Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: PWRN8mmDFXzlbQIOWRTrxy6v6UK1FY30Rr+pTjNIUuU=
Subject key identifier: 8B:C0:DD:4E:AE:EA:20:FC:4F:8C:E6:BB:8D:71:E5:10:1B:FC:8F:58
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 019D378971CBBBC2E1817A383394E5090F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: Wsq4ZI2YRXG6UsDRwvRi7T9VZwlvLsHVnErdirdM2nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:71:cb:bb:c2:e1:81:7a:38:33:94:e5:09:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=8bc0dd4eaeea20fc4f8ce6bb8d71e5101bfc8f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:72:aa:ee:1f:de:2d:51:b4:5a:f6:60:03:
ce:06:70:ee:1e:90:68:6d:bc:4e:f9:9b:7a:bb:0c:
c1:30:a6:81:4a:05:fd:9c:9f:75:a0:ce:e1:bc:54:
e0:cc:05:6f:e3:86:fa:78:c5:59:da:18:09:12:61:
8e:c2:b1:f3:c4:52:1d:22:a4:82:65:98:8c:7e:37:
d1:fd:f8:11:a6:1d:7b:37:82:54:b6:70:0b:29:59:
56:f4:01:e3:cb:db:51:d9:a5:0d:f8:f6:86:6c:2b:
93:aa:cf:c7:29:26:70:de:76:df:f9:35:64:e5:87:
b3:55:5c:a4:d2:87:cf:b9:36:2f:0d:ea:26:b5:da:
b2:9e:61:1e:05:a8:0c:19:b8:19:a1:19:6a:e7:51:
85:25:55:c3:0d:04:9a:f5:36:aa:6f:11:e5:c0:46:
e0:26:ef:5b:67:e1:bc:40:c8:1f:51:02:9e:fa:56:
dc:16:99:9b:53:fe:b7:1d:e2:69:7b:35:38:4b:2b:
2b:99:5a:27:dd:c8:5d:bb:12:64:7e:03:11:66:d2:
9e:bc:fb:0b:83:20:63:b1:51:43:48:67:1f:b3:80:
e4:c3:be:de:30:04:dd:29:30:74:26:4c:f2:2c:51:
4f:f7:eb:c3:2c:56:a7:57:ad:52:22:2f:58:16:0b:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:DD:4E:AE:EA:20:FC:4F:8C:E6:BB:8D:71:E5:10:1B:FC:8F:58
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:14:f8:6f:5e:96:3e:8d:4a:57:b3:21:6f:ad:6d:e7:2c:
78:78:be:1f:2c:6f:63:00:47:c6:4a:8f:5e:a3:79:23:98:6b:
bc:e0:1d:17:26:cf:eb:20:28:df:61:ec:8e:81:c6:c7:a3:37:
38:21:68:6c:41:48:9f:b6:28:18:47:ff:ef:bd:b7:bc:a5:57:
cc:c3:53:cf:cb:32:98:11:a0:ee:e0:65:8e:63:b5:37:6b:38:
c5:d2:4a:07:67:f7:c5:ec:ee:88:d1:8d:92:58:0e:40:c0:66:
1e:10:bf:df:cb:7e:fb:0b:c1:f5:72:a2:7f:eb:7f:70:c7:4f:
8c:5a:68:b7:46:16:68:4f:d1:4c:0c:a6:6d:76:74:7b:35:9c:
1f:76:42:64:4c:3c:90:91:5e:4f:3e:67:30:61:b9:fb:31:d8:
a8:83:74:d3:df:d7:80:a0:70:d7:34:0d:99:cc:82:61:06:f9:
92:63:58:76:03:c6:71:cc:3c:97:9b:b2:b2:61:7f:db:40:af:
b6:3b:89:3a:86:e0:e0:35:66:9d:f6:e3:a1:b9:dd:8f:c7:c0:
3f:d7:ad:fb:8b:9c:b3:32:d1:43:e0:38:00:ba:89:e6:40:56:
c2:07:93:2b:60:56:26:be:19:01:ee:04:e6:60:87:b7:a7:a0:
28:19:32:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXHLu8LhgXo4M5TlCQ8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzViZjI0NTA1NzM3NDFmOTQzNWU5NDgyMTAxNmEyMmU2
YmMxNDcwHhcNMjYwMzI5MDMwMDQ3WhcNMjYwMzMwMDMwMDQ3WjAzMTEwLwYDVQQD
Eyg4YmMwZGQ0ZWFlZWEyMGZjNGY4Y2U2YmI4ZDcxZTUxMDFiZmM4ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsVyqu4f3i1RtFr2YAPOBnDuHpBo
bbxO+Zt6uwzBMKaBSgX9nJ91oM7hvFTgzAVv44b6eMVZ2hgJEmGOwrHzxFIdIqSC
ZZiMfjfR/fgRph17N4JUtnALKVlW9AHjy9tR2aUN+PaGbCuTqs/HKSZw3nbf+TVk
5YezVVyk0ofPuTYvDeomtdqynmEeBagMGbgZoRlq51GFJVXDDQSa9TaqbxHlwEbg
Ju9bZ+G8QMgfUQKe+lbcFpmbU/63HeJpezU4SysrmVon3chduxJkfgMRZtKevPsL
gyBjsVFDSGcfs4Dkw77eMATdKTB0JkzyLFFP9+vDLFanV61SIi9YFgtPcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvA3U6u6iD8T4zmu41x5RAb/I9YMB8GA1UdIwQY
MBaAFKU1vyRQVzdB+UNelIIQFqIua8FHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEt
YjAzMjExMjA1MWIxLzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yZjhkNzEtZWVjNS00ZDNkLWE3YTEtYjAzMjExMjA1MWIx
LzEvcFRXX0pGQlhOMEg1UTE2VWdoQVdvaTVyd1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRsU+G9e
lj6NSlezIW+tbecseHi+HyxvYwBHxkqPXqN5I5hrvOAdFybP6yAo32HsjoHGx6M3
OCFobEFIn7YoGEf/7723vKVXzMNTz8symBGg7uBljmO1N2s4xdJKB2f3xezuiNGN
klgOQMBmHhC/38t++wvB9XKif+t/cMdPjFpot0YWaE/RTAymbXZ0ezWcH3ZCZEw8
kJFeTz5nMGG5+zHYqIN009/XgKBw1zQNmcyCYQb5kmNYdgPGccw8l5uysmF/20Cv
tjuJOobg4DVmnfbjobndj8fAP9et+4ucszLRQ+A4ALqJ5kBWwgeTK2BWJr4ZAe4E
5mCHt6egKBkyuA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:10 2026 by rpki-client