Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: 0tV0clDn77gtd+S+3HMRItfxfsIq1v9dy3pSwutoMew=
Subject key identifier: A8:FA:2F:74:DC:8F:F6:A8:1B:D0:DB:6F:03:C8:82:41:D6:6A:FE:D4
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 01A0EC2EACE5F30013B2A4F503A5EB37A01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 157C
Signing time: Tue 29 Sep 2026 08:01:16 +0000
Manifest this update: Tue 29 Sep 2026 08:01:16 +0000
Manifest next update: Wed 30 Sep 2026 08:01:16 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: Sn0QHgY954LpBt8DtGcKjxR44Dg.asa (hash: 2M2BaxTHZl1fixS1P0qCYkfhEwbPQ8Y6PSqpN2/G+4w=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: 9AKkck+m8PVaAMtDzOSBqMbZ5l1x3Yd8VbEtJDlqbMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:ac:e5:f3:00:13:b2:a4:f5:03:a5:eb:37:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Sep 29 08:01:16 2026 GMT
Not After : Sep 30 08:01:16 2026 GMT
Subject: CN=a8fa2f74dc8ff6a81bd0db6f03c88241d66afed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:07:d7:a0:2c:46:ad:46:14:43:8b:5e:59:
c4:f1:31:f6:b1:15:03:33:57:ff:8c:e6:bf:b8:d1:
01:79:a0:c4:7f:63:90:9d:9e:7c:b9:90:45:f8:70:
5f:4b:0c:c6:9f:ed:f2:6f:34:52:5e:b6:e1:86:f0:
7d:cb:45:07:f5:69:43:cd:67:cb:56:23:bf:46:07:
64:25:8d:8d:7c:aa:10:2a:97:5d:3e:99:db:f8:6a:
b5:f2:5d:bc:2c:b2:bc:1b:74:bb:24:9f:b9:87:72:
64:98:30:ea:fb:0a:ad:a8:aa:13:3b:40:c4:53:9f:
19:f4:65:fd:04:db:a6:e9:5e:e0:fd:a6:c6:4f:5e:
fa:c2:ba:8c:83:93:96:16:e7:38:4f:0e:e1:f4:84:
94:61:08:6b:ac:ea:b1:8d:50:ad:7f:9a:31:55:c5:
ee:8f:93:d3:fc:10:d8:d7:67:96:49:6d:72:98:43:
97:37:c0:d2:e2:ad:43:32:66:b2:d0:55:e4:e8:53:
1e:49:05:35:3c:4d:8c:63:69:95:c3:1a:fc:d0:a3:
69:62:8c:37:5f:6e:a1:27:86:19:b1:50:9d:3a:d9:
1e:09:8a:37:9c:f6:0c:03:cb:d3:66:22:e5:19:09:
8e:9e:79:2c:b5:ab:d0:9e:33:3e:3c:0a:36:6e:06:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:2F:74:DC:8F:F6:A8:1B:D0:DB:6F:03:C8:82:41:D6:6A:FE:D4
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:8e:52:e0:79:39:f7:fc:fb:d7:fd:8a:83:bf:3d:c2:92:86:
f0:d4:ee:a3:64:74:be:0f:5b:35:52:1c:d2:5b:64:8d:4a:5a:
89:4e:44:52:0d:a4:75:55:67:37:e1:4e:71:25:34:19:a7:68:
68:6f:fb:0a:73:0a:7d:b8:d8:b2:aa:34:60:e4:b4:cf:27:c8:
3f:74:bf:3f:b0:ce:69:78:21:f3:25:1c:57:bc:a7:f5:8c:8f:
85:f8:9f:ff:1f:78:2e:23:9a:00:b2:eb:c5:2b:97:e2:75:27:
62:b7:b4:36:01:e3:1b:7c:e5:8a:37:18:62:42:ca:9c:e6:26:
a6:2b:05:88:ce:fc:2f:11:46:dc:d2:f0:b9:67:48:84:1f:75:
6c:c3:67:f5:fc:e7:4d:2f:4d:ac:61:58:30:16:8c:ba:b1:cb:
69:fd:88:87:ec:a4:8e:c0:79:9a:8d:87:bb:fa:f5:8e:f6:dc:
54:d4:d2:74:99:d3:8b:96:a3:0f:e7:4f:03:51:56:7f:1b:57:
26:96:92:a6:a5:df:0b:3f:a2:25:90:5f:04:f9:e2:71:81:43:
ae:ab:cb:94:04:e2:07:24:f5:0f:24:26:05:c1:3e:02:6e:50:
c2:1a:f6:2a:f6:c5:6e:6a:b3:3c:5c:be:28:83:1d:6e:40:c5:
4d:58:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:35:56 2026 by rpki-client