Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
File: tw62RTcL6XD5Yn-2p0_zlCJaelk.mft (raw, json)
Hash identifier: k/A9CpT/EPT/xDYDj6E8BoB4uN6hdFUgvhmwKsZsYmo=
Subject key identifier: FF:C1:B8:B4:D7:6D:1F:0A:CB:5A:EC:B2:9F:AF:19:56:AE:00:9B:4E
Authority key identifier: B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
Certificate issuer: /CN=b70eb645370be970f9627fb6a74ff394225a7a59
Certificate serial: 019F916D261C79B67D5E8EAEBF1E0A98A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:17 +0000
Manifest this update: Fri 24 Jul 2026 00:01:17 +0000
Manifest next update: Sat 25 Jul 2026 00:01:17 +0000
Files and hashes: 1: nDBWMVAEYABPmwRQUfdrYuE6rGw.roa (hash: GU7opyYf2/XqFKUDoqP4OkYoUQ4kZmYzVcLepgnMjpc=)
2: tw62RTcL6XD5Yn-2p0_zlCJaelk.crl (hash: 9iHoqlR4aC03NE/06cWJd8WHMD8vpx7PY/8tBs67D4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:26:1c:79:b6:7d:5e:8e:ae:bf:1e:0a:98:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70eb645370be970f9627fb6a74ff394225a7a59
Validity
Not Before: Jul 24 00:01:17 2026 GMT
Not After : Jul 25 00:01:17 2026 GMT
Subject: CN=ffc1b8b4d76d1f0acb5aecb29faf1956ae009b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:35:2c:59:57:cc:f0:78:f5:98:a0:fd:a6:
3a:66:94:ba:7b:0e:d8:c7:dc:b4:85:ee:fd:3e:68:
bc:1e:b8:6b:17:54:a8:49:ac:a7:30:e0:9a:ec:93:
81:c6:65:09:e4:62:7c:c2:cf:0f:32:e9:41:ce:35:
94:c4:d6:a1:66:f2:ca:57:bd:d0:11:10:1b:d0:2c:
11:e8:ed:ae:c3:79:85:67:71:f1:0e:11:58:1d:f4:
db:fd:89:9a:06:6f:44:2a:93:80:e6:5d:03:3b:63:
df:e7:ea:a0:cc:79:10:1e:15:30:2a:24:b1:bc:76:
83:9b:86:f5:c3:3f:91:a5:fd:a9:b9:8e:d4:cb:93:
1f:a7:d7:91:7f:2d:c3:aa:3d:b1:17:f7:80:a7:d1:
58:58:fb:ad:67:ba:27:69:c8:ee:3b:98:98:27:13:
71:9f:a4:fa:ec:d6:41:a8:f9:73:0b:a7:fa:50:01:
51:2d:bc:1c:e8:db:e1:74:c1:23:45:b4:36:a7:c5:
29:3c:0f:5a:84:48:fd:63:85:7b:16:3d:98:22:3b:
8f:f0:6b:98:81:4b:ef:67:87:8e:a2:49:34:c8:f6:
d4:9e:28:a9:a2:31:2c:bc:d6:c2:c4:7b:6a:bc:36:
ea:e2:6b:b1:8d:15:d9:fd:06:30:97:19:fa:0d:1a:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:B8:B4:D7:6D:1F:0A:CB:5A:EC:B2:9F:AF:19:56:AE:00:9B:4E
X509v3 Authority Key Identifier:
keyid:B7:0E:B6:45:37:0B:E9:70:F9:62:7F:B6:A7:4F:F3:94:22:5A:7A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw62RTcL6XD5Yn-2p0_zlCJaelk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/tw62RTcL6XD5Yn-2p0_zlCJaelk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:26:26:bf:65:db:52:62:fa:c0:5e:44:b9:6d:5a:24:b1:2f:
ee:7c:03:25:dc:de:86:2a:b7:fa:05:be:ad:ee:f1:66:61:7a:
06:00:8d:90:07:fd:ae:b2:8a:24:77:59:94:38:cc:18:5b:9e:
00:d3:22:5d:eb:09:0d:9a:23:14:c7:ae:b8:ad:12:0a:cb:cc:
c4:cd:ea:ad:71:c4:84:fd:42:85:ce:63:cc:5d:35:d5:ea:12:
a6:66:45:37:4d:55:00:4d:08:eb:b3:6e:8a:65:8b:89:c3:11:
ac:6f:61:af:cf:16:85:1d:a0:0f:1a:d7:8d:3f:39:f0:64:d3:
f6:eb:69:80:fb:2c:83:f3:17:bb:ea:5e:5e:5d:9f:53:11:a7:
f6:1f:b8:7f:73:9b:16:89:f0:32:19:84:5e:48:35:f3:5d:c7:
3f:37:6c:a2:ce:de:a4:89:3e:13:3c:af:50:2d:4c:56:a1:e3:
21:f8:0b:09:12:d0:45:eb:45:3c:20:73:39:7b:2e:90:8e:10:
9f:72:5c:40:32:21:73:68:65:ff:a0:85:28:b3:33:fc:ed:67:
5b:0f:0f:fd:70:da:a9:36:e6:a4:44:7c:76:9c:a8:9d:10:3b:
6b:51:6b:ea:50:db:eb:70:70:a8:ce:64:a2:4c:14:6d:2f:50:
a8:e0:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:11 2026 by rpki-client