Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: NJ7NP4kTvEpCWVbDC1miuEmKYxT31xzgbYA/vAXACb8=
Subject key identifier: 14:26:4B:54:DD:9E:2A:A8:FA:FE:6C:B8:66:5F:5C:88:4E:7E:59:C5
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019F94370135E66F54985012BFACA4CDF29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0C66
Signing time: Fri 24 Jul 2026 13:01:00 +0000
Manifest this update: Fri 24 Jul 2026 13:01:00 +0000
Manifest next update: Sat 25 Jul 2026 13:01:00 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: aAAQJLYqv2Ne08n6SaVly7t0TdPUMnWvbriJMUXQ/QU=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:01:35:e6:6f:54:98:50:12:bf:ac:a4:cd:f2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jul 24 13:01:00 2026 GMT
Not After : Jul 25 13:01:00 2026 GMT
Subject: CN=14264b54dd9e2aa8fafe6cb8665f5c884e7e59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:90:9d:25:f1:fd:a3:94:74:bf:79:4a:a2:
4c:b1:04:2b:02:fc:7c:94:81:9c:cb:bd:c3:fc:66:
46:58:1f:1f:93:37:60:de:6f:95:35:88:b8:ad:98:
be:e8:96:2e:f2:17:bf:40:10:cf:ed:67:18:84:2b:
dc:e2:0d:63:d6:d1:8d:d2:da:2c:fa:80:1b:b3:d0:
6a:6f:90:05:c0:1e:79:d3:f9:7a:78:dc:5c:82:76:
23:dc:e6:13:78:97:bb:1b:f5:28:8b:2a:f0:d2:a9:
11:66:06:67:61:f3:ca:88:81:8f:99:c6:77:69:36:
e0:c9:a3:82:b4:fd:5e:d4:7b:de:7a:8e:37:c6:05:
84:39:ff:38:ba:b3:9d:e5:fe:fe:84:55:48:19:e2:
80:31:8b:dd:c0:23:e0:b0:9f:0a:23:ab:81:c1:02:
7b:b4:fe:1b:03:64:2f:86:de:de:bd:f0:fc:bb:5d:
1e:24:0b:b7:01:81:e3:2d:72:3b:5c:f4:16:9b:b2:
c4:4e:d5:f4:b0:33:4b:ed:ec:25:b5:fe:60:a4:74:
ea:f1:77:af:40:30:b3:25:09:92:63:7f:c0:c6:cf:
7e:77:97:ba:7e:cd:fe:c3:16:74:0e:d2:98:50:d8:
30:2d:ee:be:d9:1f:31:51:99:1a:ef:c7:29:72:d9:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:4B:54:DD:9E:2A:A8:FA:FE:6C:B8:66:5F:5C:88:4E:7E:59:C5
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:c8:e2:38:e8:be:4a:44:56:7f:ab:f6:74:c7:39:9f:b7:
4b:55:58:c2:4c:f5:18:8f:d8:dc:79:5f:b0:92:45:b1:b1:24:
76:6c:0d:30:c5:5c:c2:08:82:06:b3:ce:06:fa:81:cb:f4:d5:
92:ee:30:06:40:c2:42:1e:c1:e8:1e:54:0e:76:10:13:c7:40:
0b:4c:c9:bc:ae:a8:25:f0:c5:d5:75:1e:32:dd:74:a3:23:42:
c5:44:f1:00:62:17:b0:bb:bb:fd:e3:2e:0d:77:5d:a0:0d:62:
da:ac:e5:aa:1a:96:85:a6:e8:de:94:1d:f2:a5:e1:a8:b4:58:
ec:3a:b6:4f:03:e7:dd:1b:7b:5b:04:59:5b:29:b4:16:a7:aa:
d6:76:cd:de:c2:5f:b3:8b:3c:fa:a8:b0:c1:76:c6:60:39:83:
52:f2:08:46:53:f9:cc:04:5f:90:eb:1d:fd:98:c9:74:5b:bf:
3b:52:6f:b4:34:c4:61:44:7d:b3:54:1a:35:66:34:26:5a:41:
5c:f2:9b:d2:56:60:55:0f:dd:a0:34:8d:cf:0b:3a:91:a1:d9:
81:53:96:21:39:2d:c6:a0:cc:33:e7:5e:9a:6d:92:c4:95:b5:
65:9d:7f:c4:68:a1:88:9f:85:b6:85:20:70:02:8f:1b:50:fc:
56:7d:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:39 2026 by rpki-client