Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: mPR9Ylfcrq5Hxa9V+xRLMUYIR2c3cLIFT+jBI0O+RQ4=
Subject key identifier: 40:44:44:20:5C:2E:9E:FD:49:73:15:A0:BB:F5:7C:E6:2D:46:68:DE
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 01A0EE1D537053C71F00670315D8E0564B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 157D
Signing time: Tue 29 Sep 2026 17:01:34 +0000
Manifest this update: Tue 29 Sep 2026 17:01:34 +0000
Manifest next update: Wed 30 Sep 2026 17:01:34 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: Sn0QHgY954LpBt8DtGcKjxR44Dg.asa (hash: 2M2BaxTHZl1fixS1P0qCYkfhEwbPQ8Y6PSqpN2/G+4w=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: QjI9Pg+yPZxDKnu0QROWu7Emx/MhpYWtHybg+B0Z7+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:53:70:53:c7:1f:00:67:03:15:d8:e0:56:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Sep 29 17:01:34 2026 GMT
Not After : Sep 30 17:01:34 2026 GMT
Subject: CN=404444205c2e9efd497315a0bbf57ce62d4668de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:61:aa:a8:50:12:6a:21:ed:82:2e:80:e1:
98:84:97:91:87:a3:c9:a5:9f:d7:34:87:fb:ef:1c:
33:c6:01:e0:7d:68:07:74:54:13:82:16:70:cd:6f:
ae:7c:af:0f:98:c1:c8:41:f5:cb:7f:25:16:e4:ac:
d5:f8:11:e7:1f:57:5b:2d:82:e6:29:15:c7:24:00:
79:6a:98:73:b6:fc:58:73:4e:05:cd:ee:14:8e:6f:
23:c5:ac:7b:fd:c4:67:36:d0:50:0a:61:a3:08:0b:
4c:61:1d:da:50:50:5c:59:ec:78:07:53:39:39:05:
66:9a:c9:7d:ff:81:89:bf:52:4a:f0:11:f1:20:93:
5a:bc:17:d9:44:44:1e:84:4f:91:9e:81:28:92:3d:
ef:7d:32:11:16:d5:c8:e8:c0:05:ec:2d:79:f0:b5:
d3:b9:4d:6f:bf:4c:58:b4:8d:11:d5:48:46:96:91:
a5:5b:46:b5:0d:a9:a3:f0:15:89:45:ff:4a:cf:2b:
62:a1:99:fd:7a:66:43:06:08:59:b9:fe:e9:bd:23:
d7:58:a6:c0:f8:d1:30:15:3c:05:ac:29:68:7d:2e:
8f:c1:a3:52:d8:4f:6d:9b:a9:c8:c1:5f:bb:6e:49:
a8:3b:25:e2:33:b2:12:c2:5b:78:7c:ed:e1:42:38:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:44:20:5C:2E:9E:FD:49:73:15:A0:BB:F5:7C:E6:2D:46:68:DE
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:a0:b1:76:a7:8a:cc:a9:f2:35:bc:36:92:b1:e4:42:8e:
75:53:99:8f:74:a5:26:2a:c5:08:d4:23:a1:1e:0d:ac:41:19:
00:17:b1:12:c5:0c:a3:55:2b:1e:de:b2:05:2c:8a:0b:b3:57:
cd:17:d9:d4:51:77:25:eb:cf:f0:c6:2d:81:12:1e:ce:b9:cf:
72:01:4f:15:4e:d5:7c:a0:30:af:d2:d8:e5:1f:fd:96:30:ba:
7f:36:31:ca:92:3a:cf:d8:dc:a6:3a:cf:7c:30:ab:08:1c:6d:
8f:05:a7:9f:d9:09:92:c5:fe:1c:02:29:5e:e1:f3:09:d6:00:
97:56:40:67:cd:1d:66:ae:9a:8e:4b:19:a7:ee:8b:e0:06:e2:
41:44:33:41:22:f7:18:e6:9e:28:3f:65:31:a4:45:bf:e5:fd:
3a:4a:13:27:f7:e0:e6:73:50:3b:2e:b8:8a:c7:2e:ca:6c:f9:
c9:78:a1:2e:74:13:c3:b5:f9:06:b0:bb:51:2c:87:d0:fc:a8:
12:d6:ff:75:4d:25:25:d1:cf:a3:c5:c9:8b:67:21:76:f9:6a:
56:2c:ba:2a:9a:3f:0c:80:9c:d6:66:41:c7:16:f8:19:3d:d6:
e5:05:92:86:0e:a2:76:89:84:db:af:a7:89:1c:3a:bf:57:95:
b5:43:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:43:45 2026 by rpki-client