Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
File: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft (raw, json)
Hash identifier: YU8XB/iqbURzolBgQw0gvhExueAt1bXxxzml4egTaeM=
Subject key identifier: EE:74:0A:AE:10:55:2F:9B:41:8E:D6:31:CF:6B:02:9F:A7:B8:9F:5F
Authority key identifier: B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
Certificate issuer: /CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Certificate serial: 019CAA8FB265B25DAEF6A0F1B671E845C26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
Manifest number: 0F64
Signing time: Sun 01 Mar 2026 18:01:09 +0000
Manifest this update: Sun 01 Mar 2026 18:01:09 +0000
Manifest next update: Mon 02 Mar 2026 18:01:09 +0000
Files and hashes: 1: C97_7VGyt3z51YWbg6YIKKzKTkE.roa (hash: iks5W0aWtIawzxWfA5TI8oBeO4XFNLqMOBRmY+MnMEw=)
2: tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl (hash: Kv9BKAsjNvNtqz6ZuDPUnKWaQ9ryvTy9QKhBFPa7zs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b2:65:b2:5d:ae:f6:a0:f1:b6:71:e8:45:c2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c0fafa650dd94a3b5581739f63d88efa414f3
Validity
Not Before: Mar 1 18:01:09 2026 GMT
Not After : Mar 2 18:01:09 2026 GMT
Subject: CN=ee740aae10552f9b418ed631cf6b029fa7b89f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:3a:9b:6e:8e:2c:51:cf:97:2c:e8:91:11:
22:0e:bb:ec:9d:16:6a:97:cc:93:5d:36:99:e6:e1:
fe:d5:06:69:c0:a8:11:07:7a:f2:4d:22:14:4a:d2:
a5:07:6e:79:37:4e:f7:da:09:34:25:0f:05:55:d6:
07:c2:fd:26:64:de:bd:f8:24:8b:22:04:da:07:9b:
37:d2:cf:ed:0a:6c:ca:da:da:21:44:92:f2:b6:50:
a8:80:61:29:9c:1b:89:6d:9c:e1:af:28:24:d6:9f:
fa:c6:b2:76:57:77:47:43:77:7f:61:b0:a4:9c:8f:
6a:ba:31:73:a2:e3:54:3c:6d:38:32:93:a6:bc:42:
fc:2d:af:68:3a:11:f1:39:4c:1b:aa:26:5b:35:d4:
33:0b:77:db:ec:49:88:c4:ce:68:88:c0:8a:43:73:
77:e3:0b:ba:e7:0e:02:2e:7d:94:80:f6:5f:49:78:
cf:45:c0:ef:94:b1:d2:96:59:47:4d:94:cd:2a:3a:
81:14:5a:ee:81:49:f2:24:09:c1:c7:9d:16:fa:61:
c5:83:2b:14:84:9a:6c:45:2e:71:3b:3a:1c:d7:dd:
d1:fd:29:14:72:bb:32:fb:f2:97:5e:65:a7:7e:fb:
ec:22:c9:c4:e7:3f:05:c7:b2:bf:0d:0c:e8:25:dc:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:0A:AE:10:55:2F:9B:41:8E:D6:31:CF:6B:02:9F:A7:B8:9F:5F
X509v3 Authority Key Identifier:
keyid:B5:7C:0F:AF:A6:50:DD:94:A3:B5:58:17:39:F6:3D:88:EF:A4:14:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8c02ff-a9c5-4788-ae8b-18b9a8510539/1/tXwPr6ZQ3ZSjtVgXOfY9iO-kFPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d5:a3:83:08:e2:8c:92:07:d4:81:13:90:1f:aa:25:fe:37:
e3:2a:29:30:01:fe:2f:ca:3b:dc:d8:f5:17:bb:69:f2:3f:94:
22:0c:2d:a4:b4:13:5a:48:99:28:d8:66:f7:5b:ca:2f:2f:74:
a7:5d:84:f5:74:0a:da:15:ea:94:65:aa:c0:89:92:f4:d5:b2:
fb:7c:30:db:a5:68:34:1b:63:04:6c:a4:bf:d1:bc:3d:f7:ac:
f6:b0:67:e4:29:06:d3:8f:b7:e6:48:2d:af:3d:9e:94:10:0a:
1c:82:4f:ab:4d:57:c2:47:8b:0f:b4:05:c4:73:49:63:ef:53:
b4:c0:41:47:5a:d3:bf:e8:63:0c:fc:1d:33:12:3f:72:b3:e9:
21:cb:c7:a3:f0:48:27:86:7c:06:1d:66:de:9a:2d:a4:40:cc:
61:7d:ff:d1:ee:be:e4:47:72:9e:9d:0b:a2:66:ba:31:ea:32:
6a:5c:75:20:cb:57:84:a4:fd:e5:1c:b6:5a:4d:d6:ae:40:a5:
6d:0d:9b:35:86:3f:f2:80:26:0d:3e:ad:4a:1d:9e:67:7e:92:
5d:f4:fa:4b:4b:65:9a:e4:f6:73:96:8b:12:1a:91:a0:18:c9:
7a:13:42:e4:99:32:7e:0b:a5:9d:ca:9e:df:21:0c:2c:50:6e:
0f:4a:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:22 2026 by rpki-client