Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: KdyxzLisg3n3Qo568x2ZFWHTlqAX4d2fwzwW/h221g0=
Subject key identifier: C5:96:99:4C:92:F9:67:3E:13:EF:E6:D6:E8:1D:0E:73:4F:DC:BA:FB
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019FAB63AE8C6D00F7B168D14989954AE085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0C72
Signing time: Wed 29 Jul 2026 01:01:04 +0000
Manifest this update: Wed 29 Jul 2026 01:01:04 +0000
Manifest next update: Thu 30 Jul 2026 01:01:04 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: dh5T31Z6sgGYL+Lq+aRyfAOcRoRM9GeMkNvwO+SbPXY=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ae:8c:6d:00:f7:b1:68:d1:49:89:95:4a:e0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jul 29 01:01:04 2026 GMT
Not After : Jul 30 01:01:04 2026 GMT
Subject: CN=c596994c92f9673e13efe6d6e81d0e734fdcbafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:83:05:0f:f6:f1:b7:41:46:46:90:ac:3f:
c2:d2:7a:6c:ca:eb:3a:95:85:3c:19:bb:45:f1:ef:
5b:e6:c7:e9:ef:92:b3:2e:b7:c9:77:20:f0:72:c5:
71:84:7d:4b:a7:c3:25:e0:19:e5:84:2f:91:ba:c2:
42:66:8b:0b:0c:2d:99:d5:54:b0:0b:ac:e2:0c:87:
7a:2a:eb:fe:dd:2a:5d:72:31:e5:9c:d3:dd:0c:e2:
54:a1:d8:87:15:4a:ab:e6:6a:cf:3c:58:26:97:7e:
88:54:af:b5:6f:54:05:80:c9:a4:aa:33:85:4a:b3:
b1:0b:e5:ed:01:79:8e:fb:50:04:43:90:fa:04:3c:
72:48:d0:a7:63:34:6f:29:7b:93:8c:20:82:fe:4a:
a8:32:f4:76:0c:7f:b3:1d:f7:21:a2:ed:cb:31:61:
11:91:5b:da:a4:78:db:1f:aa:1f:91:f5:04:3e:67:
85:10:82:95:db:d0:e8:b3:a6:53:d1:ae:ce:6e:f0:
d7:ce:b5:48:36:71:12:0f:d0:3e:d2:43:e1:34:6d:
6d:4e:5d:0c:91:64:79:2a:04:dc:91:99:6f:3c:72:
ad:46:f9:73:a0:f3:2b:b9:8f:1a:c0:6f:73:ca:2f:
88:f7:8e:f9:2d:c4:08:33:30:03:41:cf:d7:fd:4f:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:99:4C:92:F9:67:3E:13:EF:E6:D6:E8:1D:0E:73:4F:DC:BA:FB
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1d:1c:07:57:81:51:09:16:51:09:90:6a:40:ea:fa:50:88:
f9:c1:74:bc:eb:47:41:55:0a:7d:a8:7a:aa:02:95:7d:16:68:
c0:4e:a7:7f:fa:1f:1a:10:ac:63:cd:a6:55:ef:9d:9b:4e:82:
44:2f:63:a4:77:de:f4:98:0b:ab:d4:bf:7d:72:81:4e:39:45:
93:34:ec:59:56:45:78:a6:a2:1b:c8:ca:51:38:86:b8:c2:af:
1f:39:94:1a:3c:4a:b1:25:ea:7a:42:a7:fa:44:da:23:26:4f:
84:1a:e4:79:18:3f:58:18:fc:19:42:77:0c:68:cb:fb:61:96:
90:b1:10:fc:8f:d7:0f:8b:b5:26:9c:50:66:1c:91:2c:57:f8:
68:db:94:ac:4b:f0:99:87:59:ce:86:c5:c9:27:e4:e9:3c:07:
91:a7:90:10:42:dc:2e:d1:3e:3f:2f:5a:c4:6a:57:85:54:95:
f7:09:c3:ca:72:62:c2:df:80:4e:d4:df:66:b8:77:c4:72:fb:
62:52:b2:0c:ff:52:b4:10:34:70:b6:37:e4:17:b9:fe:fd:64:
a3:6f:9c:e9:1f:9e:b8:02:2b:cf:d3:15:0c:f6:71:b5:f9:84:
74:2a:dc:d6:43:38:95:4b:9a:97:7b:3c:dd:c8:47:52:25:b4:
55:4e:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:07 2026 by rpki-client