Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: 5bvOR0ZGgL3RrucufHyvfoXzndG0W41rxEXyvarf7IM=
Subject key identifier: 79:28:8E:E7:8C:49:BA:06:01:45:FA:03:38:30:90:B7:DA:EE:AF:77
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01A0C3A0600CA23549877F53E1931BF6469E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 11:01:02 +0000
Manifest this update: Mon 21 Sep 2026 11:01:02 +0000
Manifest next update: Tue 22 Sep 2026 11:01:02 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: TRMI4JeWj+J77B+DGtOavbPhdyhaMQZvR9kn1J9AAB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:60:0c:a2:35:49:87:7f:53:e1:93:1b:f6:46:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Sep 21 11:01:02 2026 GMT
Not After : Sep 22 11:01:02 2026 GMT
Subject: CN=79288ee78c49ba060145fa03383090b7daeeaf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:34:57:e3:5a:97:8a:18:7c:ad:47:10:42:
ff:a4:05:7e:27:4c:3e:6c:75:c7:25:9f:ea:1f:1e:
53:82:07:09:81:e8:d7:bd:1d:14:73:0c:39:f9:96:
24:2c:cb:5f:20:6f:17:3d:1a:47:1d:d0:fe:d2:76:
94:2b:5f:dc:f7:67:1f:48:e7:1d:11:ef:46:9b:32:
48:a6:54:ba:0e:36:5d:4c:66:a7:d5:bf:a7:8c:f7:
7e:81:33:6c:99:e5:04:58:36:c5:5a:fc:e1:71:9d:
bc:6d:cc:11:fc:bc:9b:1c:24:07:7e:96:10:42:3d:
9a:04:29:3e:d7:fa:68:1e:2b:4c:b8:74:15:fb:2e:
d2:3b:7b:f5:17:91:e4:28:11:cb:f9:6b:2a:37:b6:
49:45:4b:24:3e:37:0b:6e:61:96:52:ac:c7:cd:a0:
da:90:a0:1b:91:dd:e5:27:77:c7:d8:d1:82:b3:9a:
cd:ac:ee:ea:bd:33:e8:24:77:95:ef:c8:4f:d5:73:
3d:c7:32:9f:4f:42:6c:2b:82:65:37:b8:49:59:bb:
47:aa:b6:93:22:01:5f:05:1f:c8:9d:47:b1:9a:47:
29:f5:66:d4:c6:c6:db:09:e0:15:bd:8f:84:57:6d:
86:9e:96:90:d6:f2:88:37:ec:dc:57:20:f2:e5:95:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:28:8E:E7:8C:49:BA:06:01:45:FA:03:38:30:90:B7:DA:EE:AF:77
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:bc:55:d6:7f:98:ba:54:95:36:23:05:43:5d:54:16:cb:
a2:b1:d1:14:2b:91:a5:44:33:2b:b9:c1:77:13:ef:19:ca:fa:
dc:c7:0d:cf:4a:82:21:c8:0a:b5:a4:b2:84:61:38:4b:56:a0:
4e:b2:40:1f:f0:a7:a7:41:53:61:aa:18:c8:fe:c1:a3:35:2c:
b8:38:85:be:69:b8:9d:b6:32:fc:2c:20:2c:ab:5f:50:64:92:
f1:bf:a9:d6:23:c7:29:93:a2:cd:2c:33:ff:76:f7:1e:2b:80:
ef:4c:4c:20:88:c9:2d:50:fd:43:fd:07:5e:ba:e0:85:bd:cc:
4e:12:42:6d:d7:39:fb:7f:62:5c:cb:96:b8:69:fd:3e:fe:8f:
44:81:8f:51:d1:69:5d:a9:ba:ac:7f:a1:4e:c8:e6:49:d2:31:
70:8f:63:c0:71:5e:55:9f:0a:0e:03:f2:a7:c4:40:fb:f4:2a:
ad:04:64:e7:1e:29:bb:ac:21:06:56:63:f2:c7:e2:b3:3d:70:
40:74:7a:8a:67:e6:26:c0:76:5b:7f:c7:99:08:e2:19:e9:51:
02:52:48:7b:6f:e4:3c:e9:33:76:68:6b:26:95:66:15:63:1d:
40:7c:8c:e5:94:17:e6:64:cb:48:e8:02:47:33:38:20:e1:f8:
f9:f8:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:51 2026 by rpki-client