Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: VF7+8AQpBToaAh3HdGslEl7eWyvV2x9K1e3BkQcxVsw=
Subject key identifier: B9:60:14:F2:FA:6A:48:26:75:59:27:07:E6:EA:B8:2E:F0:30:50:CF
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019E9B1720B78BC1C41208CA1DE43037C905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0BE5
Signing time: Sat 06 Jun 2026 04:00:44 +0000
Manifest this update: Sat 06 Jun 2026 04:00:44 +0000
Manifest next update: Sun 07 Jun 2026 04:00:44 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: lzzNlCyMnId+jl4FRBptqjoby8XO24SGstagaEiOAZA=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:20:b7:8b:c1:c4:12:08:ca:1d:e4:30:37:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jun 6 04:00:44 2026 GMT
Not After : Jun 7 04:00:44 2026 GMT
Subject: CN=b96014f2fa6a482675592707e6eab82ef03050cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:9d:af:93:25:59:ac:aa:0c:aa:ef:43:e7:
e5:32:56:52:bc:01:34:1f:aa:bd:03:a6:6f:95:af:
13:d7:fc:fb:37:c8:5c:a8:8a:37:fe:d7:87:9f:76:
38:4d:aa:b1:fa:36:d6:4d:dd:28:26:3e:95:e9:de:
31:a6:75:d1:75:fb:bb:2a:23:a1:41:f2:00:11:de:
6b:ed:bd:b1:ad:9f:8b:21:d3:dd:ad:3e:fb:e8:b5:
44:ff:0a:ec:ab:96:89:a4:84:72:66:80:85:35:e9:
ff:75:3a:9b:09:66:74:ce:db:80:d6:c7:ca:5d:96:
55:2e:fa:2d:ff:ce:07:77:9d:b6:34:cb:fe:dc:d9:
fd:5e:c1:c7:ce:c4:6f:bc:94:28:36:29:38:77:43:
3d:3d:c2:c5:75:18:4f:97:e2:8a:2d:bd:9d:eb:f1:
49:34:3e:6f:6f:46:fb:e3:c2:af:bd:32:cb:3f:a6:
e6:69:7e:8e:cf:0d:a9:3d:25:35:eb:e2:70:bc:89:
ff:24:95:c9:7f:53:f9:f1:4d:86:92:68:9d:18:85:
e0:55:ee:e9:5f:e3:d8:b0:07:15:6c:12:b3:a5:ea:
b2:33:50:bd:aa:d4:67:1c:88:f3:7b:86:ba:d0:dc:
9e:76:79:81:24:cd:db:be:79:9e:17:7f:62:46:21:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:14:F2:FA:6A:48:26:75:59:27:07:E6:EA:B8:2E:F0:30:50:CF
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:55:e2:5b:7c:1e:1d:68:11:da:eb:bf:f8:ec:70:dd:70:
2f:76:cb:32:6b:20:cd:71:7d:34:5f:d9:d8:d2:58:db:44:fd:
7b:52:fc:a4:a7:b6:86:d6:d1:3a:e4:6a:06:71:0a:ba:28:c2:
79:4c:54:66:00:de:19:21:3a:6c:b0:97:49:57:1f:98:d8:75:
06:f5:dd:77:b4:99:ea:10:9a:40:04:0a:9f:30:50:49:ff:06:
15:93:e1:42:83:ea:cc:36:2e:bd:ef:39:ad:37:66:2b:60:ff:
f9:1e:bc:9a:09:1a:17:2a:74:ad:1d:ef:3e:6c:fb:f9:3a:9f:
6b:79:2e:28:b5:73:fa:ed:5f:91:1a:6c:31:c1:49:b9:99:24:
65:09:eb:72:59:ba:38:ca:41:79:d5:de:f7:ed:1d:40:a7:7e:
35:1b:13:6c:cd:b5:4f:d4:b3:aa:01:6f:6d:73:d9:da:4b:f1:
96:30:23:29:35:c9:78:8d:f8:75:db:9d:cc:1d:69:4b:d5:b1:
6a:a4:72:c1:b1:fe:6b:ab:2a:c2:37:67:b8:d7:4c:ec:61:c4:
c5:48:d5:23:c5:30:e9:b9:51:3e:93:4e:3f:a3:08:1a:c7:ce:
77:24:af:6f:9a:8a:69:bc:06:ab:ce:e7:58:5b:56:64:eb:4d:
5a:ae:16:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bFyC3i8HEEgjKHeQwN8kFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE4YzkxYWQzMTc0NWZmNzI3ZGEwNDgyZWRlMWIyZmFi
NDYyZTcwHhcNMjYwNjA2MDQwMDQ0WhcNMjYwNjA3MDQwMDQ0WjAzMTEwLwYDVQQD
EyhiOTYwMTRmMmZhNmE0ODI2NzU1OTI3MDdlNmVhYjgyZWYwMzA1MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUadr5MlWayqDKrvQ+flMlZSvAE0
H6q9A6Zvla8T1/z7N8hcqIo3/teHn3Y4Taqx+jbWTd0oJj6V6d4xpnXRdfu7KiOh
QfIAEd5r7b2xrZ+LIdPdrT776LVE/wrsq5aJpIRyZoCFNen/dTqbCWZ0ztuA1sfK
XZZVLvot/84Hd522NMv+3Nn9XsHHzsRvvJQoNik4d0M9PcLFdRhPl+KKLb2d6/FJ
ND5vb0b748KvvTLLP6bmaX6Ozw2pPSU16+JwvIn/JJXJf1P58U2GkmidGIXgVe7p
X+PYsAcVbBKzpeqyM1C9qtRnHIjze4a60NyednmBJM3bvnmeF39iRiHK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlgFPL6akgmdVknB+bquC7wMFDPMB8GA1UdIwQY
MBaAFLVqjJGtMXRf9yfaBILt4bL6tGLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEt
OTg2NDg5MDE2ODhmLzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zNWZmMzItYTY4Ny00ZjUwLTk2OWEtOTg2NDg5MDE2ODhm
LzEvdFdxTWthMHhkRl8zSjlvRWd1M2hzdnEwWXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbZV4lt8
Hh1oEdrrv/jscN1wL3bLMmsgzXF9NF/Z2NJY20T9e1L8pKe2htbROuRqBnEKuijC
eUxUZgDeGSE6bLCXSVcfmNh1BvXdd7SZ6hCaQAQKnzBQSf8GFZPhQoPqzDYuve85
rTdmK2D/+R68mgkaFyp0rR3vPmz7+Tqfa3kuKLVz+u1fkRpsMcFJuZkkZQnrclm6
OMpBedXe9+0dQKd+NRsTbM21T9SzqgFvbXPZ2kvxljAjKTXJeI34ddudzB1pS9Wx
aqRywbH+a6sqwjdnuNdM7GHExUjVI8Uw6blRPpNOP6MIGsfOdySvb5qKabwGq87n
WFtWZOtNWq4WmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:26 2026 by rpki-client