Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: oBU44KPNqLGk/wmf1qehdfpipjHoAExbpxexBTSB1b8=
Subject key identifier: 27:9C:65:E0:7E:56:86:90:CA:BE:53:69:95:40:7F:DC:E5:30:89:26
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 019FABD0CE44E84DF8B20B8370156DD62EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 0F36
Signing time: Wed 29 Jul 2026 03:00:15 +0000
Manifest this update: Wed 29 Jul 2026 03:00:15 +0000
Manifest next update: Thu 30 Jul 2026 03:00:15 +0000
Files and hashes: 1: 1-nh-wIZbYRM-66D8NvIzY99bdjc.roa (hash: jemes9VVp08HKRuLT5Tahcqefuga/fZeQJPFwphMPVk=)
2: UBFh1GOJKwfHfVNROX0pySkrhLg.roa (hash: 9aS+pDbF/kRsEGF17ZAi+LnIZ4KLD6/VT70cttfQen8=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: Ohuzdr+f6xbHyfCJJWQ3bMdp7x3Yy6vXoDWu3wSmXlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:ce:44:e8:4d:f8:b2:0b:83:70:15:6d:d6:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Jul 29 03:00:15 2026 GMT
Not After : Jul 30 03:00:15 2026 GMT
Subject: CN=279c65e07e568690cabe536995407fdce5308926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:f7:a1:05:1c:8a:98:39:e0:ba:5d:e6:a4:
1c:50:75:af:54:d5:ab:fe:d7:c4:42:38:e7:3a:36:
a8:23:f5:ef:6b:e3:9a:18:80:78:90:fa:05:95:8b:
e0:03:b8:0b:98:22:27:87:ea:4e:1e:01:51:8f:90:
19:28:03:a8:64:80:6c:2c:4d:9b:00:17:d4:cf:ab:
eb:7f:89:9d:8e:a3:c1:6f:52:32:e2:e7:61:9d:41:
cb:85:2e:fc:90:41:0a:18:02:2e:64:43:42:71:8f:
3c:3a:34:32:4e:a7:0f:9c:82:31:dc:93:8e:29:a0:
de:af:dd:3c:85:cc:36:07:fd:d2:6f:3e:8e:cb:34:
a6:b9:f6:63:92:19:38:22:ad:d0:fa:62:1d:d7:10:
fd:ba:63:fe:be:a4:f7:f0:6b:54:17:25:ec:65:46:
16:42:d9:d4:17:1f:f7:91:33:c2:9b:46:08:b4:1f:
4c:76:91:a6:09:43:02:e8:71:99:d6:a7:9b:fd:a6:
c4:92:0b:5a:d7:9d:22:cc:5a:4d:03:19:88:07:3f:
ea:d5:75:d9:0e:98:1e:c0:70:7d:13:f5:54:ef:70:
8b:b5:24:6f:b4:39:7e:a9:8e:aa:a9:63:b6:da:f7:
4b:35:4a:54:f7:bf:37:ad:a2:6d:37:17:f0:6a:02:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:65:E0:7E:56:86:90:CA:BE:53:69:95:40:7F:DC:E5:30:89:26
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:ec:3d:94:10:e0:85:0d:36:88:11:ba:29:6c:76:e6:79:
28:95:72:af:92:a6:fd:df:91:00:a5:8a:42:eb:18:84:62:c1:
2e:16:5a:eb:df:7d:1d:d1:3f:3d:17:cc:69:2d:5f:78:d1:84:
b1:a1:2a:d8:f5:59:5c:93:25:22:71:9f:82:ff:30:96:85:22:
a4:f3:21:90:bb:ad:de:64:82:56:e3:cd:24:21:fb:8a:18:ab:
5a:a3:bc:a2:8a:2c:b4:53:cb:1e:26:14:1d:b3:7b:72:17:dd:
c8:d4:76:7f:d3:2f:bf:8b:f3:f1:9d:84:0d:79:4c:10:7f:0a:
d7:e7:7c:da:40:bc:0a:97:19:17:5f:cd:87:06:07:4b:60:70:
1d:a0:e5:09:bc:ae:e4:40:ed:cb:96:32:21:ef:6a:43:a6:30:
be:44:90:2f:91:6d:1f:72:d6:9d:ea:d8:83:db:07:8a:32:2b:
f4:72:de:3e:5e:d7:ea:af:38:32:0c:2d:cf:2a:e7:b0:5e:a8:
02:54:1b:ed:e0:16:17:b0:06:98:d2:02:07:2f:f1:61:94:46:
6f:b9:d6:2a:d9:3d:5e:0d:e9:77:bd:64:24:c2:3e:b3:82:cb:
1b:24:dc:c4:b9:b4:2a:3d:58:72:d1:fa:93:f6:bc:2e:bf:b9:
92:7d:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:21 2026 by rpki-client