Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: SgMJH6adBfQNOsDyZsOJdhbf9oH07goLAjZVDLhSQiw=
Subject key identifier: AB:CE:EB:8C:9F:2F:AB:C8:0C:E5:BB:61:5F:DF:27:25:D1:80:18:B2
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019D29619D07EE718AC7A8D8B88E7EE63E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:36 +0000
Manifest this update: Thu 26 Mar 2026 09:02:36 +0000
Manifest next update: Fri 27 Mar 2026 09:02:36 +0000
Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: jABw//SEWgo6+qfFMYGCHyNvM2UHpFBkpoV63hUhOg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9d:07:ee:71:8a:c7:a8:d8:b8:8e:7e:e6:3e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Mar 26 09:02:36 2026 GMT
Not After : Mar 27 09:02:36 2026 GMT
Subject: CN=abceeb8c9f2fabc80ce5bb615fdf2725d18018b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:b7:e4:a2:cd:1b:63:41:42:ab:35:16:40:
56:7f:ea:e6:30:c2:c7:84:c9:53:e2:9d:e4:41:73:
c7:6d:1b:d1:37:84:e4:4c:1b:6d:c7:f7:f6:45:bc:
5e:1c:30:85:d4:43:c0:9e:45:15:67:13:fe:fd:0c:
87:6f:70:2f:b7:b4:da:61:39:89:88:0b:66:b2:f5:
8f:83:16:b4:6f:4c:0d:c7:95:32:93:95:a0:44:d0:
4c:d1:98:25:70:f7:9b:5b:8e:93:72:31:c0:15:79:
fc:51:b8:64:33:a9:f9:7e:9e:4a:49:a3:8e:04:50:
3c:cd:47:45:48:f5:1b:0b:cf:b7:02:e1:38:32:5c:
2e:74:56:30:89:d8:34:fa:64:9a:f4:f3:48:e6:bb:
ec:06:33:73:48:84:e0:58:ad:c0:3d:10:b7:9c:6c:
6f:7c:ca:5d:56:0a:c8:e1:0d:65:5b:75:56:91:e9:
e3:26:33:e0:d0:cf:c8:a6:bb:18:e1:45:fa:aa:e8:
c6:a8:79:1c:e0:92:f6:d7:f9:da:4f:e7:c4:53:ab:
60:62:3b:a8:d2:ea:0c:b3:7f:d3:61:2f:47:b4:b2:
b5:2e:61:98:41:e3:96:0e:65:a4:6c:4f:6f:2c:b9:
52:91:99:59:13:f1:52:83:a8:95:af:81:d5:a1:c2:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:EB:8C:9F:2F:AB:C8:0C:E5:BB:61:5F:DF:27:25:D1:80:18:B2
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:ec:45:d8:dd:81:9e:41:5e:ed:c2:d7:0a:d3:e4:90:1e:
f5:28:49:2f:26:2d:d5:97:0e:4d:48:d8:f0:f4:88:0e:fa:76:
5b:de:3c:6b:02:fc:31:8b:9b:15:29:69:31:99:4c:dc:21:9f:
28:7a:b2:55:a1:43:d0:b3:f1:90:0e:45:c1:44:29:22:43:ad:
ac:90:a4:31:d9:b4:68:f3:91:e4:55:00:4a:2f:2b:12:47:11:
12:7b:8e:a8:71:71:ea:79:20:0d:a6:87:69:11:a3:26:03:44:
85:73:e9:a5:15:af:92:93:af:fe:5e:2c:c5:55:e2:df:97:af:
ee:45:b9:af:a0:79:de:87:24:53:70:c7:e1:7c:f4:5d:e1:f2:
1e:c1:15:b4:1a:48:b4:6c:b2:dc:f7:bc:e1:91:86:d5:8b:17:
dc:fd:da:dc:63:7a:b7:cb:fe:c7:68:93:ac:32:46:5f:a8:17:
40:f1:de:b4:f6:7f:56:9d:1f:bd:ac:83:ee:b6:42:6b:dc:43:
8a:3f:a1:62:40:43:33:d9:e5:4e:d8:12:dd:7d:26:75:21:c4:
cd:00:cf:41:15:38:35:b4:80:d5:f4:f9:fc:c1:23:83:49:41:
1c:ce:0e:03:cd:41:0d:6b:0d:da:54:c8:a4:a4:ac:d0:33:af:
a3:22:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:49 2026 by rpki-client