Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: kmhwrsoHpamINTPFEstRVQfwm/jX3+lMO/rzkl1duvU=
Subject key identifier: 92:72:FF:15:EA:92:CC:FC:86:68:5F:F5:11:95:3F:7D:BB:FA:95:5F
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 019E1E6CBF6EBC06C301BCAF23D3ED1BC3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 89
Signing time: Tue 12 May 2026 23:01:43 +0000
Manifest this update: Tue 12 May 2026 23:01:43 +0000
Manifest next update: Wed 13 May 2026 23:01:43 +0000
Files and hashes: 1: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (hash: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=)
2: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: KfXXX973q0HRJ5JlR0uqWpdERBf0PXerhzEPdTQ+GLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:bf:6e:bc:06:c3:01:bc:af:23:d3:ed:1b:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: May 12 23:01:43 2026 GMT
Not After : May 13 23:01:43 2026 GMT
Subject: CN=9272ff15ea92ccfc86685ff511953f7dbbfa955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:6a:a2:55:51:c5:bf:8f:cc:2a:f6:49:51:
51:95:5e:db:68:07:71:43:ff:7c:0c:c1:f7:82:b4:
55:20:9e:e1:eb:cf:7d:8f:13:29:ed:d2:41:aa:45:
db:53:7c:ca:b2:86:38:bd:73:7c:6f:7c:25:8a:80:
fa:98:77:89:e1:4f:7a:68:62:eb:c8:ce:12:a8:76:
1a:a8:be:3a:32:33:1d:dc:83:5a:ea:c7:1f:0d:87:
69:b5:72:d5:0f:7c:fc:41:9d:1e:5d:77:70:3c:ac:
66:16:5d:cc:57:e8:71:db:3b:ba:0f:9c:fd:4e:d2:
a1:b4:f4:de:5c:10:1c:66:59:8b:42:90:c9:30:ef:
c1:db:da:49:24:c8:a5:6a:4d:e8:fc:cf:5a:a9:74:
0d:6a:9b:5f:22:c3:5c:58:4e:8f:bc:9a:cf:26:5b:
73:89:47:85:a4:45:5e:48:84:5f:9e:6e:8c:8e:c6:
35:40:ab:f9:97:8a:8a:b0:a6:83:c7:52:97:ed:6d:
0a:df:1e:13:61:7b:e4:3e:e2:87:14:22:1f:4c:8d:
5d:98:1e:d2:c7:e7:4a:7b:c2:15:8c:73:f0:50:da:
cc:4e:7e:3d:24:ba:6b:58:cb:76:df:c4:c8:73:14:
09:a2:ec:9e:a8:24:27:d5:c0:52:94:6f:41:4f:a2:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:FF:15:EA:92:CC:FC:86:68:5F:F5:11:95:3F:7D:BB:FA:95:5F
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d9:7e:11:fe:0b:e0:6f:e8:e7:b9:fa:53:ca:6c:7d:cb:d1:
3e:3b:63:e3:2a:68:f1:58:fc:66:0a:b8:9f:4b:4b:80:65:87:
a9:bd:1b:95:1e:e1:cc:f1:e3:67:3e:06:23:6d:fb:51:63:35:
1e:fe:5e:29:3b:4c:5e:d0:1c:03:92:75:e7:d5:43:c8:16:cc:
7f:16:96:39:8e:f5:46:84:05:25:f5:8d:10:ab:f0:df:ef:b6:
60:fb:ba:bb:9d:bd:01:6a:8a:27:17:3a:4c:f0:75:59:f2:0d:
30:6f:fc:cd:56:75:95:c9:a5:63:00:0b:20:18:f9:21:6b:d4:
ab:2a:93:10:fa:2a:ec:45:87:23:ab:25:48:ee:b6:57:7b:0b:
9b:97:f0:73:6c:72:9a:3a:32:8c:05:93:5e:d1:ef:84:61:84:
ec:a5:f1:0b:2a:10:ac:c7:1a:ba:7e:5c:56:2b:29:a5:37:86:
45:e4:d8:a8:0a:b9:ed:9b:2d:fb:b3:df:cc:26:ec:0d:ce:e6:
04:46:8b:f8:6c:ab:09:a9:83:72:af:83:d9:4d:b0:a3:03:c1:
1f:a7:0c:3d:3c:0b:af:37:63:56:4b:18:4e:79:88:3f:cc:52:
aa:4a:54:84:b6:5e:88:ce:11:4b:30:71:4d:f7:35:e4:8e:ba:
65:4c:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:05 2026 by rpki-client