Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: sI2RDB4Wrwv/S3r6EeZU4gMy7KeuTopua4yeV8RKdQM=
Subject key identifier: B2:8D:A6:55:09:24:78:EE:C7:51:D6:95:18:6B:C4:9F:C2:02:10:00
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 01A0DCBBDEC63C04182D69AAD7FE8D6B4FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 1574
Signing time: Sat 26 Sep 2026 08:01:34 +0000
Manifest this update: Sat 26 Sep 2026 08:01:34 +0000
Manifest next update: Sun 27 Sep 2026 08:01:34 +0000
Files and hashes: 1: AG-Qou67efcOzt4fxQmqDQln1Hk.asa (hash: 9zDiR1oPKgS70CwQIVFWQtf2kS0dn9/p1LP7K2KCByQ=)
2: Sn0QHgY954LpBt8DtGcKjxR44Dg.asa (hash: 2M2BaxTHZl1fixS1P0qCYkfhEwbPQ8Y6PSqpN2/G+4w=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: 7U02DPj2Q2fDAKUu7YdeBBGgjVD0eStmftguVwu4Ia4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:de:c6:3c:04:18:2d:69:aa:d7:fe:8d:6b:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Sep 26 08:01:34 2026 GMT
Not After : Sep 27 08:01:34 2026 GMT
Subject: CN=b28da655092478eec751d695186bc49fc2021000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:11:34:1f:7f:55:5c:fb:4e:52:20:44:3b:
49:aa:98:8f:06:11:bc:46:f4:d0:4a:c7:31:b8:f1:
b3:76:25:27:b9:02:5e:36:b0:b4:3c:bb:b8:28:d1:
c3:12:9c:fd:27:e2:42:b2:1e:4c:8b:19:bd:34:ae:
63:73:21:78:05:22:13:78:90:02:37:7e:d4:54:63:
21:22:30:8f:74:85:a7:2e:02:ea:90:02:6a:43:df:
ce:d1:7f:83:1e:7b:f5:9f:0b:e4:d1:bb:43:1c:d1:
71:d6:22:52:bf:4a:0c:72:42:b9:4b:a4:cc:84:a5:
f7:0c:c7:bb:96:b0:14:87:3e:89:93:95:86:e4:6e:
fd:e1:8b:83:4f:4e:c5:8c:64:81:5f:50:06:ad:0f:
57:f1:85:9b:c9:6d:c7:50:fd:bd:00:ec:b7:45:2d:
45:79:82:c8:51:b6:21:4c:93:0c:5e:be:64:bb:96:
40:42:df:fd:4b:da:2c:a4:a9:86:cd:0d:bb:73:9e:
c5:6c:46:8b:1f:21:85:d8:45:d2:c8:57:3b:ed:69:
73:85:60:60:40:ea:22:ee:2d:15:bc:25:6a:a2:7c:
19:83:5d:10:85:f5:19:09:18:ca:93:fa:ad:df:84:
07:69:20:5f:b4:e0:bc:6d:11:ea:7b:7c:15:dd:16:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:A6:55:09:24:78:EE:C7:51:D6:95:18:6B:C4:9F:C2:02:10:00
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:1f:8e:07:db:ed:9f:98:0f:93:b7:cc:17:e2:07:d5:01:
69:4f:df:88:ed:0d:70:9b:5c:a0:ca:5d:d3:27:dc:1f:b6:25:
5a:ff:47:1d:d5:0a:db:62:ed:5b:99:0e:29:8b:dd:84:33:fd:
aa:be:ea:fd:d2:d3:68:a8:6f:d8:2e:07:d3:81:5c:1d:f1:ab:
a8:49:1e:0b:28:67:08:18:8c:28:07:24:92:35:5f:2a:1a:f1:
2b:46:ec:28:31:52:78:ac:56:cc:00:fa:de:de:01:c7:c6:43:
04:94:1a:e5:ce:79:8d:54:af:43:69:4a:bf:60:b3:04:e5:df:
00:18:f0:de:47:cb:67:d8:3c:19:0a:e5:ab:d7:69:13:d7:d2:
d7:04:09:9d:63:45:b0:8f:66:32:35:9e:e6:f2:8a:74:70:b1:
f2:50:ab:6c:44:8b:87:8c:54:6e:c2:77:a4:09:e3:20:57:99:
c9:a4:ca:be:63:8e:ed:62:53:bd:13:84:9c:04:a0:02:35:28:
9e:88:f0:ba:d2:1f:b2:57:32:45:64:58:57:65:4f:8a:10:fe:
bf:c4:db:f8:0e:b5:92:0a:12:6c:e5:09:0d:78:d8:ed:d9:53:
ac:fa:f6:c9:f6:6e:a1:d9:6a:41:1a:ae:e7:44:23:4a:9a:1b:
c4:b5:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:30:37 2026 by rpki-client