Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: ODv2mX+RFgaAgJAUXSC0KA36TA0ulbdY9AzFj7GE6hY=
Subject key identifier: B1:4F:FB:D0:BD:A9:D6:26:01:2A:78:2A:F9:3A:E8:06:2E:38:0B:DD
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019EC3A52A4A5F42DC9FFE0FDAF5C780E3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0BFA
Signing time: Sun 14 Jun 2026 01:00:41 +0000
Manifest this update: Sun 14 Jun 2026 01:00:41 +0000
Manifest next update: Mon 15 Jun 2026 01:00:41 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: J1qAsHZlB3B9dVmiN7FfhFX5yI+kVf46zIc6rihI8R4=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:2a:4a:5f:42:dc:9f:fe:0f:da:f5:c7:80:e3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jun 14 01:00:41 2026 GMT
Not After : Jun 15 01:00:41 2026 GMT
Subject: CN=b14ffbd0bda9d626012a782af93ae8062e380bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:06:49:75:9b:11:04:99:d5:12:32:31:9f:
96:7a:d0:db:11:10:ad:f0:ab:b7:37:76:b7:4f:fb:
6f:d7:99:7a:f5:51:77:7b:1c:0c:75:87:36:61:a3:
5c:db:8f:6c:9d:d0:c9:3a:49:09:df:04:4d:f6:5f:
78:06:33:8a:8c:14:16:39:70:42:39:8c:f6:f4:88:
e2:fa:97:65:f3:4f:f5:24:fd:65:2d:58:5d:8c:46:
7a:65:4f:7d:8e:b0:da:c4:fb:31:78:1d:d1:8f:4b:
da:d3:a7:88:89:80:53:01:91:ac:e5:ad:3f:d5:4d:
f3:35:7b:7c:97:d1:db:8a:58:cb:02:4b:8f:35:ff:
62:d3:0c:b0:1b:44:1e:da:c6:21:cd:9b:57:fd:23:
92:c4:7b:fb:ac:4c:ff:b4:02:6d:92:58:ba:2a:b8:
94:dc:8d:5a:f3:ba:39:b5:65:27:52:49:fa:8a:ce:
6d:80:f2:01:36:6a:5d:e2:13:0e:94:26:76:22:1e:
6d:c1:42:77:7a:20:f7:13:ff:02:a3:c3:33:bf:c6:
9a:b0:a9:a9:7d:9f:05:67:3f:13:15:22:f2:5f:52:
11:41:1c:62:ae:6c:73:94:34:f1:0d:5a:f6:72:5d:
d8:08:44:dd:a5:11:9a:68:4d:69:8e:7b:66:24:a1:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:FB:D0:BD:A9:D6:26:01:2A:78:2A:F9:3A:E8:06:2E:38:0B:DD
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:96:5a:aa:ce:49:eb:bc:cd:fb:59:2e:cf:61:97:f8:09:
0b:a1:bc:73:84:80:33:47:40:11:38:a4:91:4e:92:df:19:fe:
1f:a2:41:f3:23:bd:c9:0f:e8:2a:a1:e6:d5:c6:33:2d:65:74:
fe:0c:f9:f3:09:08:7f:28:f4:66:19:9a:af:6b:28:7a:b9:44:
8a:43:7b:0b:bd:1a:b0:56:44:dc:c1:0a:5b:8d:4d:38:90:e8:
ba:6a:41:51:f5:1e:63:22:14:32:ad:41:54:2d:c0:74:bb:29:
1b:d0:0e:aa:8b:fb:27:97:41:9c:2a:18:4c:cf:39:d5:6d:35:
59:07:d4:78:27:cc:6e:f9:09:bd:0f:29:c4:4a:41:a3:17:d1:
6b:5b:e6:18:82:ae:6a:2f:00:3e:5f:89:66:18:97:98:ae:4b:
f6:44:f0:60:b4:3f:67:80:09:1e:06:94:39:03:0a:35:66:bc:
93:bc:be:f0:69:e5:1e:2f:80:be:53:c0:dd:05:f7:20:c8:77:
db:d2:1a:d5:eb:2d:ab:6b:96:1e:08:0b:d6:c0:87:02:ce:f9:
52:f7:7a:8b:bd:e2:9b:b3:2c:33:87:b7:18:09:7a:43:fe:6c:
bb:e7:2e:f9:15:df:f2:e8:7e:39:3d:18:ff:79:8b:75:94:12:
d9:8e:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:27 2026 by rpki-client