Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: WJdSY0HwXMqFd+WntdFwXZR3EVj4w1y+PIg0csKVZUU=
Subject key identifier: BD:27:DF:38:F4:77:CF:9A:4E:1D:18:28:5E:8C:C8:DD:83:F1:BD:F3
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019D9C2D27B78FE00A87AC6CEFD4CB38B138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0B61
Signing time: Fri 17 Apr 2026 16:01:38 +0000
Manifest this update: Fri 17 Apr 2026 16:01:38 +0000
Manifest next update: Sat 18 Apr 2026 16:01:38 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: jucY06poksq39UiTK5SorCjAbbUE7IxWY7MODAji3SY=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:27:b7:8f:e0:0a:87:ac:6c:ef:d4:cb:38:b1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Apr 17 16:01:38 2026 GMT
Not After : Apr 18 16:01:38 2026 GMT
Subject: CN=bd27df38f477cf9a4e1d18285e8cc8dd83f1bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:f8:5b:8e:5b:fe:43:19:dc:90:1e:46:b7:
ea:44:57:ce:65:4d:ee:d2:56:0c:dd:d9:41:2a:17:
25:1c:e8:ac:11:89:81:50:ae:17:89:35:b6:f8:49:
3f:45:c1:cb:35:2f:65:9b:b5:0e:ba:5b:e2:42:89:
aa:5b:93:0a:31:9d:ee:a9:95:1a:cf:37:4a:cc:a1:
56:bd:f8:c2:88:be:42:25:5e:c9:e7:e7:b0:bf:a2:
8e:4a:06:d9:b5:67:ab:04:71:00:2f:a3:7b:6c:f2:
2b:63:3c:e8:03:29:cb:ae:4b:53:e8:73:7f:bb:a4:
89:1c:6d:af:5f:23:8d:08:b3:03:64:ea:eb:14:f1:
34:24:fb:21:b0:54:64:c3:b2:f4:93:06:dd:33:44:
48:49:49:f1:be:c2:a8:43:cc:59:f1:48:7b:60:f0:
d1:b3:58:7b:a6:70:cb:c2:ec:72:44:c4:6c:71:eb:
0d:96:d6:2a:e7:22:f0:dd:03:39:00:31:1b:85:16:
9f:a4:3b:63:0b:52:3e:03:93:2b:71:7a:c9:04:ce:
3b:e3:61:35:d7:86:89:c2:91:82:50:68:69:b9:bf:
fb:69:ca:b6:7a:f8:24:95:f2:83:17:2c:bf:fa:3a:
67:ce:8a:d7:a2:3d:a8:32:f4:76:83:03:db:a8:fa:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:DF:38:F4:77:CF:9A:4E:1D:18:28:5E:8C:C8:DD:83:F1:BD:F3
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:09:5f:97:aa:30:33:55:49:2f:97:40:a9:4b:99:35:e5:01:
84:18:32:24:7c:59:7c:25:43:52:ee:2f:a5:e5:27:46:a0:bf:
9f:bd:a7:c9:d5:fe:e3:3c:d7:e7:da:0a:aa:75:48:27:3a:22:
53:fc:42:78:d8:b3:3c:a0:70:58:57:9d:39:c1:e8:82:f0:2c:
81:32:52:0d:e0:39:2c:38:84:49:0a:1b:6e:51:8a:9c:20:0a:
fa:b8:51:4c:23:cb:d2:ad:2b:0e:54:6a:b3:33:f5:81:1c:d6:
41:24:42:e7:9b:aa:fa:08:6e:46:d9:0b:24:51:88:a8:cb:8c:
56:f6:88:a0:f6:b4:68:8f:e3:40:7a:b6:ca:6a:28:83:0e:1c:
62:3e:7b:cf:79:0b:ba:ac:6e:1a:2b:4e:d3:ad:1a:12:e6:1c:
b3:5f:8e:21:67:3a:23:0c:01:ff:cc:c6:7c:48:0b:74:54:c0:
b9:42:8a:68:10:9b:f9:fa:24:d0:38:7b:6e:c7:e7:e0:83:51:
c3:63:a2:6d:b0:04:37:9d:18:47:02:db:36:3c:ee:d7:b0:68:
d7:f3:02:ff:61:a2:d9:c7:89:9c:75:21:04:a8:dd:05:19:1f:
74:d5:de:89:41:b5:aa:02:bb:58:9a:1b:b4:f2:5d:ba:22:bc:
d4:eb:6a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLSe3j+AKh6xs79TLOLE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjYwNDE3MTYwMTM4WhcNMjYwNDE4MTYwMTM4WjAzMTEwLwYDVQQD
EyhiZDI3ZGYzOGY0NzdjZjlhNGUxZDE4Mjg1ZThjYzhkZDgzZjFiZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM34W45b/kMZ3JAeRrfqRFfOZU3u
0lYM3dlBKhclHOisEYmBUK4XiTW2+Ek/RcHLNS9lm7UOulviQomqW5MKMZ3uqZUa
zzdKzKFWvfjCiL5CJV7J5+ewv6KOSgbZtWerBHEAL6N7bPIrYzzoAynLrktT6HN/
u6SJHG2vXyONCLMDZOrrFPE0JPshsFRkw7L0kwbdM0RISUnxvsKoQ8xZ8Uh7YPDR
s1h7pnDLwuxyRMRscesNltYq5yLw3QM5ADEbhRafpDtjC1I+A5MrcXrJBM4742E1
14aJwpGCUGhpub/7acq2evgklfKDFyy/+jpnzorXoj2oMvR2gwPbqPp8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0n3zj0d8+aTh0YKF6MyN2D8b3zMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjglfl6ow
M1VJL5dAqUuZNeUBhBgyJHxZfCVDUu4vpeUnRqC/n72nydX+4zzX59oKqnVIJzoi
U/xCeNizPKBwWFedOcHogvAsgTJSDeA5LDiESQobblGKnCAK+rhRTCPL0q0rDlRq
szP1gRzWQSRC55uq+ghuRtkLJFGIqMuMVvaIoPa0aI/jQHq2ymoogw4cYj57z3kL
uqxuGitO060aEuYcs1+OIWc6IwwB/8zGfEgLdFTAuUKKaBCb+fok0Dh7bsfn4INR
w2OibbAEN50YRwLbNjzu17Bo1/MC/2Gi2ceJnHUhBKjdBRkfdNXeiUG1qgK7WJob
tPJduiK81OtqUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:11 2026 by rpki-client