Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: pS/vrW4VOzsFuoIOgnhyUfm6TsP2q3qMgac5mp56dPc=
Subject key identifier: A1:8A:E3:4E:23:64:E2:95:A9:95:6B:54:92:DB:4F:47:99:FA:2E:5D
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019E1DC7270FC2BB2E1BD1D570C666155D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 20:00:51 +0000
Manifest this update: Tue 12 May 2026 20:00:51 +0000
Manifest next update: Wed 13 May 2026 20:00:51 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: xUzS9q5lnQ2jQ814FoNUc78/yjqUHtkkOLa6Dxz0kIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:27:0f:c2:bb:2e:1b:d1:d5:70:c6:66:15:5d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: May 12 20:00:51 2026 GMT
Not After : May 13 20:00:51 2026 GMT
Subject: CN=a18ae34e2364e295a9956b5492db4f4799fa2e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:01:28:79:5f:ff:48:92:af:d9:2b:68:d9:8f:
fc:f9:f3:7a:0f:6e:46:a2:00:58:ef:ec:8f:61:de:
5a:a9:48:e2:ed:48:1a:35:d0:e6:25:b6:be:b6:6f:
ab:2c:10:1b:4f:c6:8f:ce:c5:e5:b6:e6:dc:02:41:
28:20:ab:8f:9d:de:ce:77:80:1f:95:12:94:1e:57:
2a:91:2e:36:04:bc:bf:36:20:1d:66:5b:c5:83:23:
d5:01:44:99:79:e6:96:ad:91:22:38:15:bf:70:f9:
e3:33:4b:34:51:ab:0e:94:02:f7:d7:68:4a:cc:d7:
f9:cb:81:28:75:48:1f:cc:af:c1:f5:e8:ac:19:5f:
5c:bb:97:7c:9c:eb:8d:bb:2f:a3:75:64:4e:f1:77:
60:7e:c4:93:24:6c:08:4b:86:5d:e5:78:f3:f9:c1:
6e:2d:2d:e0:88:1d:e4:0d:5c:33:53:a7:a6:b4:bc:
57:ca:5d:2a:d7:d2:2c:53:0b:cf:20:29:7a:41:08:
e9:38:c3:6c:4b:87:c1:d6:dd:95:09:88:95:ab:9b:
76:46:c1:71:a6:4a:61:a7:85:ed:49:7a:7e:aa:0e:
b2:f9:cc:91:0c:01:71:8e:be:ed:16:01:68:87:1e:
40:40:e8:3f:06:5c:a6:c6:18:69:0a:be:ee:3f:89:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:E3:4E:23:64:E2:95:A9:95:6B:54:92:DB:4F:47:99:FA:2E:5D
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0f:be:ee:ab:03:c3:1d:76:4f:5d:89:2d:d6:07:34:e7:d7:
5e:c3:88:28:93:c5:46:63:83:34:bc:fc:b3:43:13:2f:6a:48:
f5:da:b4:b0:aa:e9:7a:24:b6:46:13:2b:18:54:84:00:a5:5b:
9c:67:53:54:09:59:e4:84:49:f4:b9:32:64:94:e7:8f:c0:48:
f6:52:0c:44:e4:af:62:bd:a6:92:50:0e:68:22:27:13:29:24:
37:c0:57:fe:d4:46:a1:a4:31:96:78:a5:48:ec:b1:e3:05:9f:
d0:bb:1b:58:51:17:58:11:e6:26:2a:05:a9:cc:4e:f4:da:d5:
b4:76:99:81:3f:df:32:4c:87:67:20:54:86:79:75:e4:61:bd:
fe:da:f3:fb:e4:af:48:99:e2:59:25:76:3d:b3:cc:d7:15:72:
ee:a9:87:49:52:c3:43:f2:f4:88:df:83:6a:3f:76:ec:8d:de:
f7:a4:ea:f4:96:15:ac:af:65:89:1a:61:bc:be:17:a5:c6:77:
13:99:c5:d8:7d:29:af:9f:c3:32:3a:99:4d:b3:33:39:2a:b2:
81:f8:7e:28:21:ac:9b:eb:a2:73:36:e2:81:17:27:65:f0:37:
05:7f:c0:d4:4f:f7:f8:3c:53:74:b2:a7:55:a4:04:3f:f4:7b:
1a:6a:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:50 2026 by rpki-client