Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: 3yjXWkodH27e4lIpA+DiPO16sq9SNfIMVNjoTPv78JM=
Subject key identifier: 08:34:0F:49:20:28:74:B0:EE:DA:B0:D4:84:E7:7D:AC:0F:74:CD:25
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019DDCFA5EEEFA7C49714647CE7B5F2B1E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 13E5
Signing time: Thu 30 Apr 2026 06:01:28 +0000
Manifest this update: Thu 30 Apr 2026 06:01:28 +0000
Manifest next update: Fri 01 May 2026 06:01:28 +0000
Files and hashes: 1: 9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa (hash: knmR/uu+sixMgJUWyUdxpL/g/5MBZ8SeapJSPjVWp10=)
2: Dj17YO7HbdYhrlszRZcVGHooOSk.asa (hash: VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: bm4lxmGuVO9U9FGdw2XoZNWEIG8BMCoNI9MT+WVaZYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:5e:ee:fa:7c:49:71:46:47:ce:7b:5f:2b:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Apr 30 06:01:28 2026 GMT
Not After : May 1 06:01:28 2026 GMT
Subject: CN=08340f49202874b0eedab0d484e77dac0f74cd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:0f:df:d5:7b:51:c6:90:c2:f7:e1:43:06:
36:97:24:bc:69:74:ed:c4:d8:b4:5e:e7:31:88:49:
b0:e9:0b:8f:92:d0:74:a9:6d:76:e2:09:ef:72:87:
a0:6b:b3:c9:44:31:9a:05:01:36:99:78:ed:26:27:
97:95:a4:c8:93:f0:f0:ff:2a:e4:a5:c8:5d:5b:4f:
14:d2:65:82:f8:b5:69:97:0e:71:0a:df:9f:1e:17:
00:3f:bf:a8:cf:37:fb:f7:d0:a6:0e:44:14:a2:fb:
64:d5:2d:d0:ee:2e:52:de:47:ab:d8:b5:4a:2e:3e:
62:a6:89:4e:aa:e9:0c:57:e2:3b:8a:78:21:5a:0b:
e3:d8:b0:54:8c:ad:05:c1:a3:5b:53:4c:a2:48:ad:
5e:af:6f:75:94:04:7d:4c:17:10:fe:1a:a2:c2:e5:
e5:5e:4d:53:34:a6:90:79:01:e2:50:7f:13:10:02:
25:0b:c5:b1:25:45:c8:1e:40:09:53:92:09:59:1b:
8f:51:4f:60:e1:f7:b0:4a:e1:06:6e:8b:9b:39:98:
0a:67:ca:06:82:f7:0f:bd:2e:24:0a:21:02:f7:0c:
2a:b8:15:a6:31:3c:48:3d:5e:6a:bb:de:73:15:20:
c0:18:b3:39:0a:cf:1c:6e:ef:08:1c:4c:05:2b:b5:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:0F:49:20:28:74:B0:EE:DA:B0:D4:84:E7:7D:AC:0F:74:CD:25
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:ef:22:2e:a1:d5:79:b8:66:6e:ed:65:53:f1:95:3c:d7:
8e:20:f6:41:3a:ff:53:e2:3f:1e:46:3d:ee:b2:3f:53:db:71:
b8:44:85:f9:62:d8:7e:8f:e6:12:c5:a3:47:f6:61:88:37:c7:
b8:de:d1:7c:b4:dd:ca:e6:f9:19:52:5d:ba:cb:6f:21:94:fd:
a7:80:a7:d8:56:e8:01:d6:b1:5a:17:68:da:b8:0f:ac:a5:23:
35:d9:40:de:3e:fd:9a:e4:53:4e:5d:db:5c:28:a5:5b:b3:e7:
0f:ad:72:01:ee:db:28:58:df:33:d5:ec:4b:e1:4b:3f:1d:80:
d2:31:ac:f4:0e:d9:ef:b7:48:c8:ab:34:b2:73:aa:c0:9e:75:
88:a9:9e:88:5f:8a:0c:e2:a1:06:9d:5c:4c:12:1c:88:c4:a6:
3c:e7:da:d2:1e:21:75:80:87:7b:b7:be:45:f7:74:92:2f:29:
ed:eb:88:97:8e:f0:b9:7a:58:da:f2:bb:f0:a8:fa:93:5c:e0:
8d:bf:1a:fd:90:86:95:93:fc:64:03:e6:db:f9:05:de:35:da:
9a:64:22:79:5f:de:bf:51:c9:01:3f:d6:ca:61:dc:92:a8:6a:
34:db:f2:a8:3f:9c:18:81:07:28:15:d5:49:0f:3c:60:2c:85:
95:24:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:50 2026 by rpki-client