Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: uXRAEDNafQG9NndMXsv7xLCF7SfnfMJZhzm9+ts/jdE=
Subject key identifier: 92:18:22:CD:35:38:41:4D:7A:55:69:A1:91:08:38:5B:FF:97:F2:DB
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019D99D063BF3BE72A29E25812A6D848EF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 08F5
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (hash: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: Sswfu20+isG5XYgQ/rfd7NV4o6K6iBnraEPsndxzRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:63:bf:3b:e7:2a:29:e2:58:12:a6:d8:48:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=921822cd3538414d7a5569a19108385bff97f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:30:52:ad:fd:fd:40:c2:b8:de:a4:eb:42:
4c:7e:08:07:bf:8e:c7:f5:25:05:5f:24:99:a8:6d:
05:b8:30:3f:e7:f9:cd:fd:ba:20:0a:51:3e:5d:59:
2f:9f:c6:52:e9:25:e1:f7:0d:e2:02:bc:64:d3:2d:
b7:6f:20:41:4a:fc:8d:61:dd:e4:4e:dc:d5:27:5c:
f7:d3:1a:3b:5f:fe:1d:8a:c5:6c:31:13:27:dc:47:
55:22:2f:9b:5a:f8:24:e1:98:6a:c4:09:1c:aa:3b:
36:65:c5:7a:dc:52:9f:8c:81:dd:e4:6a:eb:05:18:
b8:5e:c3:77:1f:0e:f9:5f:1b:da:3e:85:a3:2f:dc:
a7:c8:6f:39:9b:18:90:ad:78:24:9a:6f:c5:78:85:
5e:0e:2f:a8:02:08:b1:2b:ec:70:96:40:bf:62:af:
96:65:f0:3b:05:11:9e:de:cc:fb:1f:ec:3d:ee:a8:
79:d8:33:4a:39:2f:b6:09:03:21:2c:25:2e:27:4b:
e1:4c:c4:ca:79:af:9f:92:b7:48:bf:87:08:5e:fd:
46:99:09:b0:2a:96:e8:4e:d6:b1:50:4f:2c:72:fe:
99:2c:1e:56:74:ec:67:fa:05:af:40:89:02:d6:0e:
0f:5a:21:1e:b3:2f:d6:4a:0a:68:cb:c9:10:f3:59:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:18:22:CD:35:38:41:4D:7A:55:69:A1:91:08:38:5B:FF:97:F2:DB
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a3:75:a9:cf:13:2b:a9:55:17:20:19:be:94:8f:08:e9:04:
cd:e7:d0:3f:60:04:43:14:72:61:55:be:42:1c:2d:7d:a3:5b:
02:a4:c7:a8:3d:dd:e0:2b:09:e6:63:aa:0a:d5:73:ae:66:e4:
0c:21:38:05:26:1d:76:b2:18:59:16:8a:93:41:59:00:30:bf:
0b:62:b9:08:8d:e5:b2:a7:e1:b6:4a:c5:f2:70:3e:24:84:c2:
fd:2d:65:45:8f:91:3b:b9:c5:ab:86:86:94:d6:80:9d:e1:5b:
f1:d4:38:d1:40:e1:34:2c:ab:ed:e2:42:70:12:3e:e3:26:60:
5f:23:dc:34:90:24:fe:51:9a:c1:8c:be:39:e6:da:bc:05:e8:
19:51:ca:8f:aa:75:d7:6b:75:83:0e:fe:34:fb:e7:e5:0a:6d:
81:74:f3:a7:b3:c7:f5:7c:12:f8:d3:35:d1:88:e5:e5:4b:08:
9d:f5:c1:0a:d0:ea:c5:7b:fd:1f:ce:ca:92:5a:52:ed:59:59:
d6:2c:b2:83:8f:55:97:9c:95:ea:70:21:d1:22:d7:81:f6:37:
83:99:7c:8d:2a:a7:a4:65:2a:e7:84:30:43:dc:69:32:47:f2:
4e:37:86:69:03:a1:a0:9b:e9:7f:ec:82:51:d6:09:a8:ff:a7:
6c:3d:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:02 2026 by rpki-client