Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: HpA75LtuxHWwR6qj2TWfNjYz5G2Ww29duvZAyHc3Fuk=
Subject key identifier: 22:01:E1:8F:95:29:F3:3C:EF:AF:FC:26:F0:3A:BC:9E:2E:DD:C8:CC
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019D9A3E97CCD15BE70C18D4FFF8C24F87EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 0666
Signing time: Fri 17 Apr 2026 07:01:26 +0000
Manifest this update: Fri 17 Apr 2026 07:01:26 +0000
Manifest next update: Sat 18 Apr 2026 07:01:26 +0000
Files and hashes: 1: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: DEdIzPq28LnkWeb82SNevZ7CVj+5aQMWcSaMr8TeTGQ=)
3: u2WfF9In72cKbk56xhUnLtQds5E.roa (hash: lXqEAMd861hGDluqkgvGTYLqDE2FQJtnTBvspyPWGQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:97:cc:d1:5b:e7:0c:18:d4:ff:f8:c2:4f:87:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Apr 17 07:01:26 2026 GMT
Not After : Apr 18 07:01:26 2026 GMT
Subject: CN=2201e18f9529f33cefaffc26f03abc9e2eddc8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:50:cc:ef:7b:6a:01:27:74:99:ca:0f:8e:
b6:6a:2b:4e:ea:0f:29:1e:13:85:c6:ac:6a:2a:38:
6a:76:49:36:06:a9:52:df:a8:fb:44:04:88:ce:01:
25:78:ef:2e:bd:c4:a1:ef:fb:4c:ae:0a:00:63:c2:
f9:88:d2:a7:ba:14:cd:0e:a3:87:18:b0:a9:eb:47:
18:f5:5b:17:36:c6:fa:6c:3b:ff:96:6b:2b:0d:90:
e0:27:c9:c9:3e:f8:df:fd:e0:99:9a:59:a8:51:c8:
ed:56:95:4f:17:31:41:b1:9f:d3:b8:5a:a6:db:22:
3b:1d:5b:7f:76:da:c0:80:f9:93:3a:ef:aa:89:c1:
4e:ad:54:af:f7:0f:cd:0c:27:a0:f7:e3:e7:87:cf:
d2:70:98:10:f5:26:0e:24:c8:9f:2a:a5:7a:78:2a:
ae:9d:52:33:e2:84:bf:98:02:15:27:c1:4e:90:b3:
80:2e:df:e8:66:cd:80:0f:9c:17:99:66:15:2f:2b:
5b:59:c1:5d:e7:82:35:96:ab:8e:93:fc:73:26:57:
9b:c2:76:18:03:06:5d:cb:dd:8d:8e:d6:52:29:46:
fc:6f:21:5b:f9:6d:8b:05:b0:97:4f:b3:6f:30:4f:
10:e7:1c:c2:c2:74:fb:d9:7d:0c:ce:67:4a:27:fa:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:E1:8F:95:29:F3:3C:EF:AF:FC:26:F0:3A:BC:9E:2E:DD:C8:CC
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:6e:5d:3d:e0:df:ed:4d:f0:f9:6e:13:42:01:fb:f3:ef:
5d:83:73:51:8d:4e:42:cb:23:d1:de:34:df:82:9d:27:e0:29:
0b:fb:04:99:d6:5b:39:a4:d0:ef:86:0d:50:04:8b:34:01:2b:
d7:2a:37:58:44:0d:9a:e3:8e:2d:7e:28:3f:51:6e:49:fd:cc:
63:35:97:ee:19:f3:02:93:1e:e6:ef:92:ee:ac:f4:09:f0:43:
7b:d2:90:ba:be:b0:b3:00:da:75:28:4e:14:da:be:b5:ed:37:
e2:a8:c1:92:60:93:e1:fe:73:5c:25:7e:10:cb:23:9b:d6:b8:
6d:0e:92:24:5d:68:1f:14:bc:44:b1:67:ba:64:a9:c7:24:6e:
da:bd:c3:d5:a1:75:04:7a:b2:a9:43:43:06:42:ba:ae:bd:e6:
5f:03:e2:36:6f:42:38:92:c4:44:26:c4:5c:71:69:91:bd:b1:
9a:79:4c:61:9a:6b:69:27:0e:37:9f:cd:e5:f1:95:fa:e4:30:
1b:37:be:fb:47:8f:7e:cb:d4:cd:2e:37:53:4c:d9:00:32:e1:
41:c7:5b:66:38:79:2f:73:a0:33:57:72:b9:9b:77:b7:2c:5c:
00:a4:6a:b0:c8:39:f6:04:80:46:67:5d:a3:d5:4c:7d:8d:10:
6b:50:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:28 2026 by rpki-client