Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: Yv1Q3cSWdFj2p28XEgk8FCfW5VvXc9h91hCWvRHV3X0=
Subject key identifier: BC:92:BD:E8:C7:6C:61:98:F1:89:61:B9:C3:28:0B:51:2B:29:F2:83
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 019D2A3BCDD4C495412EEFFC4BCD3C70769E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 0B26
Signing time: Thu 26 Mar 2026 13:00:55 +0000
Manifest this update: Thu 26 Mar 2026 13:00:55 +0000
Manifest next update: Fri 27 Mar 2026 13:00:55 +0000
Files and hashes: 1: c1T_ugUar9ceFcuB3HM0intn2C4.roa (hash: r2UF6QghR5sMhXjvwfbc2TQkLc9tI62JzcSjSV6zEYY=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: 79sSHpL79UKGCHvw1FPY2U1RMrCyqzMHDqai7ld7IO8=)
3: zn5qo0nWrzLZmASHG4XfqLmagKc.roa (hash: lbZiqoyBwXfTKlcc0WAFe6dfCHt4tuz6Zs1OJOLtDmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:cd:d4:c4:95:41:2e:ef:fc:4b:cd:3c:70:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Mar 26 13:00:55 2026 GMT
Not After : Mar 27 13:00:55 2026 GMT
Subject: CN=bc92bde8c76c6198f18961b9c3280b512b29f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:de:4f:40:d2:4e:f7:51:aa:84:45:f3:f6:
fe:c6:f9:ae:63:a7:b3:6b:ac:18:a8:fa:3b:3d:3b:
92:b2:8f:cb:a5:9a:dd:a8:c5:c1:ea:9a:44:e2:4d:
89:a5:b6:0f:da:d4:70:8a:77:62:db:8e:e6:63:c7:
3a:6a:6a:52:49:cb:7b:45:dd:00:55:d0:54:df:b9:
12:1a:c5:4c:24:84:e6:ab:4f:9d:d5:84:25:36:cb:
33:b1:c4:6f:4d:09:89:cd:75:73:07:e8:8e:a9:14:
f1:11:d2:56:b2:01:f4:0a:f6:d1:55:8f:e5:64:ec:
2d:3e:b9:db:0c:1b:b9:18:fe:4b:cf:bb:a8:34:c1:
0e:48:94:98:34:0f:ec:fd:11:b6:c2:f7:27:1a:57:
9e:51:c6:2e:0c:b6:40:c5:76:49:5d:4e:63:d5:a5:
dd:c2:0b:2e:28:8e:55:a0:e6:f2:e1:a8:6b:c0:55:
66:1b:6c:1a:75:62:02:99:4e:86:9b:20:9e:ab:e1:
56:17:72:1d:36:e9:45:10:76:74:ad:b1:56:d1:54:
2c:08:4b:1d:31:ff:87:2c:1c:82:9d:fa:75:4d:90:
db:78:8a:30:4d:0e:14:67:70:1a:ff:cb:b9:55:29:
ac:ef:32:b5:7e:4b:1c:65:9b:7a:29:02:34:1f:44:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:BD:E8:C7:6C:61:98:F1:89:61:B9:C3:28:0B:51:2B:29:F2:83
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:15:f0:ab:8d:56:e0:9d:f5:b3:5e:78:fc:1b:55:33:3e:10:
da:2a:90:b0:7f:8f:9d:33:f4:8a:a1:23:eb:53:6a:a2:0a:ab:
30:c2:99:52:10:6c:d0:f4:d5:41:6d:72:af:67:9c:4b:af:77:
d1:c8:48:37:ea:f0:b1:7b:e9:7e:d2:50:23:f5:2d:a8:6a:52:
80:66:83:0c:70:79:b5:bb:86:8f:98:d3:47:62:ed:d2:6b:40:
c5:df:0f:05:53:4f:28:9d:be:11:e6:26:d5:c8:97:94:e2:20:
c3:54:92:84:82:cc:7e:ab:83:e5:a7:8d:25:78:7a:f4:b7:8a:
ff:31:ae:76:bc:c6:88:9c:38:06:27:f4:42:ff:bc:36:a2:87:
8b:64:69:f1:a1:cb:b7:9f:c3:75:bf:dd:68:ef:6c:4c:56:8f:
9a:70:14:84:b7:16:4f:5a:a2:70:84:32:5d:29:e9:4a:c2:77:
bd:2a:76:45:f0:15:f1:96:04:0a:96:a0:8f:6a:8c:13:e2:83:
72:dc:ae:06:5f:5c:97:57:8e:0d:02:d3:29:98:69:3a:c8:fe:
b0:56:a9:7a:c9:02:09:f9:6f:29:ad:44:36:46:ad:5a:7a:15:
5f:27:0b:02:54:4e:f0:99:e5:ad:e6:e7:57:40:03:11:11:c2:
ac:0c:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:49 2026 by rpki-client