Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: gzMcYsncpBECaIEzLPNO0fPXea6M5g/cgEeTnh9SFto=
Subject key identifier: 5D:FE:F5:F2:1B:00:12:8B:58:59:9E:C0:84:F6:11:62:A2:C9:09:E6
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019FA7BD30172BDA4A831BE8B8E1E3D5873D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 14D3
Signing time: Tue 28 Jul 2026 08:00:21 +0000
Manifest this update: Tue 28 Jul 2026 08:00:21 +0000
Manifest next update: Wed 29 Jul 2026 08:00:21 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa (hash: KGJVD6V5txLQAjQLlr+mNudFF1tQTaGRrNO28803Imc=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: EPqsqccoPr2vhG1AFauvCJJsfe2NS/pjHGfDnZByYD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:30:17:2b:da:4a:83:1b:e8:b8:e1:e3:d5:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Jul 28 08:00:21 2026 GMT
Not After : Jul 29 08:00:21 2026 GMT
Subject: CN=5dfef5f21b00128b58599ec084f61162a2c909e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:d1:43:f4:5c:23:14:4c:4f:8a:e5:a2:70:
ca:1b:d9:f0:6d:a4:30:b0:35:b3:d8:e2:d7:45:a2:
25:4f:af:d8:eb:d6:e5:83:d0:6a:35:fb:51:77:82:
11:77:d5:d8:6e:07:43:ad:c0:6a:c9:0d:6c:96:40:
ef:ce:8a:3f:b4:8d:4b:b9:94:f2:1c:8a:2e:c8:24:
2b:a5:ea:bf:a7:50:fa:bf:4f:8d:89:a7:68:b4:0a:
c1:e2:1d:82:0e:73:48:02:5d:46:06:e8:8e:e0:35:
16:a6:cc:b4:ab:4e:ce:86:e0:49:e4:e8:20:b2:85:
64:b3:70:a6:2f:51:4c:ab:0a:82:d6:99:70:10:29:
c8:60:3e:04:95:e1:db:18:16:0c:d2:33:fc:62:51:
e7:08:d9:53:37:c0:a8:db:be:c8:08:33:6f:35:c6:
af:7a:b3:6d:ce:10:ae:be:73:ee:b2:85:38:62:f9:
7b:49:31:37:f0:84:f3:d8:ba:b1:86:35:d0:be:fe:
14:4f:25:c3:c8:6f:85:68:78:ca:63:79:4b:b0:fa:
9b:df:3b:4b:0b:64:f6:eb:a3:41:3b:a0:ec:49:b4:
b1:6d:c1:82:66:75:aa:d1:52:c4:b2:b2:4c:9d:7a:
82:b8:58:24:17:4b:84:63:5d:be:78:97:f1:8c:5e:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:F5:F2:1B:00:12:8B:58:59:9E:C0:84:F6:11:62:A2:C9:09:E6
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:b5:bc:73:b7:5d:93:1e:40:6a:11:ea:34:67:25:bb:ed:
21:7a:e3:5f:46:80:0c:a2:dd:a8:41:81:81:98:50:d8:d3:8f:
79:2e:60:78:b7:0a:bf:37:1b:57:ba:8b:20:22:a2:5d:95:85:
f1:3b:a0:d2:7e:ed:aa:54:19:2c:a4:05:23:bc:72:53:5a:71:
9b:79:5b:1e:5a:1b:40:6a:9d:ba:a5:46:e3:43:b9:c1:7d:52:
3b:e1:80:44:4c:33:fa:b5:1c:63:a9:df:db:b8:01:c1:7c:10:
72:f7:08:5b:fa:72:3d:fe:92:3c:17:10:20:d8:bc:5a:32:f0:
68:95:2b:02:ec:47:3c:8c:87:a3:3b:2e:a5:c9:27:e4:1e:95:
91:cd:c1:a7:9f:b4:4d:e2:d2:44:28:80:70:86:31:10:c5:a9:
98:6c:01:53:e1:8d:d0:9e:81:ab:a1:7e:1f:8a:79:32:d7:c6:
9e:e0:fb:e1:06:64:1f:da:e4:e3:26:4f:a9:f0:d4:06:3d:5b:
eb:43:90:da:62:50:97:58:e4:cd:aa:de:a4:6a:04:64:67:c8:
de:3d:6e:71:8f:b7:4a:51:b1:f9:a1:b6:43:3b:f1:df:c7:47:
2c:f5:26:25:ae:09:28:f8:f1:86:c7:73:29:ff:4b:ee:cb:41:
2f:90:61:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:57:54 2026 by rpki-client