Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: G76ue6e0FHNqDXLTdxsnfioLBBDtMPxsIych8orvlrw=
Subject key identifier: B4:96:B5:E8:C4:F1:DA:3C:FD:44:41:EA:D0:18:E4:FA:59:AA:D5:E4
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019CAEA2E9E844B9BB166FCE230721FBC963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0AE6
Signing time: Mon 02 Mar 2026 13:00:38 +0000
Manifest this update: Mon 02 Mar 2026 13:00:38 +0000
Manifest next update: Tue 03 Mar 2026 13:00:38 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: kc4dYSnb6XKxQqmiocPDOGMgOJNWPpBVd2DmBrXpuqs=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:e9:e8:44:b9:bb:16:6f:ce:23:07:21:fb:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Mar 2 13:00:38 2026 GMT
Not After : Mar 3 13:00:38 2026 GMT
Subject: CN=b496b5e8c4f1da3cfd4441ead018e4fa59aad5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:9f:e0:cd:70:76:4f:d1:93:e4:88:92:b3:
5c:50:a5:86:f9:89:b4:09:a3:bd:81:98:4f:45:fd:
0f:b5:87:70:72:b7:85:a5:cf:68:09:34:e4:23:15:
0b:23:9c:90:41:eb:e8:dc:2d:96:68:53:7a:7b:20:
d8:ef:cb:7d:f6:bf:19:aa:27:f1:28:58:1a:59:d3:
07:3c:aa:2e:cf:6d:cc:ed:86:75:a2:6a:6a:f6:cd:
74:26:64:03:56:d8:d2:f7:78:54:f9:15:ef:25:1e:
5b:1e:72:b5:d0:55:42:cd:f7:70:6a:b0:28:0d:b1:
4b:c4:24:55:06:da:b8:fa:60:c8:77:2f:50:f6:ca:
93:fd:bf:4a:98:b5:9d:07:8a:fc:0b:cf:4e:fd:63:
b1:45:85:49:cf:13:b5:27:f5:9f:79:3b:86:00:fe:
ce:82:9c:5e:6d:d5:82:93:6b:fb:38:01:4a:ce:1d:
42:9a:c8:46:13:0b:ab:ac:98:62:10:e1:c0:91:93:
5e:75:b9:1d:71:73:75:e0:3b:44:08:e9:cf:9e:b6:
86:2d:2f:98:3d:27:a5:b9:c5:12:3b:dd:dc:7b:6c:
ac:a1:c9:85:89:6e:b3:8b:ef:b6:19:43:92:46:2f:
d5:23:af:17:cc:71:fb:25:ce:cb:60:79:74:4c:1a:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:B5:E8:C4:F1:DA:3C:FD:44:41:EA:D0:18:E4:FA:59:AA:D5:E4
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:6a:f9:af:13:d2:f1:ef:54:5c:0f:30:69:4b:a5:7f:fc:
49:59:42:2f:87:a0:b0:49:be:45:fa:44:56:01:fa:fd:7c:13:
e5:e3:f3:bb:25:7c:fa:46:05:7f:d7:b2:06:b1:4e:95:93:f4:
9a:1f:a3:d5:e8:d9:8c:ca:25:5b:a3:40:3c:39:05:c6:0f:cc:
16:ab:33:df:77:25:b5:7a:81:75:1f:2b:ea:d8:8e:9d:a0:24:
38:a9:f1:ff:ca:b6:f0:65:ce:91:b7:ac:6c:83:72:fc:e6:4a:
1d:26:5f:f1:bf:ec:c0:ea:8a:f4:b3:93:06:0e:ea:ca:fb:55:
5d:e2:85:cc:9b:87:d0:00:0f:99:f5:ee:b1:9d:0a:40:28:66:
27:0c:e4:22:db:14:d6:ec:f5:fb:cd:be:1c:fd:e2:fb:87:f9:
f4:18:16:0e:f8:d9:42:a7:48:7a:3a:0a:1c:83:28:6d:60:2c:
a3:48:56:31:c1:46:8c:4c:c5:cc:15:c4:e0:16:a3:6a:70:cb:
bd:ba:c3:cc:d8:6e:10:54:d3:18:74:c3:d1:50:5d:a7:44:60:
a8:11:d1:9a:37:0e:75:ac:2c:a0:01:d1:3b:9c:16:2e:d3:93:
41:07:5a:eb:1c:af:2f:23:0d:d3:54:43:a3:87:73:c2:56:0d:
e6:66:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:29 2026 by rpki-client