Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: +/bZ6cgRWIF6m9cKONOso+5HzyHpgY+3GQlqZAaX1aI=
Subject key identifier: C2:15:A2:B9:6B:9D:79:71:B5:3A:8D:8D:6A:36:04:D3:8E:E4:40:3C
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 01A0C7EAB4C03C578EDBC648CB9E398C4688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 19FA
Signing time: Tue 22 Sep 2026 07:00:42 +0000
Manifest this update: Tue 22 Sep 2026 07:00:42 +0000
Manifest next update: Wed 23 Sep 2026 07:00:42 +0000
Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: Ma+fXmvWGCsohZ4Qh2301rv0A+R4dFp/YchrQJ/cyIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:b4:c0:3c:57:8e:db:c6:48:cb:9e:39:8c:46:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Sep 22 07:00:42 2026 GMT
Not After : Sep 23 07:00:42 2026 GMT
Subject: CN=c215a2b96b9d7971b53a8d8d6a3604d38ee4403c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:f6:01:33:81:51:0c:f2:f2:4f:2c:f6:04:
76:8c:73:a2:fe:b1:01:6b:fa:f4:66:c2:e4:ef:b8:
f1:bd:1f:b4:9f:c5:f4:bf:43:fb:4b:f3:ca:53:ab:
1f:21:d5:bb:96:26:9c:3a:fd:e3:38:65:8c:e4:9f:
00:b6:89:d0:c8:67:b6:10:90:7a:6f:a8:76:6c:10:
40:f5:2b:0b:97:aa:d2:60:28:59:b1:52:f8:3c:13:
97:d3:7c:35:44:4f:24:de:45:44:fb:1b:a9:b6:46:
df:40:ec:e5:4a:0a:66:77:eb:49:9a:43:8b:6c:2b:
62:d8:39:3a:b5:bf:0b:27:28:fe:86:05:9f:a4:ac:
c2:79:b2:8c:2b:7d:88:f0:88:94:d4:76:ef:90:b5:
3e:14:89:6f:5f:3e:f3:23:c1:a3:10:1d:8d:a0:d2:
fe:b7:01:2e:eb:6e:6d:ed:e3:7e:13:cb:c1:88:ba:
19:b6:56:99:38:16:8e:5c:9c:20:bf:41:2b:25:c7:
dc:7a:4c:ae:ae:24:36:d0:36:39:5b:6c:49:a7:82:
d6:fa:fc:3c:2e:62:03:a3:5a:fa:1c:0e:49:4e:53:
63:74:a2:36:85:b5:49:e5:0f:a6:d7:6d:92:cc:c9:
42:8c:7e:66:be:cf:ae:67:2e:29:06:1d:3d:80:42:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:A2:B9:6B:9D:79:71:B5:3A:8D:8D:6A:36:04:D3:8E:E4:40:3C
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b9:4f:2c:0f:76:60:7b:34:0c:70:a3:55:31:10:21:90:0d:
53:70:ea:d7:13:3f:dd:c7:e4:6b:35:b3:88:db:63:4b:91:49:
5b:e0:ed:4c:d2:cc:40:ce:56:61:66:76:a1:73:d8:ff:49:a2:
d0:85:2f:b6:91:21:2a:2c:cb:68:7d:8c:7b:4c:fa:fb:15:73:
12:3b:5f:fd:72:10:4a:27:27:46:9a:f5:23:0b:25:56:19:a7:
3c:36:a9:ed:8f:9a:97:62:3e:bf:1f:7e:11:98:a4:93:56:0a:
d2:82:43:0e:8f:9b:54:57:57:6d:80:9b:34:d4:77:bb:5f:16:
f3:8f:93:a0:41:d0:df:d2:e0:c1:65:e8:35:95:02:d0:b1:bf:
45:03:45:27:0b:0d:02:ac:3a:23:eb:05:a0:43:cc:5c:dc:59:
09:be:f4:13:2e:4d:20:e3:74:29:63:66:4d:26:4b:10:b1:1d:
df:c0:c5:36:b9:58:5b:5b:ab:21:18:36:3c:67:6b:e5:d0:f7:
84:19:06:f8:74:73:72:d9:61:b7:d8:10:34:e2:12:11:0f:4a:
96:0b:95:75:75:19:13:2a:cd:d8:59:5d:fe:1b:9e:17:8e:04:
de:0f:bf:6d:66:a3:4a:1f:1a:77:3e:18:95:31:6c:2a:c6:a9:
33:ff:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:32 2026 by rpki-client