Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: lFtpySifUtBIhb1OjX4m+EFhqfQo+if8k6uLekymgak=
Subject key identifier: 84:83:9F:AE:AC:11:41:E7:21:9F:42:AB:0D:68:E1:E7:2E:9D:E7:BD
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019CA9EB79C7D73CF27A14CC487F8391604C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: D5
Signing time: Sun 01 Mar 2026 15:01:47 +0000
Manifest this update: Sun 01 Mar 2026 15:01:47 +0000
Manifest next update: Mon 02 Mar 2026 15:01:47 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: MxZYA0LLMA/XIr8YYouOJGplpTIJOJKoGUE7miND/ik=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:79:c7:d7:3c:f2:7a:14:cc:48:7f:83:91:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Mar 1 15:01:47 2026 GMT
Not After : Mar 2 15:01:47 2026 GMT
Subject: CN=84839faeac1141e7219f42ab0d68e1e72e9de7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:6a:2b:bd:40:36:e6:aa:52:03:17:fc:92:
19:ef:7f:28:66:30:de:64:f2:d0:fc:82:5e:d6:01:
ed:4f:d9:2d:15:7a:87:be:ce:ed:4e:f1:bb:ca:b3:
e2:fa:04:c3:48:92:fb:bf:31:27:bc:63:86:a3:8a:
fb:04:6c:33:c0:97:b3:17:3c:27:47:ae:b5:a2:46:
69:2f:60:3c:ba:05:11:9d:68:5f:69:8f:98:6b:13:
55:76:da:6e:61:93:66:4c:49:da:a7:1b:4f:42:7a:
08:84:00:40:7e:60:71:42:e5:c7:70:c5:e0:ff:8a:
13:80:57:7d:32:b6:0b:bc:a6:a0:52:09:5d:5c:1b:
2a:3f:36:e8:83:af:a3:07:4f:4a:eb:7a:40:fe:98:
de:ac:e3:b1:a7:34:c6:ae:ee:c9:b2:e9:bf:ba:6b:
91:7f:b3:fe:5f:19:ad:73:95:66:f9:0e:95:6b:79:
f0:e2:9c:a5:e8:ae:a2:af:5d:3e:fa:10:a7:f0:25:
bc:ad:eb:62:ef:02:9c:ad:2a:0f:06:77:1f:0b:d3:
58:93:5d:13:8c:25:a6:3f:34:ff:7f:e7:5b:3c:71:
39:a5:3a:08:ec:c7:1f:0c:54:1d:25:56:79:b6:8c:
6f:01:61:69:f5:47:db:3c:c7:53:f8:5f:68:13:0b:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:83:9F:AE:AC:11:41:E7:21:9F:42:AB:0D:68:E1:E7:2E:9D:E7:BD
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cd:71:c5:c2:4e:43:67:f6:18:00:1d:ce:e0:19:2c:80:59:
65:ba:a7:61:3f:6d:d5:10:35:13:e9:e5:49:3d:d1:53:7f:05:
c0:da:14:af:1d:d6:97:86:b8:4a:a9:65:c6:e1:32:f2:51:bc:
15:90:b2:b3:6b:ca:b7:e8:8d:88:1f:8d:dd:2c:68:53:65:5f:
2b:ca:8d:18:57:dd:b6:3e:ea:ca:30:ae:18:02:26:8c:51:34:
c8:8b:09:a1:6a:d2:8c:a7:d0:ec:8b:13:c0:ec:6d:be:e0:4f:
bf:a8:24:16:90:8c:61:c8:33:7e:79:d1:a4:2c:15:82:2a:ad:
01:1c:e7:38:99:b5:fc:03:da:c6:06:6c:bf:9a:87:39:74:d4:
29:2e:e8:12:59:dd:db:99:37:f6:c4:b6:5b:4b:60:75:72:60:
cb:05:12:b6:c2:1c:e7:9f:cc:48:74:a5:2b:0f:98:56:1b:b7:
7d:2b:da:1f:6d:78:70:03:01:a8:d0:24:b1:5b:3a:6c:57:c9:
04:49:91:1c:93:d1:79:b5:01:73:84:d0:57:0c:6f:a4:41:b6:
cb:75:b8:ed:2d:c4:e4:4e:7c:e2:38:81:99:f7:3f:cb:67:a5:
08:ba:ea:ad:80:ec:9d:d3:1b:76:b8:61:85:b4:28:f2:a3:ad:
25:12:bd:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp63nH1zzyehTMSH+DkWBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmI1YjU0ZGVjZjQzZTk2NGY0YmU2ZDMwNGU0ODBhMzg2
Y2I3OTQwHhcNMjYwMzAxMTUwMTQ3WhcNMjYwMzAyMTUwMTQ3WjAzMTEwLwYDVQQD
Eyg4NDgzOWZhZWFjMTE0MWU3MjE5ZjQyYWIwZDY4ZTFlNzJlOWRlN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKxqK71ANuaqUgMX/JIZ738oZjDe
ZPLQ/IJe1gHtT9ktFXqHvs7tTvG7yrPi+gTDSJL7vzEnvGOGo4r7BGwzwJezFzwn
R661okZpL2A8ugURnWhfaY+YaxNVdtpuYZNmTEnapxtPQnoIhABAfmBxQuXHcMXg
/4oTgFd9MrYLvKagUgldXBsqPzbog6+jB09K63pA/pjerOOxpzTGru7Jsum/umuR
f7P+Xxmtc5Vm+Q6Va3nw4pyl6K6ir10++hCn8CW8reti7wKcrSoPBncfC9NYk10T
jCWmPzT/f+dbPHE5pToI7McfDFQdJVZ5toxvAWFp9UfbPMdT+F9oEwuWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISDn66sEUHnIZ9Cqw1o4ecunee9MB8GA1UdIwQY
MBaAFLVrW1Tez0PpZPS+bTBOSAo4bLeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTkt
MzdhZDBlZWJlMTliLzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84NzRlOGEtM2ExNi00ZjViLThmMTktMzdhZDBlZWJlMTli
LzEvdFd0YlZON1BRLWxrOUw1dE1FNUlDamhzdDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG81xxcJO
Q2f2GAAdzuAZLIBZZbqnYT9t1RA1E+nlST3RU38FwNoUrx3Wl4a4SqllxuEy8lG8
FZCys2vKt+iNiB+N3SxoU2VfK8qNGFfdtj7qyjCuGAImjFE0yIsJoWrSjKfQ7IsT
wOxtvuBPv6gkFpCMYcgzfnnRpCwVgiqtARznOJm1/APaxgZsv5qHOXTUKS7oElnd
25k39sS2W0tgdXJgywUStsIc55/MSHSlKw+YVhu3fSvaH214cAMBqNAksVs6bFfJ
BEmRHJPRebUBc4TQVwxvpEG2y3W47S3E5E584jiBmfc/y2elCLrqrYDsndMbdrhh
hbQo8qOtJRK9Og==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:46 2026 by rpki-client