Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: d3wJiYq3vv82cpWIuBSq6znbudSpU/tX7xHfqfZA8H8=
Subject key identifier: 6E:3C:21:2D:CC:C7:AC:D3:18:DD:46:4F:49:9C:52:EB:9C:55:91:8D
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019D9961E1D3838489CF4A98E0C65A40DA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 13C2
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: 9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa (hash: knmR/uu+sixMgJUWyUdxpL/g/5MBZ8SeapJSPjVWp10=)
2: Dj17YO7HbdYhrlszRZcVGHooOSk.asa (hash: VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: H2lqd+zxwHirXr2jDJy3DnbdY6zIEFneVsVRFee3QdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e1:d3:83:84:89:cf:4a:98:e0:c6:5a:40:da:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=6e3c212dccc7acd318dd464f499c52eb9c55918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:7a:3a:c9:3c:da:43:cc:e2:1d:ba:e9:23:
d1:66:9a:47:8d:e8:9c:33:e0:02:83:11:a5:a2:9d:
54:9b:cf:89:1f:b4:91:7b:e9:57:19:11:63:2a:82:
6d:1e:ae:4a:16:10:75:7c:fc:1c:49:35:f2:d4:77:
2d:2c:aa:f6:37:aa:d5:fe:9f:6c:8a:50:40:ef:5c:
dd:53:8d:ed:62:eb:66:a8:4c:1b:e0:5a:9b:bc:04:
36:c7:2b:1c:7d:d8:0d:f0:ad:ba:de:8d:c4:b0:64:
c2:fd:e3:d2:fc:62:8a:82:0f:29:b4:22:2d:3d:3c:
71:52:e3:05:85:72:9b:dd:a2:ad:90:91:05:47:a1:
6e:70:2c:1e:b6:e0:45:ca:b8:6d:5f:8f:a8:24:8e:
d8:9f:00:c6:c2:cd:3f:eb:17:d3:92:ef:4e:08:b1:
b4:7f:b3:64:79:d7:73:3b:52:84:15:1d:c6:c4:99:
63:37:92:4b:e6:5f:74:0e:e3:36:16:69:7a:f0:a3:
b1:fd:ef:21:2d:08:fb:4a:74:d8:33:11:24:7b:bc:
ab:4d:52:ff:1b:1d:f5:2a:6a:fb:2c:87:cf:40:cd:
2d:b4:f5:1f:8d:5f:f4:41:88:83:e1:13:ab:f8:7c:
86:60:42:71:bd:f6:88:85:b8:83:83:ad:39:80:ad:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:21:2D:CC:C7:AC:D3:18:DD:46:4F:49:9C:52:EB:9C:55:91:8D
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0e:3a:54:f8:7a:9d:df:d6:9d:37:4c:05:0d:d9:fd:ab:a8:
1f:19:30:85:5a:fb:cd:77:15:74:4c:9b:74:56:83:c2:f6:7b:
f9:69:a8:35:aa:85:d7:65:27:e5:a6:68:00:e3:05:bf:fb:46:
b9:e2:1c:85:cc:84:79:ad:15:50:4d:06:7e:03:29:26:e7:d9:
6c:60:a7:85:66:b2:77:1c:67:68:29:21:3e:b8:89:46:82:4a:
14:f0:ee:ac:12:07:06:18:46:85:5e:62:91:54:eb:e2:96:cf:
19:81:cd:9f:4e:e9:f2:12:59:08:ff:63:a0:12:c5:b2:50:05:
4b:7a:1b:76:5c:df:8d:cb:47:6d:e9:d1:66:85:25:68:04:1d:
f7:fd:aa:24:92:93:9b:d6:92:3e:46:5f:fb:03:97:96:f1:8c:
4e:ff:f9:14:56:90:34:5d:87:5d:4c:9c:45:6d:14:8e:47:d2:
4e:bb:ac:f4:18:cb:77:d6:fe:c7:9a:dd:e4:44:e8:5a:29:8a:
79:25:1b:71:bc:a4:84:6b:da:73:c0:dc:de:d8:d8:e4:64:c9:
b0:b9:d4:41:b3:e3:5e:d0:6f:8a:3f:b3:84:32:80:27:ed:04:
e8:1f:04:a6:88:e9:72:d4:8a:14:de:2b:e7:61:cd:c9:79:bb:
83:65:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:20 2026 by rpki-client