Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: 1JxcYo8HpX3IDBpbsU3oL62EDdzAOzShdxMfWljxEQg=
Subject key identifier: F8:B0:49:95:60:12:49:30:E0:D9:B6:9D:15:A8:BD:D3:76:DD:DE:6D
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 019CAA586002783A807051BC478862A8E5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 126D
Signing time: Sun 01 Mar 2026 17:00:44 +0000
Manifest this update: Sun 01 Mar 2026 17:00:44 +0000
Manifest next update: Mon 02 Mar 2026 17:00:44 +0000
Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
2: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: HrkhDrHsLCf+YQV1XRA7gmif1Oh9j4BMHyIKT2O5xyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:60:02:78:3a:80:70:51:bc:47:88:62:a8:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Mar 1 17:00:44 2026 GMT
Not After : Mar 2 17:00:44 2026 GMT
Subject: CN=f8b0499560124930e0d9b69d15a8bdd376ddde6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:07:f1:6f:03:b9:8d:75:42:2f:34:47:23:
b0:5a:65:9c:bd:60:87:22:dc:52:ce:a4:61:6e:ad:
3b:6b:bb:d9:7d:85:00:69:1f:20:20:b0:06:35:e2:
0a:a4:9e:e1:12:fa:98:33:4a:47:f5:48:62:87:d4:
dd:aa:9e:e6:ba:f1:c3:9f:cf:f2:ab:e3:32:ae:96:
69:a3:d0:50:07:ff:46:cd:64:4a:58:ec:02:6d:60:
23:34:50:ad:a1:0e:f8:59:f2:c2:5e:1b:d9:dc:b9:
12:e0:35:aa:39:b9:6f:68:b2:0f:3a:ad:8c:5a:79:
39:71:95:b9:c9:4f:c0:2a:29:94:b0:21:7b:80:34:
7e:cc:0f:d1:84:d2:af:6d:7a:4c:b0:58:43:c8:10:
01:17:8a:c0:3a:0f:7e:19:80:af:a1:41:33:c9:28:
a2:04:55:83:78:93:ff:ee:2a:36:45:99:4a:3c:db:
de:10:e3:53:95:2a:12:90:f4:e7:b2:77:7a:31:41:
d0:2e:fd:0f:d4:b9:26:2f:d1:aa:7a:76:8a:91:b4:
22:4c:a6:75:c6:62:88:6e:6c:72:67:30:d4:cc:dc:
c4:70:c1:7e:45:6f:37:0b:ee:8e:75:12:1a:49:d5:
e0:8a:ed:7e:9f:3f:7c:3d:bc:48:58:dc:b2:f6:f2:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:49:95:60:12:49:30:E0:D9:B6:9D:15:A8:BD:D3:76:DD:DE:6D
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fa:d8:bb:f5:50:d7:f4:04:91:b0:8c:7b:b0:cf:3e:f4:3c:
d6:8e:3b:e4:a2:45:c4:88:62:79:45:57:f2:85:e0:f1:4f:45:
ac:be:17:d5:0a:f6:1c:44:ee:10:4a:13:19:2b:17:80:0a:27:
aa:45:e5:1a:5c:ce:58:c4:85:9f:e7:28:85:71:5e:82:17:87:
cb:ef:7a:96:e0:72:95:44:8b:82:95:0f:cf:6b:7f:f6:a4:9c:
98:71:11:19:ee:84:dd:e7:a0:87:f0:ca:11:24:4f:4c:64:aa:
36:d4:64:11:2e:d4:2c:a2:5d:27:38:24:67:1b:1f:e5:d2:22:
5b:57:53:de:72:b1:d4:c1:97:ed:a6:86:fb:af:57:f0:04:c4:
3e:de:9f:fe:97:a9:ad:9c:11:f4:6b:53:a8:dd:11:60:10:bc:
cc:06:e7:98:fa:8d:2e:33:cc:46:a8:e3:d6:37:47:2e:f9:a0:
47:9a:6a:f2:d3:3c:cc:b7:5e:a0:6e:16:06:1f:07:f1:b2:03:
63:40:80:c1:c6:4a:57:44:a2:ee:f3:4b:5a:00:d2:3c:61:c7:
6c:f5:46:7e:87:36:85:7f:b3:0b:15:c8:ba:a3:e0:ce:0d:e7:
f7:95:79:3d:06:5a:de:78:70:2d:57:8b:72:63:83:3a:43:a3:
67:a8:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:07 2026 by rpki-client