Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: nyXmp5PVBxffQwKmBJGTlYWaJQytoruIMrTh1oHuFLI=
Subject key identifier: 21:9D:DD:FD:C7:36:1E:13:5A:2A:4A:04:30:FA:38:BD:23:FB:30:32
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019D3307E540D82F59359782DFEB47811195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: 011C
Signing time: Sat 28 Mar 2026 06:00:48 +0000
Manifest this update: Sat 28 Mar 2026 06:00:48 +0000
Manifest next update: Sun 29 Mar 2026 06:00:48 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: XVZl0xaj2x0U76jRQGQneGq73HGMrf4ZcECvQcP0KTo=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:e5:40:d8:2f:59:35:97:82:df:eb:47:81:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Mar 28 06:00:48 2026 GMT
Not After : Mar 29 06:00:48 2026 GMT
Subject: CN=219dddfdc7361e135a2a4a0430fa38bd23fb3032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:c1:50:84:01:3a:63:df:77:27:26:49:f3:
d4:43:c6:56:8a:18:9d:98:76:b2:9c:be:1f:a6:70:
01:14:8f:74:5b:dd:22:2d:69:0d:10:6c:f8:e2:f7:
ef:1c:c9:33:5b:6b:b4:03:af:fd:cd:e9:ec:dd:40:
c6:47:a5:8c:19:1c:d1:d1:f7:cc:a4:0f:79:10:19:
88:a9:ab:bb:56:da:28:20:3c:06:69:bd:11:cb:d9:
49:7b:a3:b9:57:31:26:b7:e4:e3:81:15:71:d2:ce:
81:89:b9:82:7f:b2:60:09:47:aa:07:7a:50:9c:80:
28:b2:c8:3a:da:7a:ba:aa:ab:3a:44:90:e8:44:5b:
3d:84:73:c9:6b:59:b9:c1:80:62:01:2c:a1:9b:73:
00:e2:12:08:ac:ff:fb:8b:33:ae:e9:6f:4d:62:dd:
cc:24:b8:d8:6a:8d:1e:d4:c2:ef:f9:cd:1c:3d:ad:
de:12:d3:09:f6:b8:9f:73:f8:2a:fd:53:88:55:d1:
90:22:8c:93:d8:a7:eb:1c:a1:24:28:af:b9:88:41:
e6:99:7b:c5:46:4b:02:11:94:66:a3:f5:bd:1b:76:
2f:47:20:cf:d8:2b:5f:c7:6f:83:8a:20:4e:15:05:
87:37:6a:e7:87:a4:fa:f5:59:1e:0a:a9:a2:3a:4d:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:DD:FD:C7:36:1E:13:5A:2A:4A:04:30:FA:38:BD:23:FB:30:32
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:57:4c:f3:6f:bd:bc:15:0f:30:04:75:81:27:06:20:44:
be:e6:88:c6:b7:9a:ca:2c:e3:8e:dc:36:bf:70:63:6e:b1:c7:
ad:32:c1:d7:8d:c3:6b:18:6f:69:a0:65:b7:9d:6f:d6:97:c8:
a7:94:6b:3e:39:d0:94:cf:8b:61:44:9e:76:ce:f9:30:d0:fe:
27:37:0a:74:cd:95:7c:a4:a8:04:42:bc:6b:43:4a:78:9d:4f:
fa:6d:4a:62:7d:26:b9:90:75:e5:93:45:4e:49:da:88:07:99:
b9:85:d8:0b:ce:f9:bf:a2:8b:6d:e8:39:5f:33:06:bd:66:a9:
b0:d3:c8:86:5c:5b:b0:f3:fb:6c:01:21:bf:5a:91:a2:40:b6:
11:f0:9a:31:8d:dc:fa:48:33:a5:8e:2c:83:ca:34:3e:53:de:
9b:ce:fc:20:89:36:f4:c4:97:8b:74:f0:b2:cf:08:c4:90:97:
22:0b:1b:b0:ab:92:ec:a7:dc:72:54:94:51:3c:01:30:fc:33:
35:3e:de:6a:8c:45:a5:b4:a2:2a:fe:ba:c3:72:40:51:7f:c6:
0d:70:65:1c:e4:db:0f:f8:34:79:b0:e5:e9:13:4f:bd:7c:c5:
47:9b:7d:68:0a:7f:b2:6f:be:98:ee:89:23:e5:f4:e2:69:f5:
72:4b:18:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:48 2026 by rpki-client