Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: 7iOz6XHXMpkh/i3JPoEZXYaGYCRPkU2TkKQ11NFWVDw=
Subject key identifier: 60:2D:68:72:81:18:E2:4D:FB:DA:2F:BC:BA:23:63:0D:06:21:21:CF
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019CABD94A775A300A18A0A35B9006259998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: D6
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: 780e1gOaBopjY0FLpJdDKLAfBuLwWfIiMlcbxw9aJyA=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4a:77:5a:30:0a:18:a0:a3:5b:90:06:25:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=602d68728118e24dfbda2fbcba23630d062121cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:cb:ee:4b:e0:45:ed:b2:93:fb:fa:25:6d:
36:b7:58:e1:81:61:02:31:c3:a8:2a:e7:a0:76:c3:
45:6d:52:1d:ca:04:50:78:38:91:c3:06:47:6c:bc:
f8:d6:03:4a:e2:3e:10:d6:60:7c:47:ad:4d:59:3b:
d8:9e:5b:ab:50:27:03:d4:54:07:06:4a:8b:d1:20:
f1:3c:92:cc:74:f5:1c:9e:ec:1e:a5:e4:0a:d9:34:
44:6a:05:6f:5c:a7:81:0a:96:97:5d:61:8a:d8:d6:
d3:47:28:41:e3:c0:1c:b3:9e:9a:96:47:c9:a2:e2:
d2:51:84:99:ca:b2:5c:8b:1a:e4:70:ab:13:d2:02:
c9:13:90:8b:f6:d8:a1:04:25:35:34:a4:ad:7e:c1:
14:23:33:d0:bb:6a:19:25:31:db:3f:4c:d9:0e:3a:
49:1e:3e:a3:85:63:09:63:34:e4:40:41:6c:d7:99:
6b:85:c1:11:6c:cc:92:37:69:35:74:90:c5:d7:9f:
fb:ba:1f:25:45:b6:bd:64:f8:96:3b:98:f8:62:76:
af:f1:a4:c8:8c:db:db:23:11:c3:77:3e:e9:4d:71:
22:2c:ec:46:21:b2:4b:c5:7e:4d:ea:0d:d7:6d:a4:
80:87:53:9b:6b:8d:a9:ed:86:f5:9a:d1:2e:24:49:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2D:68:72:81:18:E2:4D:FB:DA:2F:BC:BA:23:63:0D:06:21:21:CF
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:bb:38:56:80:96:57:ef:95:53:a4:a2:ce:97:94:8d:f6:
2b:08:f5:ee:e6:a8:8c:5d:2c:fb:42:2d:68:09:31:85:e2:ff:
57:0c:a1:9e:bf:6d:2b:99:4b:97:de:12:99:4b:0f:23:d7:5c:
25:64:bb:d8:06:d8:74:0a:df:4e:80:90:17:c5:38:32:b2:bb:
8c:4d:40:ab:0c:ae:b8:f8:cd:1a:96:ad:01:d7:60:65:da:d5:
86:f3:8f:6d:c0:5a:fe:0c:1b:05:83:1a:51:1f:52:e5:c1:07:
14:96:8e:45:f7:a2:81:bb:5d:d5:b5:05:de:b0:35:5d:b5:9d:
b8:2b:a8:dd:16:72:78:91:64:5f:06:ea:c9:1a:69:37:51:89:
64:34:ae:c7:ce:eb:1c:e1:dc:6a:6b:f8:6f:ee:67:b9:6b:38:
dd:fd:db:01:b9:94:e7:50:88:a3:db:92:0d:a0:ca:e3:13:7e:
26:f8:7a:89:46:39:a8:10:c6:c6:66:05:5f:79:98:4b:15:99:
bb:8c:5d:66:85:b2:1e:43:6e:95:c0:96:77:e1:33:d1:5f:44:
59:42:8c:c0:57:bb:5e:f0:0b:90:b1:a6:3c:ab:12:b0:9a:da:
38:b1:69:71:15:92:bf:b6:4d:e1:bb:58:ff:8d:ca:ff:65:ec:
d7:1a:8f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Up3WjAKGKCjW5AGJZmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmI1YjU0ZGVjZjQzZTk2NGY0YmU2ZDMwNGU0ODBhMzg2
Y2I3OTQwHhcNMjYwMzAyMDAwMTEwWhcNMjYwMzAzMDAwMTEwWjAzMTEwLwYDVQQD
Eyg2MDJkNjg3MjgxMThlMjRkZmJkYTJmYmNiYTIzNjMwZDA2MjEyMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t/L7kvgRe2yk/v6JW02t1jhgWEC
McOoKuegdsNFbVIdygRQeDiRwwZHbLz41gNK4j4Q1mB8R61NWTvYnlurUCcD1FQH
BkqL0SDxPJLMdPUcnuwepeQK2TREagVvXKeBCpaXXWGK2NbTRyhB48Acs56alkfJ
ouLSUYSZyrJcixrkcKsT0gLJE5CL9tihBCU1NKStfsEUIzPQu2oZJTHbP0zZDjpJ
Hj6jhWMJYzTkQEFs15lrhcERbMySN2k1dJDF15/7uh8lRba9ZPiWO5j4Ynav8aTI
jNvbIxHDdz7pTXEiLOxGIbJLxX5N6g3XbaSAh1Oba42p7Yb1mtEuJEmg1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAtaHKBGOJN+9ovvLojYw0GISHPMB8GA1UdIwQY
MBaAFLVrW1Tez0PpZPS+bTBOSAo4bLeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTkt
MzdhZDBlZWJlMTliLzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTktMzdhZDBlZWJlMTli
LzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2G7OFaA
llfvlVOkos6XlI32Kwj17uaojF0s+0ItaAkxheL/Vwyhnr9tK5lLl94SmUsPI9dc
JWS72AbYdArfToCQF8U4MrK7jE1AqwyuuPjNGpatAddgZdrVhvOPbcBa/gwbBYMa
UR9S5cEHFJaORfeigbtd1bUF3rA1XbWduCuo3RZyeJFkXwbqyRppN1GJZDSux87r
HOHcamv4b+5nuWs43f3bAbmU51CIo9uSDaDK4xN+Jvh6iUY5qBDGxmYFX3mYSxWZ
u4xdZoWyHkNulcCWd+Ez0V9EWUKMwFe7XvALkLGmPKsSsJraOLFpcRWSv7ZN4btY
/43K/2Xs1xqPTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:51 2026 by rpki-client