Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: 1YZ+xvwX8DT+lM2DyciVhPNgmhfp9Be0EAjxPKMCKR8=
Subject key identifier: BF:DD:17:BA:62:AC:75:62:33:64:15:95:A9:03:EB:06:C9:F1:C8:5B
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019D19EDE3EBBD7AA17C5E173F0952189A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: 010F
Signing time: Mon 23 Mar 2026 09:01:53 +0000
Manifest this update: Mon 23 Mar 2026 09:01:53 +0000
Manifest next update: Tue 24 Mar 2026 09:01:53 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: QI7+pO3XkcfPEk619v7JSZahACRs8D8Bv9kI3gKKJWE=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:ed:e3:eb:bd:7a:a1:7c:5e:17:3f:09:52:18:9a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Mar 23 09:01:53 2026 GMT
Not After : Mar 24 09:01:53 2026 GMT
Subject: CN=bfdd17ba62ac756233641595a903eb06c9f1c85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:9f:aa:20:78:05:4d:ea:8e:f9:b6:0c:ac:
76:ef:51:b6:53:49:c8:6e:f0:64:64:e8:ab:e7:25:
13:54:44:d8:c7:02:79:d1:cf:45:59:25:48:35:6d:
aa:0f:00:7c:31:6a:65:13:e0:ae:1d:25:e4:cf:3b:
4c:fd:78:c8:b5:0e:f3:fd:7f:35:e5:7e:c5:8e:8e:
e9:85:ba:9a:5e:d4:c6:3c:84:bc:03:3d:bb:83:38:
23:fb:81:09:57:c2:f9:1f:72:61:18:7c:34:6e:4b:
e4:69:0a:a5:70:b0:37:44:97:9d:4a:6e:33:ee:da:
b4:f2:f9:4c:26:45:45:d9:e0:ac:6b:68:c1:d1:2e:
98:a7:ee:03:0e:05:25:e3:c1:98:a0:61:35:aa:78:
fd:5d:eb:e0:ce:f7:b3:6e:6f:f3:c2:13:2c:69:73:
39:2d:e3:01:14:dd:d6:31:d0:b4:1b:f1:50:d1:23:
d0:d1:49:dc:fb:d2:9d:d7:9c:bc:de:52:03:4b:f9:
b1:b7:b4:be:e7:3b:90:b6:86:7c:0c:e0:27:a2:00:
a4:b0:4a:29:c3:bc:a9:37:92:9b:4b:04:8a:fb:c0:
0a:66:12:b3:74:ca:a3:9e:5c:71:b3:31:b0:b7:26:
bd:de:9a:06:36:44:1c:24:c3:fe:8f:26:a4:15:a2:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:17:BA:62:AC:75:62:33:64:15:95:A9:03:EB:06:C9:F1:C8:5B
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6e:76:46:70:bf:91:c1:20:96:00:e8:ea:89:5d:64:00:a1:
86:23:1f:e5:4e:2a:70:e7:22:8a:c2:04:00:f2:67:8d:30:29:
66:d5:8f:44:88:7d:d6:c4:75:d3:44:25:3d:83:81:61:33:5f:
b3:61:d6:ec:ec:aa:aa:c9:c7:df:ba:02:9c:55:27:b8:d5:c6:
e1:4e:1a:3c:be:f7:f1:ad:13:03:78:18:b3:c3:ba:e9:ab:e8:
34:be:6c:1b:b0:bc:f2:de:6e:24:54:32:d0:de:b0:42:e3:6a:
6a:d3:cf:76:0e:b5:ec:f2:fd:e6:c1:75:4e:80:52:a8:3f:dc:
bf:75:4d:17:85:8f:4d:17:b0:5c:7f:64:c4:ed:5b:bf:9d:56:
cb:41:ef:06:9a:a8:f6:f1:6b:a5:3b:6b:72:7a:1a:76:d8:90:
29:a4:d7:f0:6e:43:6d:ae:22:c8:dc:06:93:bb:0f:de:8a:42:
97:f1:5e:56:31:90:7c:47:9c:6d:89:90:24:81:f4:78:51:27:
a0:75:a6:1f:9e:c3:cc:e3:e9:49:dc:7c:24:d5:94:ec:e3:9e:
57:af:59:7c:3a:cc:66:5d:3e:85:33:03:4b:1f:b6:65:ce:75:
8e:5c:af:db:2e:2b:b8:46:a9:5a:f3:ec:56:6b:46:14:85:40:
92:2a:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 19:47:42 2026 by rpki-client