Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: fEd0tHXFowZPEArTIwLAbW7urDqj7SLnjmIl4QdLMP0=
Subject key identifier: 60:70:04:7A:51:92:C1:67:A6:59:3A:DC:A1:25:A0:B6:CB:15:9D:A9
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019F946DF0952D51D5874F981C4770B7DE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 14C9
Signing time: Fri 24 Jul 2026 14:01:00 +0000
Manifest this update: Fri 24 Jul 2026 14:01:00 +0000
Manifest next update: Sat 25 Jul 2026 14:01:00 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa (hash: KGJVD6V5txLQAjQLlr+mNudFF1tQTaGRrNO28803Imc=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: W/RikvOlh9HU0lIeU9Ca1q6/8B+AfULd0M5iy4nJJrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:f0:95:2d:51:d5:87:4f:98:1c:47:70:b7:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Jul 24 14:01:00 2026 GMT
Not After : Jul 25 14:01:00 2026 GMT
Subject: CN=6070047a5192c167a6593adca125a0b6cb159da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:6b:9b:35:ab:01:c9:81:37:2a:20:5b:6b:
2c:68:47:10:5b:e5:78:86:4a:6e:c4:95:e0:dd:75:
08:94:3a:2f:cd:6d:3d:53:cf:a9:9c:54:91:64:d9:
ce:f9:7f:2e:99:e3:63:ca:d6:53:2d:5d:59:1c:30:
2b:00:fc:0e:86:32:3c:6a:b3:a2:31:dd:e1:bd:87:
4f:91:5e:4b:b9:c9:26:bd:7c:97:bb:ad:66:73:38:
98:f1:82:d1:90:87:97:89:52:58:c3:aa:b1:9c:1d:
f9:49:7f:61:74:5c:c0:eb:63:50:cc:36:8e:55:63:
a5:a8:00:0b:b7:73:be:28:be:7a:54:60:f2:42:4a:
3a:ec:85:f5:c1:aa:0d:d7:09:c4:e8:62:d3:58:bb:
57:3e:5c:31:39:c6:9e:8e:c9:ce:b7:c4:9b:11:ba:
73:82:13:3e:31:30:99:65:46:81:3c:f7:b2:0f:48:
f8:5c:b7:e8:50:25:81:d0:1d:7b:d5:0f:51:c1:2f:
74:43:c1:d2:dc:a5:d2:a7:ec:de:fb:98:fa:c6:cc:
3b:47:e3:5a:2d:d6:42:13:31:ef:cd:bb:d1:21:16:
20:c5:3c:ba:30:7e:d6:4f:88:aa:75:3d:be:a1:07:
d7:32:e8:16:6d:95:5c:84:d6:46:5f:20:3b:d9:14:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:04:7A:51:92:C1:67:A6:59:3A:DC:A1:25:A0:B6:CB:15:9D:A9
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f3:75:61:2c:8d:f0:a7:fd:84:c0:ad:9e:62:7e:63:88:da:
42:b8:d9:65:87:ff:34:b5:d2:de:4d:24:a8:1a:63:88:f5:53:
a8:c1:cb:b0:40:da:64:f6:62:99:46:1c:4c:58:98:09:be:2f:
e3:74:57:40:b5:d4:ec:34:8b:34:ec:34:ec:55:66:11:c6:60:
99:41:10:0d:b6:a2:8d:49:3b:8b:d3:17:50:fe:07:ec:2d:8c:
60:7b:f4:5d:24:53:ed:c1:0e:43:f0:2f:5f:4a:1c:22:c0:88:
cd:6b:14:0a:80:89:21:aa:4e:7f:7a:49:55:25:73:38:32:93:
be:44:f4:e4:00:77:35:f8:b5:9c:55:58:9c:89:d7:66:04:5f:
8b:ef:6b:5b:30:d7:cd:d0:63:c3:00:af:d1:62:9a:28:e7:bc:
4c:04:a1:1d:00:11:98:55:e3:fc:21:07:2b:99:34:b6:f8:1e:
9b:26:35:87:85:4f:ce:49:d4:66:53:f5:00:79:dc:74:82:25:
af:9f:5e:fc:56:bc:a9:08:82:ab:1d:73:95:52:19:0e:c3:03:
79:00:32:07:22:73:fe:f2:fb:6d:6a:cd:a2:4c:f2:13:ae:dc:
b9:e0:42:15:d2:6b:59:04:8f:79:0a:ed:c7:68:fd:1f:9c:18:
92:9b:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:46 2026 by rpki-client