Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
File: tw62RTcL6XD5Yn-2p0_zlCJaelk.mft (raw, json)
Hash identifier: GeFcA+6sYFfZivdPI9DGjnkqlBs/NhGXej66ndZk2Jg=
Subject key identifier: 75:EC:75:DB:43:97:BB:5A:1C:D7:2B:F4:EC:B1:CF:B1:BA:AD:AE:E4
Authority key identifier: B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
Certificate issuer: /CN=b70eb645370be970f9627fb6a74ff394225a7a59
Certificate serial: 01A0D5DDC1CF698544CFA4B4AB601BDD6FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:15 +0000
Manifest this update: Fri 25 Sep 2026 00:01:15 +0000
Manifest next update: Sat 26 Sep 2026 00:01:15 +0000
Files and hashes: 1: nDBWMVAEYABPmwRQUfdrYuE6rGw.roa (hash: GU7opyYf2/XqFKUDoqP4OkYoUQ4kZmYzVcLepgnMjpc=)
2: tw62RTcL6XD5Yn-2p0_zlCJaelk.crl (hash: RF6pKMz1lTooSFY3rhEOAssnLHyi7uQS4rvDkHc2Vvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:c1:cf:69:85:44:cf:a4:b4:ab:60:1b:dd:6f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70eb645370be970f9627fb6a74ff394225a7a59
Validity
Not Before: Sep 25 00:01:15 2026 GMT
Not After : Sep 26 00:01:15 2026 GMT
Subject: CN=75ec75db4397bb5a1cd72bf4ecb1cfb1baadaee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:03:f9:7f:0a:61:10:31:e4:2e:1e:d9:1f:
54:13:86:d4:b3:0f:95:31:47:b8:a0:21:3e:8a:3f:
f8:fb:48:cb:26:c8:8f:ea:e9:92:3b:dc:d9:a4:f5:
e8:18:b8:17:6c:28:5f:b5:c6:5d:77:58:6d:5f:12:
a6:d2:79:45:3a:52:89:99:2e:6c:d4:7f:7d:a6:1c:
89:8a:c1:1a:6d:9d:df:9a:42:e1:ef:a6:c7:84:6a:
45:9b:b3:91:91:f3:95:09:62:bb:73:7e:8d:a5:db:
45:de:ec:92:2d:36:70:cc:3c:6e:f9:b7:d8:42:34:
19:20:89:e4:cf:7e:93:a9:fa:4b:69:ed:21:3a:87:
56:92:b9:04:55:6c:84:8a:0c:99:cd:34:71:78:57:
d2:23:cc:81:23:7c:4c:d5:06:d9:b1:99:15:8d:3d:
5a:fb:3a:b9:5a:55:83:27:7a:0f:a9:56:09:55:de:
db:ec:55:c6:7e:88:5b:f2:70:96:a4:c9:45:7b:88:
46:96:98:13:e4:5c:59:47:7e:bc:8a:57:d2:00:ef:
07:d7:ef:65:34:61:d9:ed:f6:66:c4:e0:15:d7:b2:
a7:89:af:f8:44:7b:1b:ca:6b:17:5b:93:9f:ea:88:
ae:fa:4a:de:0e:80:63:01:d2:a2:6b:5f:94:96:09:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EC:75:DB:43:97:BB:5A:1C:D7:2B:F4:EC:B1:CF:B1:BA:AD:AE:E4
X509v3 Authority Key Identifier:
keyid:B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:ee:23:dc:d9:91:77:dc:30:c4:ec:e6:13:08:71:91:01:
a1:12:6e:39:ee:2d:dc:a6:66:dc:ef:32:7a:c0:94:8b:91:f1:
6f:14:1d:5d:cd:47:d8:9c:4e:c8:95:17:cf:93:d7:98:79:38:
c8:99:86:18:5c:c5:a8:c4:12:ba:f6:ba:ec:c2:27:f5:e9:08:
c4:dd:92:e4:8e:db:d5:17:b4:b6:87:20:26:fc:86:88:ad:f4:
32:e7:29:4f:bd:e1:21:8b:c0:8a:9f:b8:60:2c:8b:39:1c:1c:
97:bf:16:54:73:c1:d3:e5:31:d2:c9:f7:3e:19:2f:0c:b2:8d:
bf:78:86:ca:1b:df:58:41:f9:4d:92:36:71:25:1e:1f:45:bc:
a8:98:81:6c:3f:49:ca:03:8e:36:c9:ed:50:c1:24:23:a6:bd:
54:71:6d:17:af:2e:0b:a2:ba:f7:38:8c:6f:fe:9f:0a:cf:b5:
a0:ec:ca:18:cc:29:22:de:c4:97:17:8e:ee:ec:01:6a:59:37:
27:a4:b6:7c:b9:34:03:e3:b1:75:65:f9:97:52:68:03:74:52:
86:9b:e6:f0:0d:2f:cb:63:19:fe:1e:aa:8b:23:b6:49:96:d1:
78:e6:d5:bf:b2:69:d1:d9:12:95:ff:5b:e7:b7:60:f9:26:2c:
7b:8f:a1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3cHPaYVEz6S0q2Ab3W+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MGViNjQ1MzcwYmU5NzBmOTYyN2ZiNmE3NGZmMzk0MjI1
YTdhNTkwHhcNMjYwOTI1MDAwMTE1WhcNMjYwOTI2MDAwMTE1WjAzMTEwLwYDVQQD
Eyg3NWVjNzVkYjQzOTdiYjVhMWNkNzJiZjRlY2IxY2ZiMWJhYWRhZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwcD+X8KYRAx5C4e2R9UE4bUsw+V
MUe4oCE+ij/4+0jLJsiP6umSO9zZpPXoGLgXbChftcZdd1htXxKm0nlFOlKJmS5s
1H99phyJisEabZ3fmkLh76bHhGpFm7ORkfOVCWK7c36NpdtF3uySLTZwzDxu+bfY
QjQZIInkz36TqfpLae0hOodWkrkEVWyEigyZzTRxeFfSI8yBI3xM1QbZsZkVjT1a
+zq5WlWDJ3oPqVYJVd7b7FXGfohb8nCWpMlFe4hGlpgT5FxZR368ilfSAO8H1+9l
NGHZ7fZmxOAV17Knia/4RHsbymsXW5Of6oiu+kreDoBjAdKia1+UlgnI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXsddtDl7taHNcr9Oyxz7G6ra7kMB8GA1UdIwQY
MBaAFLcOtkU3C+lw+WJ/tqdP85QiWnpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHc2MlJUY0w2WEQ1WW4tMnAwX3psQ0phZWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzkt
OWExYWIxMWFiZGVkLzEvdHc2MlJUY0w2WEQ1WW4tMnAwX3psQ0phZWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzktOWExYWIxMWFiZGVk
LzEvdHc2MlJUY0w2WEQ1WW4tMnAwX3psQ0phZWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4TuI9zZ
kXfcMMTs5hMIcZEBoRJuOe4t3KZm3O8yesCUi5HxbxQdXc1H2JxOyJUXz5PXmHk4
yJmGGFzFqMQSuva67MIn9ekIxN2S5I7b1Re0tocgJvyGiK30MucpT73hIYvAip+4
YCyLORwcl78WVHPB0+Ux0sn3PhkvDLKNv3iGyhvfWEH5TZI2cSUeH0W8qJiBbD9J
ygOONsntUMEkI6a9VHFtF68uC6K69ziMb/6fCs+1oOzKGMwpIt7ElxeO7uwBalk3
J6S2fLk0A+OxdWX5l1JoA3RShpvm8A0vy2MZ/h6qiyO2SZbReObVv7Jp0dkSlf9b
57dg+SYse4+hoA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:34:19 2026 by rpki-client