Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: FzskJUwH+MHzV2Uq2grczaY+9KAUHjiCcGyTCwgs3lI=
Subject key identifier: FD:F0:5B:04:6E:ED:0B:58:FC:04:E0:89:A9:F8:18:8D:47:01:4C:52
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 019D31BE5E7927CF6D71AA7B79EF02724542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 1888
Signing time: Sat 28 Mar 2026 00:00:52 +0000
Manifest this update: Sat 28 Mar 2026 00:00:52 +0000
Manifest next update: Sun 29 Mar 2026 00:00:52 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: cYIWjEu/DbmDB6wsEO4lNLKVtYzHtewa1Pi0rLs7PGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:5e:79:27:cf:6d:71:aa:7b:79:ef:02:72:45:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Mar 28 00:00:52 2026 GMT
Not After : Mar 29 00:00:52 2026 GMT
Subject: CN=fdf05b046eed0b58fc04e089a9f8188d47014c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:f2:a2:46:2b:0d:90:32:6b:83:80:3f:3e:
cd:fb:f7:f0:29:e0:f7:a9:8e:f9:18:03:2b:3b:96:
25:18:e6:98:dd:4d:f6:0b:9f:7b:35:bf:01:3a:8f:
6b:59:34:79:80:c0:2b:58:0b:a2:9b:38:df:95:28:
31:81:b0:b6:f5:24:ca:1c:39:2c:9d:b6:c9:6e:da:
48:80:c4:2b:fc:06:4f:6d:b5:73:00:a3:f4:90:ad:
4e:0e:35:9c:3f:86:ca:8e:6f:53:23:8a:93:36:64:
c6:38:8a:fb:59:b3:fa:ce:5f:49:d0:eb:30:1e:75:
3a:d2:42:0c:37:16:e6:ce:73:fa:ee:98:bb:67:c9:
54:1e:b3:b5:aa:e6:29:80:e9:04:b8:3a:0c:5e:17:
2f:57:57:3e:eb:ef:05:33:bc:10:ec:5a:3f:c3:8f:
bb:2b:24:bd:ff:dc:a5:ca:f3:32:a2:d1:0e:22:b4:
19:df:25:1b:0a:ad:3b:7a:8d:f0:8c:2f:33:17:01:
33:18:0d:4f:dd:7f:27:4b:ec:9a:11:5c:73:54:a9:
a8:82:07:35:dc:8d:92:16:59:20:fa:92:cc:9e:11:
e9:90:15:d9:c9:47:cb:fe:93:4c:50:72:a1:12:e6:
c0:48:de:7e:fa:61:06:7d:6c:ea:6c:6d:49:28:61:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:5B:04:6E:ED:0B:58:FC:04:E0:89:A9:F8:18:8D:47:01:4C:52
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0e:4a:ad:33:05:cb:61:08:f1:e7:07:47:d2:43:cf:4f:9b:
dc:64:77:4b:44:8c:75:79:65:d8:84:7f:89:ed:7c:e8:8c:a7:
3c:50:8a:1b:78:7c:82:ab:fd:b3:f1:40:01:f5:5d:24:7e:f3:
09:90:60:7f:2b:df:81:1a:17:c4:98:7c:5e:dd:28:01:b6:d0:
d9:e8:2f:f5:f0:dd:98:b7:ac:b7:cf:eb:68:45:51:ef:81:19:
9c:f8:11:f2:14:84:b0:7e:cd:ea:13:1b:f1:86:56:d0:9c:63:
64:d0:bf:ca:19:1c:e0:f8:a2:77:0b:37:d4:11:26:b8:99:62:
c4:a8:cf:cd:f2:87:4d:73:47:d9:62:57:90:f5:db:d5:8d:54:
49:23:3d:61:4b:b6:bc:12:30:48:a0:9b:5f:9b:28:0f:37:71:
2e:ab:96:c6:92:bd:7f:df:6c:a1:d9:9d:06:87:d8:d2:91:ca:
0e:9e:51:b9:7a:e4:49:b8:76:75:17:67:37:b5:83:9c:12:f2:
18:94:3b:77:eb:8d:b0:6d:6e:7c:fd:03:51:40:cd:4f:00:07:
f7:ab:3e:bb:93:9b:1a:bb:68:e5:40:7a:66:e3:6a:1f:fe:50:
82:f1:a5:49:22:76:f7:b8:8a:a3:35:ae:67:ff:e6:02:66:00:
b5:e3:43:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xvl55J89tcap7ee8CckVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzViZjI0NTA1NzM3NDFmOTQzNWU5NDgyMTAxNmEyMmU2
YmMxNDcwHhcNMjYwMzI4MDAwMDUyWhcNMjYwMzI5MDAwMDUyWjAzMTEwLwYDVQQD
EyhmZGYwNWIwNDZlZWQwYjU4ZmMwNGUwODlhOWY4MTg4ZDQ3MDE0YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu/yokYrDZAya4OAPz7N+/fwKeD3
qY75GAMrO5YlGOaY3U32C597Nb8BOo9rWTR5gMArWAuimzjflSgxgbC29STKHDks
nbbJbtpIgMQr/AZPbbVzAKP0kK1ODjWcP4bKjm9TI4qTNmTGOIr7WbP6zl9J0Osw
HnU60kIMNxbmznP67pi7Z8lUHrO1quYpgOkEuDoMXhcvV1c+6+8FM7wQ7Fo/w4+7
KyS9/9ylyvMyotEOIrQZ3yUbCq07eo3wjC8zFwEzGA1P3X8nS+yaEVxzVKmoggc1
3I2SFlkg+pLMnhHpkBXZyUfL/pNMUHKhEubASN5++mEGfWzqbG1JKGHsgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3wWwRu7QtY/ATgian4GI1HAUxSMB8GA1UdIwQY
MBaAFKU1vyRQVzdB+UNelIIQFqIua8FHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEt
YjAzMjExMjA1MWIxLzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEtYjAzMjExMjA1MWIx
LzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg5KrTMF
y2EI8ecHR9JDz0+b3GR3S0SMdXll2IR/ie186IynPFCKG3h8gqv9s/FAAfVdJH7z
CZBgfyvfgRoXxJh8Xt0oAbbQ2egv9fDdmLest8/raEVR74EZnPgR8hSEsH7N6hMb
8YZW0JxjZNC/yhkc4Piidws31BEmuJlixKjPzfKHTXNH2WJXkPXb1Y1USSM9YUu2
vBIwSKCbX5soDzdxLquWxpK9f99sodmdBofY0pHKDp5RuXrkSbh2dRdnN7WDnBLy
GJQ7d+uNsG1ufP0DUUDNTwAH96s+u5ObGrto5UB6ZuNqH/5QgvGlSSJ297iKozWu
Z//mAmYAteNDDw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:11 2026 by rpki-client