Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: oywHjqp/BtJuDoF4UuzEQ4aZHwzUE6G9csV45mCJWaw=
Subject key identifier: 86:9C:64:D6:5D:BF:43:25:6F:EF:01:17:AF:99:57:E9:49:48:72:44
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 01A1336BD875742D4023791D9D0858086E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0D3D
Signing time: Tue 13 Oct 2026 04:01:08 +0000
Manifest this update: Tue 13 Oct 2026 04:01:08 +0000
Manifest next update: Wed 14 Oct 2026 04:01:08 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: 7RERuDQHWJPI/6+Xh9yHWmcI4nyhopixSXvdTAHmXS4=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:6b:d8:75:74:2d:40:23:79:1d:9d:08:58:08:6e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Oct 13 04:01:08 2026 GMT
Not After : Oct 14 04:01:08 2026 GMT
Subject: CN=869c64d65dbf43256fef0117af9957e949487244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:7c:09:73:15:32:fe:76:09:7d:28:0b:33:
ee:c8:aa:27:f4:c9:d1:7e:a5:d7:cb:5b:97:d3:04:
fd:d8:6e:6b:05:64:b9:97:fa:e9:e3:b5:03:32:82:
8f:1b:c7:2e:27:a7:43:5f:d0:77:58:47:df:2b:98:
bd:1c:b3:eb:d7:50:da:d2:6f:08:49:49:86:8e:04:
d0:91:80:13:93:a9:0d:21:6f:95:8d:27:66:0f:78:
03:77:e9:0d:d8:69:3f:15:4b:03:a9:57:3c:68:ca:
93:75:43:e9:37:3a:16:73:0e:a2:6b:37:de:81:0e:
df:a1:b6:82:33:30:cd:a8:e3:a0:6d:1c:f9:5d:b4:
c2:01:29:36:5d:63:d8:32:61:8f:0c:3c:fd:e0:1c:
2a:55:96:ca:aa:1c:af:3d:a2:3e:96:1b:2e:e4:83:
72:64:f1:e0:f7:59:4c:a1:9f:30:39:40:34:c4:e5:
16:b3:e8:76:ed:5e:3a:6e:04:22:ef:d2:7e:1c:e2:
01:d2:b9:fa:e2:3f:fd:50:38:b6:d3:ea:e4:9b:b7:
c6:c1:08:44:57:79:41:e0:aa:60:72:20:ba:e7:47:
b0:16:2f:50:32:b8:f4:e1:66:15:92:0e:e2:0d:7c:
55:1f:20:a2:09:29:75:3d:35:44:1a:66:b9:a8:e4:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:64:D6:5D:BF:43:25:6F:EF:01:17:AF:99:57:E9:49:48:72:44
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:02:12:ae:c3:f2:78:b6:1c:b3:89:0e:36:13:d2:48:69:
0d:e5:ae:c7:08:70:3d:92:d8:69:93:eb:59:f2:4c:56:6e:7e:
16:b2:95:15:fc:99:87:24:63:29:bb:4c:a0:c0:c6:e9:dd:bc:
c9:be:c2:d7:ed:e0:ff:99:ad:82:a9:47:65:10:fa:d2:3c:2d:
2f:a2:c7:88:f7:f9:48:5f:f7:16:92:d5:f8:2a:b0:4a:e9:18:
9c:4e:b1:b0:83:e1:97:74:9e:cc:0f:07:d9:66:5f:c4:5c:be:
c8:3b:c9:0f:d6:05:e0:30:07:9c:ce:c5:8d:64:c6:f6:ff:a9:
26:c5:d6:dd:a6:7f:87:29:a8:23:2d:4c:ff:7d:cf:24:5f:f9:
c0:5b:47:90:aa:b2:6e:12:20:62:09:d3:c3:b4:19:0a:8d:9a:
7f:e3:85:21:4f:a8:7b:f7:32:ac:50:01:24:9b:31:21:b5:d4:
6f:6c:45:b2:29:1e:5c:8f:a4:2b:92:e2:6c:34:98:87:65:e1:
99:a1:6c:43:c3:97:81:b8:43:33:62:c5:dc:c9:60:d5:b5:03:
a0:5d:00:5c:0a:78:16:eb:74:50:e6:c7:f0:7a:97:24:25:9d:
cf:31:c1:e3:ba:fa:dc:89:50:0e:e1:3c:56:90:1d:84:b2:89:
55:62:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:17:20 2026 by rpki-client