Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
File: tw62RTcL6XD5Yn-2p0_zlCJaelk.mft (raw, json)
Hash identifier: VDYLOQ7xasBi4AIFGgcED5VS1hFhoztSANnr7jU6m4g=
Subject key identifier: CF:35:CC:A9:95:12:EA:9C:01:4A:FA:66:E2:18:5A:84:FC:4E:DF:16
Authority key identifier: B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
Certificate issuer: /CN=b70eb645370be970f9627fb6a74ff394225a7a59
Certificate serial: 019FAC75BB2EF4AD5D754F8CA432464228D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:24 +0000
Manifest this update: Wed 29 Jul 2026 06:00:24 +0000
Manifest next update: Thu 30 Jul 2026 06:00:24 +0000
Files and hashes: 1: nDBWMVAEYABPmwRQUfdrYuE6rGw.roa (hash: GU7opyYf2/XqFKUDoqP4OkYoUQ4kZmYzVcLepgnMjpc=)
2: tw62RTcL6XD5Yn-2p0_zlCJaelk.crl (hash: 1bIa3GVjlYF5srm7xnrbJxEe6P8HzX+7nTQoreK5saM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:bb:2e:f4:ad:5d:75:4f:8c:a4:32:46:42:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70eb645370be970f9627fb6a74ff394225a7a59
Validity
Not Before: Jul 29 06:00:24 2026 GMT
Not After : Jul 30 06:00:24 2026 GMT
Subject: CN=cf35cca99512ea9c014afa66e2185a84fc4edf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:58:a9:f0:f3:d9:c8:43:2e:02:98:dd:54:
8d:3a:3d:d8:02:ad:47:e5:db:d8:6e:de:90:dc:6a:
89:72:2c:df:5e:12:0c:45:9e:fc:49:0f:cb:83:e5:
8e:a0:c7:93:47:0c:f3:68:71:d8:b8:a6:73:94:f3:
fd:3e:60:0a:8a:f4:b1:a2:be:0d:42:fc:cc:a8:75:
b0:28:0d:e1:fe:f2:86:a9:69:2c:f2:ab:51:0f:3c:
95:33:17:7b:55:ae:61:23:0b:d9:76:e9:a7:24:5a:
59:a5:7b:fc:69:71:05:94:e8:7f:89:58:02:69:c6:
23:ce:89:22:2b:b3:30:95:c3:07:dc:9a:36:57:60:
79:d1:58:85:50:b2:67:0b:9a:54:9c:79:6a:46:d6:
c2:90:87:27:e1:09:7a:ed:2f:00:24:12:16:01:ad:
d6:06:82:31:09:87:e5:7f:f7:f1:17:61:5c:f2:93:
76:37:25:a3:6c:0c:27:66:e1:5f:cd:a6:90:74:cb:
ad:35:a0:32:b0:64:08:3f:8b:9e:d9:30:d6:8d:d0:
2c:2f:e4:3b:fc:59:32:24:03:f1:81:be:25:71:6f:
f0:ab:c9:67:42:25:ad:5b:ab:4f:39:8d:1f:b4:69:
8f:63:21:7b:2e:c1:e9:d9:c2:d9:51:28:02:b9:18:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:CC:A9:95:12:EA:9C:01:4A:FA:66:E2:18:5A:84:FC:4E:DF:16
X509v3 Authority Key Identifier:
keyid:B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b6:4b:8e:92:fc:b1:53:0c:45:99:10:6c:b8:64:13:94:b1:
2e:52:7a:b4:a6:13:0b:99:5c:84:dd:20:63:2a:c4:f5:6c:fe:
e2:cc:e6:da:d8:65:9c:b8:bc:82:19:c5:0a:37:eb:2b:e5:c1:
d2:65:3d:43:78:24:56:54:3d:bd:39:7a:1e:c3:07:ef:af:30:
d9:bd:31:7f:f6:6c:91:3b:c4:3c:ee:5c:2e:07:a2:f7:02:2b:
9d:d1:19:7f:54:ea:90:10:95:09:d3:33:4d:89:f8:86:96:33:
5d:f6:8a:f3:ad:f1:46:40:38:a3:0b:b6:ca:82:05:f8:9c:b0:
d9:36:7c:94:ee:28:46:cc:08:d7:37:9a:f8:21:92:42:39:9b:
24:58:9d:a9:27:92:e9:a2:26:82:55:0f:92:0b:ad:e8:3a:7b:
82:af:ba:ed:71:ed:7b:8b:af:2c:d9:d8:6d:1e:2b:2a:f6:bb:
e4:95:ae:b2:66:d4:7e:8f:c2:6e:ae:c6:04:26:f0:06:b3:5f:
cd:e9:f8:7b:c7:c3:3e:84:8c:b6:0a:5c:b4:f2:26:f7:83:3a:
bd:99:57:8b:43:f9:b9:57:45:f7:92:eb:5d:a0:b2:9a:93:5e:
c0:5c:f3:17:35:12:fc:8e:90:1b:38:38:d6:78:59:c1:d5:f2:
2a:8f:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:57:24 2026 by rpki-client