Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: 0wqglJ+jT4RKLRUiazb1NhQis24holpZnXYNNrtQdsE=
Subject key identifier: F1:44:6D:7B:35:68:36:75:0A:C8:FB:21:43:52:D8:E5:AB:97:29:97
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019CAA5948504091086C889D8E7670E61413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 0879
Signing time: Sun 01 Mar 2026 17:01:43 +0000
Manifest this update: Sun 01 Mar 2026 17:01:43 +0000
Manifest next update: Mon 02 Mar 2026 17:01:43 +0000
Files and hashes: 1: eHQbOAyv0RKETTpb2aGFBjCfswk.roa (hash: ZOv+B97oBeSHjUy8HXIfk8kqKpqfJNlE9fjiuk6K76Y=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: +pguV8+rvQcXoGAmBvvMC9OoBse8rLiEgRg6vbuzvtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:48:50:40:91:08:6c:88:9d:8e:76:70:e6:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Mar 1 17:01:43 2026 GMT
Not After : Mar 2 17:01:43 2026 GMT
Subject: CN=f1446d7b356836750ac8fb214352d8e5ab972997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:e2:f1:45:2f:48:23:8d:63:ce:a6:b7:b9:
5a:ba:a3:1a:af:f4:29:12:fb:c1:77:e1:e2:9d:4a:
b8:cc:31:9d:89:bb:93:44:93:b2:0b:5b:21:cd:36:
34:68:9d:53:73:1a:05:6b:fa:37:ce:5b:f5:42:cb:
66:02:99:63:85:6f:4f:78:61:97:6b:ea:5d:16:f4:
6d:b2:e8:15:6b:a3:9b:b8:fc:35:99:bc:c6:eb:0d:
80:0c:01:8a:64:37:a3:43:8f:5b:1f:ff:5b:63:ec:
d3:42:09:9b:14:27:4a:91:af:68:d8:80:32:43:ff:
71:5d:68:bf:76:3d:17:83:0c:5c:15:5e:b9:ca:64:
5b:53:e4:7a:c0:ea:83:b0:95:57:4c:33:38:47:de:
85:a6:d7:48:13:75:17:ee:3f:83:6e:89:a5:c7:c0:
8b:3e:8d:8d:02:d1:e6:27:e9:f8:d5:08:82:3a:5b:
ef:bd:3a:98:fb:9b:11:45:ee:f8:b0:b4:4e:9d:7b:
de:7b:5e:96:8d:c2:4f:1a:82:f5:06:e8:07:e4:44:
a7:d2:60:1f:af:24:09:6b:41:ff:fe:86:62:91:64:
93:4a:02:61:c0:f1:b7:07:71:cb:cb:bc:07:72:71:
fc:05:74:b4:5b:02:ba:2a:9b:66:7f:30:85:29:6d:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:6D:7B:35:68:36:75:0A:C8:FB:21:43:52:D8:E5:AB:97:29:97
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a2:2a:a0:8e:d8:e4:cb:13:64:d8:36:a4:aa:98:cd:21:2d:
3f:cf:7d:a9:2d:99:d0:56:5a:52:40:64:95:cd:2c:7c:a9:68:
61:39:9e:a7:e0:26:cb:f7:14:07:4f:27:8f:ba:4f:63:77:c3:
ff:57:74:8f:ee:cc:30:3d:a7:90:65:64:08:3e:a4:4a:d3:c1:
2d:da:88:55:51:37:d0:77:fd:75:df:ab:25:bc:e1:0c:54:03:
97:f7:46:3d:b2:fb:cb:6e:16:c1:59:4d:cd:77:30:4c:c8:fc:
e6:61:08:f4:79:b2:4f:2e:72:0d:b2:97:70:4a:fd:31:33:c1:
cc:74:24:1f:91:11:06:39:b0:ed:5f:e8:11:01:7e:b6:5e:20:
b3:2b:96:1d:c8:32:7c:1c:44:0c:4d:a0:eb:76:b3:80:63:4a:
00:40:8b:a5:54:7b:11:54:be:3d:f4:45:c1:a3:a7:a8:fe:8a:
24:ed:3e:b2:42:c9:a2:ef:88:cf:c7:71:01:9a:fe:89:a7:a0:
a9:1a:f3:aa:8a:ef:3f:69:06:7f:09:51:80:39:60:ef:23:88:
c8:b3:17:c7:13:49:35:73:e2:b1:16:f3:07:dd:31:74:bd:1c:
d0:47:4a:63:6b:1c:1e:3a:47:59:97:f8:8d:ca:2f:c8:7f:33:
68:c5:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:49 2026 by rpki-client