Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: BMSyE5TzOG3+cniM3asGqiu900KzCE4MvDICRkxbW5M=
Subject key identifier: F5:90:ED:7F:0A:0C:CB:79:B9:94:0D:05:63:32:4C:E5:79:81:8C:22
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 019E1EDA11FD0469C0A522F9B48C71178E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 11D6
Signing time: Wed 13 May 2026 01:01:08 +0000
Manifest this update: Wed 13 May 2026 01:01:08 +0000
Manifest next update: Thu 14 May 2026 01:01:08 +0000
Files and hashes: 1: Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa (hash: W91Un4+cAWOmCfRYL9NpIZw0WnRk1OPj82pCoQEGyIs=)
2: px387i4PMR3bxTg6V44Yz40bBQk.roa (hash: zLXh41bENdVi+kdvA9RLWLAUXLX8rorUJoL9hmG7R2k=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: J2yhEkr5knxcmgIp2BasGu8n4SkMDpGGDmKQJfZBMpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:11:fd:04:69:c0:a5:22:f9:b4:8c:71:17:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: May 13 01:01:08 2026 GMT
Not After : May 14 01:01:08 2026 GMT
Subject: CN=f590ed7f0a0ccb79b9940d0563324ce579818c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:d6:34:83:86:c6:34:7d:8b:9f:7a:c4:36:
52:5d:cc:9f:2c:ee:e1:09:3a:8f:99:7f:85:6d:e1:
43:de:ed:7c:87:ba:8a:96:49:68:b7:38:72:c6:18:
b3:b3:7c:c9:00:44:74:2c:55:79:26:c1:81:1b:f9:
8c:93:67:c2:5b:1b:2c:f0:09:fa:0e:bf:2a:6e:dd:
8c:ce:2b:98:60:8b:bf:48:58:38:9e:40:f2:f9:36:
29:04:72:6c:d9:3b:ef:68:f7:74:89:f7:db:c8:ad:
79:72:37:d0:33:17:c8:63:05:e1:59:00:f4:43:d3:
00:9b:23:67:1f:75:3e:ef:c2:17:49:49:81:87:51:
22:b1:79:67:2e:27:b9:56:f2:d0:67:2a:9c:1b:90:
ad:94:ab:b3:ea:1a:1a:93:e1:a8:4b:6a:2b:b0:54:
b3:32:6d:6d:e4:79:96:89:d9:9a:14:28:d3:ba:18:
de:1b:42:53:04:bf:b3:88:23:32:56:0c:f3:28:a5:
9d:5c:35:6a:18:f5:03:14:78:26:8d:b9:bb:33:df:
47:d4:8c:33:ee:36:4f:c8:64:6d:47:31:8c:f5:2d:
4c:3c:77:34:c6:11:ab:92:23:22:fc:a2:c4:93:ac:
19:3b:3c:93:2b:6a:6d:93:da:85:2a:69:23:97:4d:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:ED:7F:0A:0C:CB:79:B9:94:0D:05:63:32:4C:E5:79:81:8C:22
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:96:7f:39:00:35:ac:b1:c4:13:47:29:49:12:63:69:3f:d0:
26:70:cd:a3:71:24:0b:50:f4:25:de:e2:ae:dd:6c:55:65:f0:
27:4d:de:90:8a:2a:37:2d:33:07:78:25:e6:05:0b:b8:db:cb:
d7:ba:8a:3c:7b:a4:e8:aa:4a:20:73:8b:de:f2:84:a0:ac:2a:
36:ed:33:9f:58:ac:86:ba:8b:32:2d:87:ee:b8:23:dc:bc:8b:
8c:c5:41:ba:77:d3:19:46:3c:be:a7:12:38:30:10:8f:52:28:
f0:b6:85:c8:66:a8:77:a0:e3:6d:05:d8:08:b9:f7:c2:58:ba:
80:c9:f2:64:6b:14:6c:0e:99:19:6c:e5:2d:98:5a:40:b1:b2:
da:d5:4f:2d:0e:22:16:72:2d:38:a1:ec:62:fe:82:a0:79:7b:
66:b4:fb:8d:9c:35:e1:ec:88:dd:13:3d:61:84:4b:1e:34:4d:
40:48:1e:1b:83:ef:6e:ac:a8:60:8b:31:d8:05:fa:08:cc:0e:
2b:be:d7:cb:a0:ca:74:61:d1:ea:f4:9c:89:4c:c1:ca:5c:d3:
fd:73:31:d4:b5:44:f9:2d:42:36:62:78:1e:6b:8d:d2:44:b9:
6b:f6:15:51:ed:6c:96:48:98:b7:9b:f7:c9:1e:cf:28:43:14:
11:9d:97:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2hH9BGnApSL5tIxxF44xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTg2NzdhYmYzYWFlZTAzNmNkNGFkZDc3ZDY2MTk2ZmNk
ZTRjNmQwHhcNMjYwNTEzMDEwMTA4WhcNMjYwNTE0MDEwMTA4WjAzMTEwLwYDVQQD
EyhmNTkwZWQ3ZjBhMGNjYjc5Yjk5NDBkMDU2MzMyNGNlNTc5ODE4YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXDWNIOGxjR9i596xDZSXcyfLO7h
CTqPmX+FbeFD3u18h7qKlklotzhyxhizs3zJAER0LFV5JsGBG/mMk2fCWxss8An6
Dr8qbt2MziuYYIu/SFg4nkDy+TYpBHJs2TvvaPd0iffbyK15cjfQMxfIYwXhWQD0
Q9MAmyNnH3U+78IXSUmBh1EisXlnLie5VvLQZyqcG5CtlKuz6hoak+GoS2orsFSz
Mm1t5HmWidmaFCjTuhjeG0JTBL+ziCMyVgzzKKWdXDVqGPUDFHgmjbm7M99H1Iwz
7jZPyGRtRzGM9S1MPHc0xhGrkiMi/KLEk6wZOzyTK2ptk9qFKmkjl03GwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWQ7X8KDMt5uZQNBWMyTOV5gYwiMB8GA1UdIwQY
MBaAFLQYZ3q/Oq7gNs1K3XfWYZb83kxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt
MmJlYTM0Yjg5MzhiLzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi
LzEvdEJobmVyODZydUEyelVyZGQ5WmhsdnplVEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZZ/OQA1
rLHEE0cpSRJjaT/QJnDNo3EkC1D0Jd7irt1sVWXwJ03ekIoqNy0zB3gl5gULuNvL
17qKPHuk6KpKIHOL3vKEoKwqNu0zn1ishrqLMi2H7rgj3LyLjMVBunfTGUY8vqcS
ODAQj1Io8LaFyGaod6DjbQXYCLn3wli6gMnyZGsUbA6ZGWzlLZhaQLGy2tVPLQ4i
FnItOKHsYv6CoHl7ZrT7jZw14eyI3RM9YYRLHjRNQEgeG4PvbqyoYIsx2AX6CMwO
K77Xy6DKdGHR6vSciUzBylzT/XMx1LVE+S1CNmJ4HmuN0kS5a/YVUe1slkiYt5v3
yR7PKEMUEZ2XvA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:02:59 2026 by rpki-client