Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: 2NVNzmqaZw9wKcAx97NN0J6gIjh2sJkUYBlya9qDZ68=
Subject key identifier: 5E:9A:0C:12:CF:44:2B:58:B1:17:8C:60:E0:B6:55:19:6A:44:39:24
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019F86B25371495AD13B02F9F39A5F97BEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0C5F
Signing time: Tue 21 Jul 2026 22:01:01 +0000
Manifest this update: Tue 21 Jul 2026 22:01:01 +0000
Manifest next update: Wed 22 Jul 2026 22:01:01 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: jMs2mI6dGbTxJtbFDboYbcDa/8+Silrbts4YchWnZzM=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:53:71:49:5a:d1:3b:02:f9:f3:9a:5f:97:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jul 21 22:01:01 2026 GMT
Not After : Jul 22 22:01:01 2026 GMT
Subject: CN=5e9a0c12cf442b58b1178c60e0b655196a443924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:31:db:4e:b9:8a:a5:c8:79:f2:fa:12:52:
eb:af:67:9c:d9:1b:4d:92:42:e7:b7:d0:14:95:65:
a0:eb:1c:92:0b:09:83:b7:83:f3:90:03:7f:a8:e1:
77:df:7a:a7:14:d0:86:cc:79:9a:74:02:02:21:47:
ff:66:ab:7c:1d:71:71:83:e0:14:e7:b3:57:64:91:
0b:4b:0b:14:40:4a:1a:f8:87:e9:08:d8:b0:bd:b2:
f4:ee:e0:2c:39:e3:33:e1:d7:39:a2:0f:98:c1:f2:
4f:f7:a9:dd:e5:87:5f:52:6f:0b:cc:5b:c7:25:31:
49:b0:85:45:bb:7f:06:6f:1c:72:f7:80:b7:a3:fd:
ca:5c:30:19:ce:d9:3b:d9:31:81:7b:a5:33:fa:3f:
a5:68:97:37:55:3b:3e:1d:03:77:1c:d7:93:2d:01:
ef:4a:52:9b:c7:a8:99:ac:13:b6:82:e8:37:b2:10:
f4:00:b0:7d:0e:d5:e2:85:87:62:cf:d6:fe:07:64:
69:f9:ad:ea:59:1b:b1:d2:b0:0a:f4:16:44:ed:3b:
fe:bf:a2:78:87:10:d1:9c:41:e5:b3:15:fc:74:f8:
6d:1d:4e:b9:b5:c5:3a:6c:d3:b6:5f:2a:8f:b4:a5:
ea:43:27:72:63:39:31:90:10:ab:34:0a:b6:83:f6:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:0C:12:CF:44:2B:58:B1:17:8C:60:E0:B6:55:19:6A:44:39:24
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:23:08:e2:5b:a5:8d:68:e8:94:3a:cf:bb:6f:0a:bc:95:d2:
5b:cd:da:83:e6:2b:b8:ed:0b:e9:0e:0c:83:91:21:a7:e4:46:
25:3f:97:67:e7:d3:c9:70:ac:81:ce:38:4b:6a:29:79:c5:5a:
da:13:7b:75:1c:a5:ad:87:58:18:16:6f:85:49:c1:87:db:48:
1d:6f:93:24:01:b9:0e:63:95:ea:18:19:33:f6:b4:a7:72:69:
02:da:fb:fc:87:29:07:23:47:a4:c1:a4:a7:ef:8e:d4:e9:50:
1c:a1:33:48:5a:0c:fb:f1:49:6f:ad:be:89:2e:91:09:6e:34:
ed:dd:84:45:c3:e8:51:6f:dc:1a:c5:3b:d1:93:36:7e:09:c8:
bf:68:ea:ed:ca:23:26:1f:25:ec:1b:f2:1a:73:30:e5:e3:8d:
0c:51:5f:bd:e2:3d:80:01:c2:03:ef:61:f3:a5:7c:3a:28:78:
c2:da:17:96:8d:72:bc:9a:91:20:fd:92:28:25:f1:aa:c3:92:
30:0b:fa:5c:b9:80:67:99:6e:ba:c3:9c:06:0f:c9:ce:7f:b8:
b9:ca:c6:a5:d5:48:f0:b2:94:ee:b5:f5:5b:17:ab:ab:e9:26:
cc:98:b2:52:46:89:a9:f2:cb:a4:5b:ef:f8:44:8b:6a:8c:0f:
19:f4:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:10:59 2026 by rpki-client