Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: HSs9OQpDw1DhcXXaMAsaAbOv9LS12V3M/rpyuagSYHo=
Subject key identifier: 2A:F7:00:AE:0D:9A:BC:80:63:E2:05:0E:80:E4:93:01:8C:F9:32:66
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 01A06E712DF35F90BD970DBF349A64569832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0CD7
Signing time: Fri 04 Sep 2026 22:01:46 +0000
Manifest this update: Fri 04 Sep 2026 22:01:46 +0000
Manifest next update: Sat 05 Sep 2026 22:01:46 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: itnJ5oL1tihsHQ1myL0/OyljnWE94omTOmSLGPQe7eI=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:2d:f3:5f:90:bd:97:0d:bf:34:9a:64:56:98:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Sep 4 22:01:46 2026 GMT
Not After : Sep 5 22:01:46 2026 GMT
Subject: CN=2af700ae0d9abc8063e2050e80e493018cf93266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:5d:43:de:3c:77:be:ab:a3:1a:ae:90:f6:
0f:7c:9b:e6:02:28:a8:72:98:77:46:87:ca:f9:5a:
1f:17:42:ea:2b:79:42:03:77:ab:54:c6:03:93:22:
86:44:aa:98:44:4b:14:dc:1a:d3:98:c4:81:12:74:
7b:cf:93:c3:2f:84:4e:d6:a8:d1:96:09:68:12:eb:
e3:a3:de:6c:32:9a:be:c3:01:70:5d:d3:a8:b6:ae:
1f:5f:f4:e2:2a:b6:90:d7:b3:30:f4:07:15:82:e6:
d6:5a:68:2e:78:5e:6a:f3:2d:8d:03:c1:89:8d:9b:
6b:b3:5d:42:44:f5:ad:40:60:6d:2d:3f:69:d8:10:
80:3e:cb:02:c0:13:a8:bf:dd:7d:0f:7b:9c:58:97:
56:3e:55:15:fc:22:d3:d8:51:1f:ec:12:a9:0a:ed:
ff:94:9b:02:a2:22:7f:c2:60:9d:8e:de:e8:90:72:
29:e8:f2:ed:23:03:4b:27:15:fa:d8:9e:63:d1:41:
3b:5c:71:4f:86:4e:96:fc:fb:f7:ec:a9:ab:20:87:
1c:96:6c:90:89:de:f0:8b:13:f9:24:d9:95:96:7d:
f6:be:39:66:ce:34:d9:ae:58:42:80:62:16:08:8b:
f0:89:d6:89:b3:33:d1:81:7b:01:bf:d4:f7:ac:a9:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:00:AE:0D:9A:BC:80:63:E2:05:0E:80:E4:93:01:8C:F9:32:66
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8f:56:de:86:21:94:92:21:a7:ee:44:16:9d:63:07:b3:37:
33:67:03:2a:b5:34:16:ec:62:e9:87:e2:80:a3:c5:48:8d:cf:
21:f7:68:48:27:f6:c2:90:5a:c8:37:fb:0e:e7:b9:63:b7:67:
a4:04:3a:e8:63:11:40:46:8b:26:f4:af:9a:a1:a2:6e:b6:c0:
a6:97:5c:f1:68:07:3a:8b:00:32:46:d2:b9:9f:dc:a0:ca:23:
6e:55:84:84:7e:5a:15:4d:7a:6b:85:ea:ee:24:a9:95:71:b8:
7f:9d:42:d3:22:9e:e7:a2:ed:1f:f2:32:ba:62:71:e9:2b:e8:
8e:f7:5e:a5:cc:13:c9:3f:78:8f:4a:f6:07:3c:6f:79:58:f7:
df:46:65:25:43:76:a8:cc:c5:cd:7c:06:75:66:b3:5a:d0:ec:
cc:04:6a:8a:49:34:43:66:19:e5:72:1b:f4:2e:17:54:06:cc:
24:80:41:58:70:19:da:d4:ba:7e:5d:11:a6:ff:61:95:89:de:
c8:8d:6a:69:a3:ac:bc:4f:76:44:f2:c1:c3:b5:e6:08:ae:c4:
af:83:92:8a:5c:09:0b:24:8a:85:74:72:f7:29:72:3c:f3:71:
3d:e1:93:db:a7:ef:22:7c:9c:9e:ff:48:98:cc:83:a7:b7:99:
04:6f:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:29 2026 by rpki-client