf:47:f9:0b:c5:18:7a:3f:2d:31:86:d2:ce:3b:ac:1f:
08:75:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:56:06 2026 by rpki-client