Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
File: tw62RTcL6XD5Yn-2p0_zlCJaelk.mft (raw, json)
Hash identifier: PqbJCMybtxcTFM0a7TU1bnAWu9ADp+F6gk1jmrSq1tw=
Subject key identifier: 82:3C:A8:84:2D:59:7A:75:1B:08:B1:EE:E8:CB:26:AA:A2:DE:E8:56
Authority key identifier: B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
Certificate issuer: /CN=b70eb645370be970f9627fb6a74ff394225a7a59
Certificate serial: 01A14BABE39C57C1FBC956E726CC41579B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:58 +0000
Manifest this update: Sat 17 Oct 2026 21:01:58 +0000
Manifest next update: Sun 18 Oct 2026 21:01:58 +0000
Files and hashes: 1: nDBWMVAEYABPmwRQUfdrYuE6rGw.roa (hash: GU7opyYf2/XqFKUDoqP4OkYoUQ4kZmYzVcLepgnMjpc=)
2: tw62RTcL6XD5Yn-2p0_zlCJaelk.crl (hash: XqPUofGjF5tDatASiR8zILZSWGgvzqKl2bnbDfyaIlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:e3:9c:57:c1:fb:c9:56:e7:26:cc:41:57:9b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70eb645370be970f9627fb6a74ff394225a7a59
Validity
Not Before: Oct 17 21:01:58 2026 GMT
Not After : Oct 18 21:01:58 2026 GMT
Subject: CN=823ca8842d597a751b08b1eee8cb26aaa2dee856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:cf:31:bb:89:1f:84:58:62:f2:ec:e6:8a:
38:84:58:98:00:28:4d:05:16:67:23:f4:fc:ee:81:
fd:a7:27:77:6c:d3:b8:25:19:9b:30:4a:6a:52:9b:
ac:07:ca:12:fc:ca:ce:c6:a2:72:4b:f6:96:5c:1b:
33:7d:15:30:c8:d5:e9:f7:2a:be:9e:61:c9:30:6b:
d9:4b:63:50:44:c8:fa:e6:ab:f5:99:77:39:54:64:
01:22:ff:46:ba:54:e1:5f:1c:98:e4:a1:31:4e:5f:
28:c1:5e:2a:aa:4f:47:cc:08:5a:a0:7b:5f:f3:39:
d8:78:93:97:6b:c3:e7:fa:46:4a:14:11:ea:70:16:
f3:14:46:38:77:6a:e6:10:c5:9c:ab:3d:c2:31:6f:
29:19:c5:8c:db:cd:3c:c0:53:b9:38:a2:89:50:e1:
82:46:c6:a6:1e:74:e3:3f:eb:4c:f9:64:19:40:2d:
c7:95:4f:4f:45:5b:55:a2:67:97:15:dc:91:37:72:
7e:29:b8:ad:12:25:ae:2b:f8:d8:df:66:22:50:f1:
79:22:2d:e0:fb:64:32:09:49:aa:1e:40:8b:68:52:
98:d7:bb:27:47:86:f5:3d:46:13:38:4e:56:cc:f6:
8d:aa:9e:75:86:15:35:80:8d:7c:f9:7a:28:f8:f0:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:A8:84:2D:59:7A:75:1B:08:B1:EE:E8:CB:26:AA:A2:DE:E8:56
X509v3 Authority Key Identifier:
keyid:B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:c2:16:4a:94:23:59:59:34:18:d7:b5:88:58:41:68:e0:
77:7a:88:56:f9:5b:39:6b:55:95:30:f9:02:d3:21:22:14:96:
51:b8:45:2c:22:78:f5:85:e1:d1:85:d7:fa:bc:3f:98:53:90:
ce:34:77:02:cd:3a:a6:b8:d4:79:f3:a2:aa:fb:ee:09:25:b1:
88:79:9a:c8:90:0f:1f:ff:07:b4:5d:3f:84:08:1e:42:f4:6b:
ae:be:77:c4:05:f3:f6:cf:39:ec:af:54:78:8b:9f:b3:7a:f3:
39:72:32:36:6a:9b:91:e8:47:f5:b5:c2:8d:20:0d:8d:3f:0b:
46:54:33:8f:0d:a3:33:b8:4b:e2:28:c0:e3:9b:2f:96:b6:db:
cd:db:a9:96:0e:33:3b:96:eb:3d:8a:b1:5b:e1:44:1c:d6:08:
a8:e6:90:1d:f0:ab:db:95:b7:6c:c0:54:12:c6:ae:58:48:db:
a0:a8:0f:5e:92:2f:ac:be:8f:48:50:22:de:5f:e4:e0:e7:92:
67:cb:38:1b:15:8e:53:f7:12:3a:00:e5:57:ba:c2:cf:f3:25:
5e:0c:a7:cb:03:22:93:85:eb:6e:29:2c:7a:61:0f:ed:bb:f3:
8e:d3:2c:f5:00:c4:e9:4a:50:ec:71:12:28:e7:76:64:6c:94:
f0:82:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:03:14 2026 by rpki-client