Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File: tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier: I6txWoHyEMUdzf2ehFnhRXQcqtt0Qks72DD/luuE1io=
Subject key identifier: 66:32:8D:8D:30:AE:C3:42:8E:50:12:7E:38:72:26:8B:4C:5B:F2:1E
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 019D382E95471CD151B5DA88D136BA50FAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 06:01:10 +0000
Manifest this update: Sun 29 Mar 2026 06:01:10 +0000
Manifest next update: Mon 30 Mar 2026 06:01:10 +0000
Files and hashes: 1: fQi4S-76xWPPyw5vMb_RHWLTS5s.roa (hash: rmuMrTFKFEOVdlfyW4V4X3rzLj8ASYY1dTNue1YgmjQ=)
2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: K/2NAjVaLPksEbfaEdpY+8sJfJuHJuhlpFf2b4OXsDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:47:1c:d1:51:b5:da:88:d1:36:ba:50:fa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Mar 29 06:01:10 2026 GMT
Not After : Mar 30 06:01:10 2026 GMT
Subject: CN=66328d8d30aec3428e50127e3872268b4c5bf21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:d1:8b:00:02:65:a6:3b:fb:eb:95:21:44:
dd:de:79:aa:f0:5c:dd:91:8f:17:8d:21:90:76:ae:
4f:e0:a5:3f:e7:32:68:fa:04:2a:0a:89:6d:8e:f6:
04:66:78:84:9c:4b:17:3b:e1:c9:9d:5e:75:fb:40:
e8:28:f3:7c:4f:2e:f3:61:6e:48:77:00:fc:78:b5:
03:04:64:a2:e5:4d:35:e8:b0:7a:4e:2e:29:c8:99:
9a:b5:f7:f7:e6:43:4c:20:94:dd:3b:6a:37:a8:7c:
2f:dd:0f:2a:5d:5e:5e:41:14:56:15:4e:fb:7c:1a:
24:e1:02:d9:1c:65:92:55:0c:c5:7f:69:23:fc:08:
bc:ef:e5:ff:13:de:20:d7:e6:a8:a4:d3:e4:25:d4:
22:0a:02:02:c1:bd:b2:d5:01:51:5b:f4:b1:e9:f4:
a3:79:41:33:8e:4a:5e:b8:5c:dd:79:e7:e6:4b:4d:
a2:e7:21:b9:6f:d0:ff:aa:39:c8:49:84:c4:45:f1:
de:ed:f3:50:a9:68:36:8f:04:f2:98:bf:8c:e2:05:
b4:f2:35:4a:59:ef:14:41:47:e5:e9:75:67:23:d2:
35:d3:3c:eb:ca:96:bc:d4:ea:72:51:69:7f:8c:ee:
98:49:05:0e:f9:eb:76:78:6e:f6:2b:55:a2:ca:69:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:8D:8D:30:AE:C3:42:8E:50:12:7E:38:72:26:8B:4C:5B:F2:1E
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3e:a7:21:90:2b:1f:97:a8:59:45:df:46:8c:03:0d:f2:51:
85:1c:bd:11:14:08:1b:65:ab:e5:88:ff:5d:0a:97:47:8c:fd:
8f:30:f7:af:3e:69:c1:a6:3b:3d:89:88:53:79:11:ad:d7:d1:
23:74:d4:74:b5:a2:0b:e9:a6:ba:95:7b:2a:19:50:7c:a8:d3:
ee:ee:b7:1f:4c:92:68:f7:ca:55:69:ac:2a:6a:64:4b:e4:8e:
9f:bc:44:9b:21:87:92:08:21:3c:0a:8b:eb:ac:44:63:89:09:
44:97:d3:2c:53:8f:15:61:ef:e3:d9:9b:cb:92:34:d9:2f:34:
32:8a:09:bc:9a:76:f2:6b:75:e0:20:3b:d0:a9:53:c2:05:d2:
be:78:b5:7a:3c:4f:f2:06:0a:26:4f:65:27:40:2d:81:21:b7:
dd:77:25:2c:0c:30:fe:a8:61:92:d5:d8:c8:8f:93:01:dd:72:
3a:81:3a:64:05:52:8e:bb:2c:7e:d5:24:9c:4d:42:22:bd:2e:
b6:b6:86:1b:d4:1e:53:06:b5:c8:60:f1:db:12:ce:c1:39:bd:
0e:1c:a0:12:6c:2d:d8:3c:c5:ac:96:f2:fc:ee:59:55:43:01:
31:71:1f:21:c3:93:8c:19:d0:10:98:45:ef:97:82:ca:51:07:
ee:99:e1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpVHHNFRtdqI0Ta6UPriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4
NjUwMjYwHhcNMjYwMzI5MDYwMTEwWhcNMjYwMzMwMDYwMTEwWjAzMTEwLwYDVQQD
Eyg2NjMyOGQ4ZDMwYWVjMzQyOGU1MDEyN2UzODcyMjY4YjRjNWJmMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GDRiwACZaY7++uVIUTd3nmq8Fzd
kY8XjSGQdq5P4KU/5zJo+gQqColtjvYEZniEnEsXO+HJnV51+0DoKPN8Ty7zYW5I
dwD8eLUDBGSi5U016LB6Ti4pyJmatff35kNMIJTdO2o3qHwv3Q8qXV5eQRRWFU77
fBok4QLZHGWSVQzFf2kj/Ai87+X/E94g1+aopNPkJdQiCgICwb2y1QFRW/Sx6fSj
eUEzjkpeuFzdeefmS02i5yG5b9D/qjnISYTERfHe7fNQqWg2jwTymL+M4gW08jVK
We8UQUfl6XVnI9I10zzrypa81OpyUWl/jO6YSQUO+et2eG72K1Wiymm6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYyjY0wrsNCjlASfjhyJotMW/IeMB8GA1UdIwQY
MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt
MGUxOTVlYzY1YjcyLzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy
LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyz6nIZAr
H5eoWUXfRowDDfJRhRy9ERQIG2Wr5Yj/XQqXR4z9jzD3rz5pwaY7PYmIU3kRrdfR
I3TUdLWiC+mmupV7KhlQfKjT7u63H0ySaPfKVWmsKmpkS+SOn7xEmyGHkgghPAqL
66xEY4kJRJfTLFOPFWHv49mby5I02S80MooJvJp28mt14CA70KlTwgXSvni1ejxP
8gYKJk9lJ0AtgSG33XclLAww/qhhktXYyI+TAd1yOoE6ZAVSjrssftUknE1CIr0u
traGG9QeUwa1yGDx2xLOwTm9DhygEmwt2DzFrJby/O5ZVUMBMXEfIcOTjBnQEJhF
75eCylEH7pnhVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client