Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft (raw, json)
Hash identifier: f15AH+NbM9dYbvBAJ0y3QHq6/FmQUrb/cu4OEQwhyVw=
Subject key identifier: AC:7D:E5:73:0E:87:23:B0:6B:04:B8:AD:00:BE:DD:0E:FA:75:5C:33
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Certificate issuer: /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial: 019DA4F94E589068269028ACC802A072739A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
Manifest number: 0157
Signing time: Sun 19 Apr 2026 09:01:35 +0000
Manifest this update: Sun 19 Apr 2026 09:01:35 +0000
Manifest next update: Mon 20 Apr 2026 09:01:35 +0000
Files and hashes: 1: tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl (hash: PuMHWi2mHEg5rYQ6BnjepEnuA/QJnlyCQtzfz2bOunQ=)
2: wc35MgYGPiVoITK8dBRVt7Icluk.asa (hash: A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:4e:58:90:68:26:90:28:ac:c8:02:a0:72:73:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
Validity
Not Before: Apr 19 09:01:35 2026 GMT
Not After : Apr 20 09:01:35 2026 GMT
Subject: CN=ac7de5730e8723b06b04b8ad00bedd0efa755c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:59:5a:03:73:0e:2a:79:3a:b0:7e:58:bd:
ee:13:a0:99:99:c7:39:f1:23:d4:3c:3e:4c:6f:aa:
30:e6:dc:c5:2d:74:6e:27:4d:84:27:40:02:f3:05:
e6:dc:7b:eb:ef:08:28:c2:82:88:f5:df:af:fa:54:
b1:45:f3:3b:ed:42:fb:92:4d:c7:37:03:af:b0:f3:
4a:23:bd:c4:07:47:ae:aa:0a:c5:0b:be:ef:9b:96:
64:5a:c3:20:ee:80:b0:16:63:7a:fb:ec:76:55:e2:
4a:90:bc:31:2a:ae:b4:b5:e7:ea:6a:22:d2:cd:61:
db:4a:62:fc:c9:d6:82:e0:5c:94:71:07:69:25:3b:
88:d1:22:df:d2:cb:58:44:c3:67:ac:d9:32:09:be:
43:7a:9c:a6:9f:c9:2d:f7:2e:13:90:3c:10:f6:f7:
82:e8:02:bd:c1:9c:93:47:45:ee:42:1a:4c:e4:28:
c6:9e:b3:ac:14:11:5e:ab:da:97:35:3a:ed:b4:eb:
55:49:ac:b0:cf:e7:7d:2e:a2:fe:66:cc:95:71:01:
5f:42:7b:4e:02:ab:ec:f5:b5:d2:8d:1e:5e:71:01:
30:65:2d:34:3f:3e:b7:76:3c:4c:9b:67:b8:e4:76:
10:09:df:71:f5:b8:38:2a:03:55:34:c6:0b:1f:1a:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7D:E5:73:0E:87:23:B0:6B:04:B8:AD:00:BE:DD:0E:FA:75:5C:33
X509v3 Authority Key Identifier:
keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:45:c8:c8:68:08:9a:47:e4:c4:fc:3c:bf:ab:93:38:fb:f0:
f0:dc:8e:7f:b0:f6:4c:ca:55:f0:04:93:b4:d6:55:37:20:e6:
f8:05:cb:32:b2:02:77:e5:e0:bc:6a:3e:06:d0:36:27:5b:5a:
58:99:a9:29:0c:04:e7:4d:24:5a:a8:55:0a:9a:ea:16:ab:d0:
e8:73:4f:73:c8:88:07:0c:da:95:67:b5:95:f4:46:b1:9a:bc:
16:7e:0c:1b:2e:72:01:33:20:10:43:51:d4:97:0f:76:61:ff:
9c:32:ef:70:44:1a:95:cd:32:62:5e:5b:3b:4e:82:56:b9:a8:
be:93:3d:9b:fd:16:63:8f:bb:81:be:66:68:a9:9c:06:ac:53:
50:f8:58:9d:40:09:8f:2c:24:07:f0:43:7c:99:40:16:be:f6:
5d:6c:66:ef:67:5c:1f:f8:6b:43:8c:b3:42:40:a4:e1:cd:ab:
6b:2f:cc:78:2e:79:6e:2b:a8:be:2a:ed:2a:0a:b0:30:1f:9c:
bd:1c:cc:a5:70:e4:5a:ca:8d:c3:56:13:78:62:a3:47:16:2e:
d2:c0:28:46:c0:72:a4:6f:cf:24:9f:64:a0:1d:9b:83:cb:83:
c5:27:8e:eb:71:b5:c5:ff:83:4f:8b:65:58:a1:e1:4b:72:4f:
29:9a:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:20 2026 by rpki-client