Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: ZYS463kcfAdWMgmXTwqZ+f8yyFu1LScVnBrRqnUYXlg=
Subject key identifier: 2D:43:BB:0E:66:05:0B:69:A6:40:53:BB:73:7A:C5:22:7E:D2:F8:0D
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019CF3BB4FD34468A9687BE715E66935177F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 136C
Signing time: Sun 15 Mar 2026 23:01:04 +0000
Manifest this update: Sun 15 Mar 2026 23:01:04 +0000
Manifest next update: Mon 16 Mar 2026 23:01:04 +0000
Files and hashes: 1: Dj17YO7HbdYhrlszRZcVGHooOSk.asa (hash: VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=)
2: WBhYaaB4kDqy4FLyiUVTXgjpHl4.asa (hash: hrsrvdk9deN4qGX+WaTzbPCORj7vib+KcRk6lQ4OTDY=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: 4E15zkDnlDZv5Mvk+C9tjaRw99EviA8bGNRiuIYVEEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:bb:4f:d3:44:68:a9:68:7b:e7:15:e6:69:35:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Mar 15 23:01:04 2026 GMT
Not After : Mar 16 23:01:04 2026 GMT
Subject: CN=2d43bb0e66050b69a64053bb737ac5227ed2f80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:cf:8f:85:c8:a9:7c:57:15:86:71:8a:2a:
9d:72:bb:df:c1:48:89:e4:83:95:7a:41:c6:ba:a9:
30:01:8f:f9:d1:ad:e1:62:85:f8:f1:d6:fd:31:e8:
21:8f:4e:e2:b3:f0:e8:c4:82:85:90:e1:79:85:f4:
b8:a8:a6:20:95:37:33:e2:94:7b:c4:cd:ba:e3:fc:
8c:42:cc:4c:8e:7f:c7:84:6e:46:d5:70:83:70:9f:
de:30:3c:c8:51:9f:ba:22:7e:97:67:a5:aa:c7:a6:
b4:09:bc:84:6b:e9:ef:49:5f:38:82:45:0b:09:ed:
f8:05:4c:75:83:28:37:ec:c5:c7:11:e0:87:b2:4a:
49:86:3a:92:f6:2d:07:d4:e5:fb:1c:a4:8e:d7:7a:
0f:d0:17:41:17:3a:1f:4f:e6:f7:24:5b:a3:69:1b:
7b:85:76:3e:e4:f8:60:91:64:6c:db:96:27:80:83:
72:3e:02:e2:fe:aa:d3:2d:7d:4d:af:19:51:62:5d:
31:ac:3a:07:db:d3:ca:bf:e4:24:c6:41:86:9d:9c:
96:da:ab:27:ee:c7:37:4d:4e:61:14:f9:a7:be:54:
0f:4d:19:61:f6:7f:3f:58:04:93:83:78:b3:91:12:
12:b6:d5:d9:c6:2c:79:19:77:55:ae:20:2c:47:6e:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:43:BB:0E:66:05:0B:69:A6:40:53:BB:73:7A:C5:22:7E:D2:F8:0D
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:73:f3:4a:b2:e8:13:98:ff:01:e2:d7:2b:0e:27:db:2e:
1e:29:d1:da:ab:e4:fc:68:d1:dc:62:7a:14:64:9e:40:4d:29:
54:f7:69:65:c5:d6:e8:b0:8c:2f:9b:b2:95:b7:cd:4b:c2:65:
90:f0:a7:a7:39:ae:71:7d:d1:67:10:4c:22:05:0d:23:78:f2:
42:88:be:50:56:91:d7:21:cc:a1:a7:87:4b:b2:dd:05:fe:63:
4c:9c:5b:4a:57:3a:f9:45:9d:e5:59:5c:1d:8e:b4:79:04:36:
99:ff:f7:51:57:91:be:88:84:28:f3:2a:61:40:8c:05:32:64:
5d:91:d5:a0:7a:e8:9b:c1:21:e1:3a:73:40:20:7b:8e:d3:11:
de:27:83:f0:8e:3c:41:31:c4:16:cd:e5:e4:ea:0b:1f:9a:51:
f7:ee:0e:5e:88:14:6e:09:56:7e:cc:ec:17:3b:93:f1:26:9a:
74:ab:0a:89:27:c1:f6:6f:79:5f:0d:91:21:56:35:07:7f:eb:
31:f6:ff:24:8b:e3:7f:d5:ed:7c:45:4f:42:3c:bc:5b:cb:7d:
ce:c8:2a:da:37:5f:43:b9:4b:e8:6c:9d:a7:7a:2b:28:fd:55:
30:9a:9a:70:9b:ae:15:e9:0e:51:3a:17:ff:91:fb:4d:67:be:
84:dd:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:04:08 2026 by rpki-client