Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
File: tm6nNZIhwbd9bMAG97ZwapqQgpk.mft (raw, json)
Hash identifier: WJnEB3FF4XiAlzqs9WIhv61jVpocuyrm+I6BU6p8IIQ=
Subject key identifier: 07:0F:CB:C7:CB:1B:B0:1F:FA:7D:76:F8:A7:6F:43:51:6D:11:90:4E
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 019CAB34A5871E0CA0A03FF8004360AA38F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
Manifest number: 1858
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: PPMSN5ftVbVmFA7MLiS8HWouZbQ.roa (hash: HtUbwNMUWX3DsqRNwPU8T/yihNDfkh2LcL+11x+HCT8=)
2: tm6nNZIhwbd9bMAG97ZwapqQgpk.crl (hash: VIHeUG6EcZ4iuaQz0y0Z3Tf8OQRWiMz+qrUDOX/SGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a5:87:1e:0c:a0:a0:3f:f8:00:43:60:aa:38:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=070fcbc7cb1bb01ffa7d76f8a76f43516d11904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:da:b3:39:40:a6:08:13:30:de:36:64:1d:
a0:67:85:89:eb:56:35:1f:17:84:58:be:45:49:74:
3f:3a:f7:42:8c:0b:49:63:98:27:3e:36:a5:13:95:
fe:e3:e9:bb:02:5e:43:8f:3d:b9:57:08:d8:e9:86:
b5:db:a3:3e:74:9e:db:12:f1:12:56:11:cf:82:06:
b0:b0:ce:22:88:30:8f:56:7d:9f:67:20:96:19:0c:
5b:d9:9b:de:ff:11:8d:f8:c0:47:1b:22:ad:f6:f9:
56:85:d6:bb:36:6a:10:c2:8e:a2:e3:76:14:6d:ed:
26:5a:11:79:8c:28:8b:da:53:4a:59:ab:cb:7c:e6:
02:64:30:a9:dd:6b:20:45:83:ab:df:4d:ec:5f:d1:
c6:b0:45:a2:56:fa:53:24:ef:8d:78:a2:28:8c:ff:
13:7b:50:d3:45:78:de:52:18:80:b6:35:47:73:12:
7f:a6:63:79:a3:97:c7:70:65:ed:79:c2:dd:bd:f8:
5c:f7:7f:88:5d:ca:2d:d5:e1:ea:70:02:7c:93:3f:
a2:08:fe:ff:68:91:f1:21:a0:37:72:00:32:6b:f9:
dc:d2:49:36:30:90:a0:72:1d:7e:5b:c2:83:2e:55:
45:1d:ee:58:de:17:06:64:6e:fb:16:9f:79:d9:58:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:CB:C7:CB:1B:B0:1F:FA:7D:76:F8:A7:6F:43:51:6D:11:90:4E
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:33:a1:fc:4e:e2:e8:52:b4:08:ce:fb:f8:82:62:3e:2d:8f:
a2:88:a1:28:b5:06:2e:72:dc:41:73:0b:a7:81:59:e7:85:b5:
01:f4:52:59:13:9e:29:98:c4:05:cf:fe:6a:e4:12:e4:b9:6c:
5a:62:c5:58:c3:c6:e0:35:3f:33:26:3a:61:02:41:33:cf:6e:
d5:62:72:13:9c:d8:74:b0:e6:5d:6f:74:9c:c1:ab:5e:c6:8d:
e5:4a:11:a5:1b:b7:c8:3a:63:67:96:d6:fb:0f:75:ff:bd:77:
58:fe:74:da:66:93:72:62:0b:b4:7e:ce:f3:15:58:44:3e:3f:
0c:2f:1a:3e:ed:7c:31:04:e8:16:46:25:b5:11:6a:b0:18:c1:
1b:99:fc:f4:25:ea:eb:3e:bc:a6:e8:d9:35:90:f5:77:3f:01:
7a:59:85:f7:d5:a7:f9:c7:c4:64:ca:21:87:db:8d:4e:60:0e:
9b:84:8a:7e:8b:bf:3e:7a:ae:c8:76:2d:35:b4:0a:da:5e:d6:
cf:ca:4c:01:04:0e:77:6d:16:fe:de:76:28:fd:76:44:93:5d:
9c:75:59:60:e7:36:63:37:44:b9:e2:92:32:74:35:9f:2b:78:
fd:23:bb:21:ed:35:fa:ec:62:9a:67:a8:17:7b:7c:1b:ee:85:
5d:1d:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:45 2026 by rpki-client