Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: AFmM/sf4bzEKdPguKOeGyo7b2jiRCpvou2C9CRiPmkg=
Subject key identifier: AB:CC:7B:D2:5B:F0:FF:AC:38:74:21:26:81:2A:7C:33:88:C6:A3:B4
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019CC7BE0CB87DECDA9163EFE3FCE630D3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0AF3
Signing time: Sat 07 Mar 2026 10:00:46 +0000
Manifest this update: Sat 07 Mar 2026 10:00:46 +0000
Manifest next update: Sun 08 Mar 2026 10:00:46 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: ZJMb8qtDtaduJjNuLJ2ryA+hcm3JrXDPIAZQphSkEDA=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:0c:b8:7d:ec:da:91:63:ef:e3:fc:e6:30:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Mar 7 10:00:46 2026 GMT
Not After : Mar 8 10:00:46 2026 GMT
Subject: CN=abcc7bd25bf0ffac38742126812a7c3388c6a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:e6:7e:76:31:49:e1:a5:08:2d:d5:f0:7f:
57:4d:17:75:b5:78:86:38:96:96:db:4e:18:c1:a0:
b1:04:d2:be:ce:a0:55:82:5d:f8:d0:fe:d7:70:16:
b0:94:d5:fb:9b:97:6e:15:70:54:e3:d1:3b:46:bb:
58:4e:b3:8c:a7:50:42:d0:20:98:a7:49:c4:90:2c:
35:e7:b0:71:99:5c:c3:fb:f0:b6:db:f6:65:bf:23:
18:90:60:9c:63:09:f2:f1:8e:69:1d:90:aa:7d:4f:
ca:7b:03:9d:4e:e6:d8:fe:42:22:0b:7c:31:b9:ca:
c6:c2:65:b7:e4:00:8e:5b:80:35:67:c0:71:e6:d6:
0d:21:23:14:68:82:45:f7:b0:6c:6f:81:f8:06:b6:
19:6e:76:11:4b:a1:5b:41:45:a7:10:ec:cc:6a:18:
54:fa:01:b4:25:70:fe:85:9a:8a:f4:5e:13:7e:2f:
cb:92:4a:56:d0:17:92:75:3c:46:7e:dc:e0:ad:07:
2a:1b:a9:e6:7d:4f:13:42:6f:5b:b9:a9:a2:57:be:
89:97:fa:bc:55:73:a0:09:d0:59:56:0f:21:ec:1d:
4e:4c:fd:6e:96:f9:6a:17:f3:2a:73:34:6d:a1:f1:
c9:d1:95:73:b8:7c:32:b3:5e:49:b3:3d:f7:99:7f:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:7B:D2:5B:F0:FF:AC:38:74:21:26:81:2A:7C:33:88:C6:A3:B4
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:89:90:62:9d:53:d5:a3:f8:6d:f8:41:e9:d5:be:f1:61:
98:a9:ea:aa:4b:8f:15:a7:ce:a5:64:f1:f5:e3:55:0b:dd:b3:
23:3b:c2:5f:e8:e2:aa:53:c2:5a:c4:9d:40:c0:33:5b:4e:64:
1e:b4:c9:07:ae:f9:b6:90:6e:22:71:3a:9a:6c:38:20:36:d5:
49:f7:33:06:da:f4:bc:52:5b:5c:b9:57:9a:31:4b:a2:fa:63:
6b:02:e5:63:03:df:81:a3:d8:32:9e:91:c4:43:2b:9e:9c:84:
e6:5f:f9:9a:ff:b3:b3:0d:83:eb:9f:7e:04:aa:a3:fc:a2:24:
8d:3c:9a:12:9f:71:ce:f5:6f:d6:95:28:6f:1a:9e:8e:4e:fa:
91:cb:2c:8b:a8:9d:b2:89:4f:5e:57:13:d1:d9:b8:d7:9e:ce:
41:1e:7e:f9:87:68:9d:20:cc:34:d9:d8:36:81:c0:5e:a4:3e:
38:83:e6:74:40:a5:07:84:00:9e:4a:58:ad:de:4f:29:c5:e3:
2e:fb:4e:cc:e6:c4:6c:b4:27:c9:d7:99:6d:28:6d:68:e9:ab:
45:c4:5b:4f:53:2b:54:96:73:b8:89:3e:0b:b1:f7:c5:76:ff:
7c:75:8b:f3:24:ab:03:10:67:26:2b:07:b3:c4:dc:66:bc:6e:
47:c6:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:11:19 2026 by rpki-client