Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: f4lo/XYvPKKbVHrC2BiEgh8mbaLSze5l7iy0in2nRis=
Subject key identifier: D7:B5:00:E6:B5:EB:A0:7F:52:F8:E9:AC:D4:CC:8B:BC:C0:57:D3:B1
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019FC2C73884FDC53E1F96D1875BAB26F52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 14E1
Signing time: Sun 02 Aug 2026 14:01:03 +0000
Manifest this update: Sun 02 Aug 2026 14:01:03 +0000
Manifest next update: Mon 03 Aug 2026 14:01:03 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa (hash: KGJVD6V5txLQAjQLlr+mNudFF1tQTaGRrNO28803Imc=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: MRlM44u6tJn0/6HjTAgA7lamSTi/OLkPqvb6H7rxJjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:c7:38:84:fd:c5:3e:1f:96:d1:87:5b:ab:26:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Aug 2 14:01:03 2026 GMT
Not After : Aug 3 14:01:03 2026 GMT
Subject: CN=d7b500e6b5eba07f52f8e9acd4cc8bbcc057d3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:aa:67:53:99:da:3c:a1:4f:a8:da:eb:b9:
91:58:7b:9c:be:0f:46:98:b7:19:18:fd:ab:1d:ec:
50:af:3a:60:7b:37:5d:77:54:10:b6:4b:23:d3:8c:
9e:c4:f2:97:1f:fb:fa:0a:a3:20:49:c5:4a:7f:2f:
b2:36:00:fb:9c:1a:72:f0:36:52:11:15:97:ea:04:
86:e0:ff:a6:ba:04:c9:d7:37:e8:2b:b1:72:5f:01:
2c:63:a1:7a:6c:1f:dd:9d:06:8a:15:a3:8a:64:41:
80:67:67:f1:3b:e5:8f:7e:7f:b9:e7:6f:44:47:bc:
46:aa:af:3a:f2:25:a9:b6:c2:7f:9f:a0:7b:73:98:
f4:4f:d9:70:71:21:0b:f1:c8:85:8f:83:1d:ec:bf:
80:4b:0b:53:a0:74:6f:a2:c4:ba:19:e7:70:06:64:
14:16:76:02:3b:30:49:47:00:a8:c3:b5:f4:f3:c5:
59:c4:67:25:bb:8e:08:ad:fd:64:59:39:64:7b:39:
d3:0e:76:cd:a6:1a:38:26:17:1b:16:df:5d:ce:9f:
2c:38:fc:a6:e2:07:9e:ba:00:e0:f0:4c:a3:b7:bf:
f1:5c:23:00:c1:7e:72:ed:57:b2:74:a9:99:b0:ac:
fd:79:64:60:ad:d3:16:f8:a9:79:9f:4a:85:62:6a:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B5:00:E6:B5:EB:A0:7F:52:F8:E9:AC:D4:CC:8B:BC:C0:57:D3:B1
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f1:b3:e2:53:4c:cf:ae:56:9c:46:3f:51:3b:2c:1c:7d:e0:
da:7b:5c:93:7d:35:97:56:e5:f5:e3:6f:e2:48:ed:41:b7:2b:
34:0a:b9:2e:85:48:bb:41:cb:bf:50:cc:3a:e5:37:03:f0:68:
7e:b5:ee:1b:d0:7f:43:32:af:03:3f:7c:43:88:f1:f8:98:50:
5d:78:e9:08:1e:cc:a2:82:36:2f:8d:12:cc:27:b0:59:95:74:
5f:60:1d:30:a5:15:ad:5e:74:8e:4e:90:c4:77:2d:b7:cf:e7:
8e:25:92:5a:74:f7:37:4a:0c:e6:70:6b:23:c8:36:84:ea:a8:
fb:61:92:6e:02:27:7a:86:bc:82:83:d2:4c:16:93:1f:ed:ea:
be:bd:9d:13:cc:7d:00:ed:ab:fb:17:25:cf:8b:58:7d:d5:1a:
ce:3e:14:bd:3d:0c:49:d9:39:90:47:33:5a:9d:87:f7:d5:76:
0f:97:d3:cc:ce:a3:3a:5a:66:1a:bb:03:d4:a5:02:c8:9b:b8:
f6:cb:8d:9b:74:2a:19:fb:af:a9:e4:bc:88:2f:6c:72:70:ae:
c3:74:e7:8f:6f:4e:6b:76:7f:e2:5c:51:78:73:52:55:3f:4c:
97:97:8c:d8:66:99:cc:e0:89:b6:7c:65:4c:e5:26:99:f4:73:
d0:5c:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:18:51 2026 by rpki-client