
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier: xn/8kqw9yWkThBno8VnHB1qGWA5XiYzEBKJEUr+4BbY=
Subject key identifier: C2:20:3D:BD:21:AD:FE:0F:1A:05:8A:5E:F4:35:52:40:9A:69:E2:92
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 019CAA8F96E232304EEB58284A111DE62C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number: 151A
Signing time: Sun 01 Mar 2026 18:01:02 +0000
Manifest this update: Sun 01 Mar 2026 18:01:02 +0000
Manifest next update: Mon 02 Mar 2026 18:01:02 +0000
Files and hashes: 1: pqW6G2CWgcExhNCg9VPR8qwbWl8.roa (hash: f8chHfzOfZVRw+1nI6olnp8/l/rv00AOy0e/yhLaIdA=)
2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: sjKR0U9S2T9u6CTYb67QpdNqBvbp6XEZ2tGbI8yuqgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:96:e2:32:30:4e:eb:58:28:4a:11:1d:e6:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Mar 1 18:01:02 2026 GMT
Not After : Mar 2 18:01:02 2026 GMT
Subject: CN=c2203dbd21adfe0f1a058a5ef43552409a69e292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:66:55:7a:ab:10:9c:fa:22:43:a5:38:8f:
9d:48:c8:eb:c0:77:43:ff:87:63:02:ef:29:2e:f0:
e1:dd:3d:7e:76:8e:28:92:72:64:5b:45:39:46:7e:
7a:bc:02:7b:d1:87:52:df:6d:09:a4:db:2c:74:61:
eb:4a:26:47:30:c2:de:a6:fb:a5:b8:87:e8:77:3d:
54:22:e7:40:ad:26:3c:12:0b:cc:02:36:9f:0e:9a:
20:4c:20:64:48:08:ae:99:3b:f5:7d:d6:cf:8e:1c:
96:8c:ee:33:bf:97:83:e2:9d:3f:69:be:a4:c6:f8:
fa:f3:eb:a0:1a:3b:46:63:72:7a:13:cb:ee:14:ac:
9b:ba:ce:99:f6:d3:c5:ad:6f:f5:6d:f0:c9:e7:9f:
fd:06:63:ad:a7:6a:d6:ba:7e:c4:4e:41:ee:14:a7:
a9:85:72:64:5f:80:2c:d4:ec:41:b6:49:74:3c:14:
15:c6:b6:d6:f6:6b:07:43:19:46:34:4c:7b:c0:23:
76:be:21:4b:8d:44:c9:cb:0d:48:f4:81:b2:9d:88:
34:41:9f:b1:df:6b:c5:8e:dc:3e:bc:31:d5:5f:f2:
5b:10:a5:96:cd:6b:3e:bd:24:49:44:85:9f:5f:56:
b7:07:c4:8f:2d:5e:33:e2:08:05:aa:0f:ed:df:6a:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:3D:BD:21:AD:FE:0F:1A:05:8A:5E:F4:35:52:40:9A:69:E2:92
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:0f:da:ad:d9:78:9a:ac:43:aa:7b:a0:90:02:49:0b:0e:
3b:12:fd:fd:c5:33:60:f1:7e:ac:e6:45:88:9f:19:38:c7:7b:
48:94:df:c1:b4:fb:db:bc:dc:e1:a3:00:bc:c5:6d:98:b8:9c:
23:db:0a:67:19:b4:e8:1b:46:af:5b:52:ec:6f:7c:69:e6:70:
2c:c1:26:3b:59:f7:62:19:b3:bc:cd:db:cf:21:ca:f8:58:57:
dc:f5:0d:2a:7e:7b:eb:ea:e7:4b:c0:d4:40:38:9d:5f:7e:aa:
bf:d5:ce:0e:65:3b:1f:5c:04:65:a7:ed:cf:53:53:59:5f:a5:
c5:d1:97:ce:06:87:ed:97:d6:ec:82:45:a4:67:ed:58:1d:8e:
db:b2:24:46:22:73:1a:a6:c0:37:c7:57:ae:1f:15:e1:db:3d:
5d:db:86:fc:26:dc:32:96:c7:1f:dc:00:00:0a:be:57:a9:9a:
59:e5:fa:53:b2:08:13:32:7d:fb:3d:1d:55:ba:d5:d8:49:d9:
83:3a:32:d9:76:7f:ce:ce:20:9a:13:fe:b0:2a:4f:a8:98:6b:
d8:48:c6:45:bc:ac:ec:03:cb:2c:96:74:43:56:e8:35:3c:96:
0b:a9:b5:ef:ec:c1:64:94:9c:f4:7c:94:95:dd:2f:69:db:00:
4e:d8:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:11 2026 by rpki-client