Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier: rqsz6X09npSumlGokkzPblGkH+JDMrb8vzr97N1q/ok=
Subject key identifier: 53:BE:C1:55:CD:6B:B2:23:7D:8D:AB:BC:E3:16:72:3D:24:97:DF:94
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 019D378930AAB0255C2B130C84F4374DDC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number: 1563
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: pqW6G2CWgcExhNCg9VPR8qwbWl8.roa (hash: f8chHfzOfZVRw+1nI6olnp8/l/rv00AOy0e/yhLaIdA=)
2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: jegeqmXT3gMgYJWGWsqF+U07JLG6WaSBXSlSArMHL5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:30:aa:b0:25:5c:2b:13:0c:84:f4:37:4d:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=53bec155cd6bb2237d8dabbce316723d2497df94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:56:94:e3:0d:50:e6:55:a1:2a:f9:54:cf:
80:ba:8c:f4:55:d5:3b:17:98:53:f5:29:ac:87:9f:
0d:52:b9:0c:ae:d8:a0:67:4d:73:fd:79:11:d2:bb:
63:ee:1f:61:f5:09:22:7d:4f:a9:53:1b:52:c6:4f:
cf:e0:44:29:5c:68:79:e6:85:bf:df:dd:d6:51:d5:
eb:17:d3:e2:13:bb:8d:b2:2b:f4:f2:f9:7a:7c:cd:
04:36:17:ce:ad:1e:f9:75:cd:2d:ec:28:1b:70:d6:
2b:cb:bf:cc:e9:42:ec:d5:b3:99:db:ec:69:fe:1a:
f1:5b:a7:f9:3d:87:4d:85:b4:06:9e:ad:7e:e8:2d:
65:31:85:95:93:4d:db:dd:81:07:cd:cd:08:c0:e3:
2e:a2:17:16:12:b9:1b:7b:48:6b:e0:d6:73:57:c9:
49:85:cf:0b:e6:18:55:69:03:77:18:c0:6d:99:aa:
aa:4e:7c:a4:b1:bd:f6:bb:b9:c0:c1:79:43:f4:1e:
88:71:4c:4a:e6:23:0e:0c:b9:b4:96:93:77:06:01:
ec:70:15:4a:39:69:95:5a:ee:ad:de:51:3e:e9:c9:
50:79:84:8e:50:40:d3:5a:2c:07:f6:f5:44:67:43:
62:bb:f0:95:28:0c:78:02:45:93:a5:58:6e:75:d4:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BE:C1:55:CD:6B:B2:23:7D:8D:AB:BC:E3:16:72:3D:24:97:DF:94
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:67:6c:7a:b9:c1:da:72:b9:ab:ae:e2:2f:e3:84:fe:20:95:
79:b6:cd:50:ff:b4:e6:a9:86:c0:81:df:b4:a7:99:1c:68:f4:
61:17:a1:a9:f9:ea:2b:f5:88:e2:4b:26:fb:89:9a:f4:22:eb:
72:7b:8b:20:c1:8d:f0:e4:53:f8:6b:2b:fc:5c:25:0e:7e:5c:
e8:e7:41:03:a1:8f:9b:92:d1:e7:8c:ee:d0:5a:92:67:bf:e5:
02:67:46:68:b2:43:07:c5:33:6d:69:b8:76:44:a3:bb:b6:bd:
f9:f4:23:27:09:ea:f6:9a:05:e1:2a:fb:69:fc:09:2a:bc:fd:
a4:49:cb:9d:10:8b:e7:d5:d4:02:72:67:94:b7:4c:7b:ca:f6:
f0:2a:ab:b1:38:a1:ea:32:40:64:db:00:42:35:d6:d2:6d:a3:
1d:ed:02:89:26:9f:0a:57:0d:74:9a:2d:07:21:9c:ac:00:88:
b4:fd:9c:f0:61:62:e6:bd:61:dd:99:a7:73:cb:3f:01:7d:0b:
6e:a1:38:25:cb:a4:c2:e4:35:84:77:81:d9:de:a5:53:8c:94:
c4:48:55:d9:cd:9b:68:6a:00:d0:23:8a:95:a8:9e:3b:de:ae:
bb:e6:5f:95:07:fa:27:9b:18:86:49:73:66:80:c4:26:d5:d3:
51:8c:10:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iTCqsCVcKxMMhPQ3TdxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjQ1ODU3NmJhMjM5MjFkZDc5MmRjMDA1MmY4ZjgyODY3
ZDYyN2IwHhcNMjYwMzI5MDMwMDMwWhcNMjYwMzMwMDMwMDMwWjAzMTEwLwYDVQQD
Eyg1M2JlYzE1NWNkNmJiMjIzN2Q4ZGFiYmNlMzE2NzIzZDI0OTdkZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr11WlOMNUOZVoSr5VM+Auoz0VdU7
F5hT9Smsh58NUrkMrtigZ01z/XkR0rtj7h9h9QkifU+pUxtSxk/P4EQpXGh55oW/
393WUdXrF9PiE7uNsiv08vl6fM0ENhfOrR75dc0t7CgbcNYry7/M6ULs1bOZ2+xp
/hrxW6f5PYdNhbQGnq1+6C1lMYWVk03b3YEHzc0IwOMuohcWErkbe0hr4NZzV8lJ
hc8L5hhVaQN3GMBtmaqqTnyksb32u7nAwXlD9B6IcUxK5iMODLm0lpN3BgHscBVK
OWmVWu6t3lE+6clQeYSOUEDTWiwH9vVEZ0Niu/CVKAx4AkWTpVhuddTqLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO+wVXNa7IjfY2rvOMWcj0kl9+UMB8GA1UdIwQY
MBaAFLVkWFdrojkh3XktwAUvj4KGfWJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUt
MWEyM2UxNWYzYjg0LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNDkzY2MtMzI1NC00ZDk1LWJkZWUtMWEyM2UxNWYzYjg0
LzEvdFdSWVYydWlPU0hkZVMzQUJTLVBnb1o5WW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWdsernB
2nK5q67iL+OE/iCVebbNUP+05qmGwIHftKeZHGj0YRehqfnqK/WI4ksm+4ma9CLr
cnuLIMGN8ORT+Gsr/FwlDn5c6OdBA6GPm5LR54zu0FqSZ7/lAmdGaLJDB8UzbWm4
dkSju7a9+fQjJwnq9poF4Sr7afwJKrz9pEnLnRCL59XUAnJnlLdMe8r28CqrsTih
6jJAZNsAQjXW0m2jHe0CiSafClcNdJotByGcrACItP2c8GFi5r1h3Zmnc8s/AX0L
bqE4JcukwuQ1hHeB2d6lU4yUxEhV2c2baGoA0COKlaieO96uu+ZflQf6J5sYhklz
ZoDEJtXTUYwQjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:07 2026 by rpki-client