Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: HZfDd9NwU6nvdfiXmiGChPSElz2J58VYIXpmzj89ow4=
Subject key identifier: A0:F0:CC:73:B5:43:1B:32:51:5D:88:F4:E6:A0:2A:EC:C5:8D:8F:08
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019D2884CCD6E3B162BE92461E8A69DB82EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: wACbGE548Xg/0dltZdSeY8AGZJenXi/ybiv+fPZiwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cc:d6:e3:b1:62:be:92:46:1e:8a:69:db:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=a0f0cc73b5431b32515d88f4e6a02aecc58d8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:fb:31:83:e5:54:1c:83:4f:83:b6:68:c9:
6a:78:63:75:59:f0:ba:8a:b2:42:c8:b2:36:2f:d2:
5e:b6:3d:eb:10:e4:8b:41:e7:7b:1f:00:d0:70:e9:
87:c2:3a:14:3c:06:50:d5:f1:4e:9c:dd:16:96:76:
9c:ba:ef:a5:90:fe:96:31:f3:33:aa:d5:e7:cb:f8:
f5:d7:21:d9:94:28:69:3b:64:19:24:aa:ed:19:e3:
7c:aa:0f:77:76:14:46:68:94:75:14:4d:90:84:97:
c6:0a:da:f9:9c:89:18:5b:a8:b8:7e:23:cb:b3:de:
c2:1b:85:19:d1:6b:d7:cc:75:cf:dd:2e:d5:dc:f0:
43:74:03:7e:9c:43:15:07:b9:33:3e:7b:3a:11:a0:
b0:d6:a0:d8:c5:03:ec:5d:2f:44:ef:b8:a2:0e:93:
fb:c9:b0:73:85:f1:d6:ce:c9:c9:a7:ac:96:3e:71:
c0:63:4b:48:80:c1:b3:71:c0:4a:f0:7a:ad:d6:33:
fd:07:61:0d:4e:c7:64:49:b8:9e:e4:fe:57:d4:13:
7c:9c:ed:7d:73:a3:d3:07:7f:bc:73:3a:75:58:7c:
fe:f5:8a:d4:06:b6:bc:1a:33:50:2c:80:5a:34:a2:
4d:ad:60:77:65:46:74:ff:61:fe:6b:65:76:12:78:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:CC:73:B5:43:1B:32:51:5D:88:F4:E6:A0:2A:EC:C5:8D:8F:08
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:63:79:ef:34:c4:c0:e8:c0:f8:76:44:45:f8:83:86:f5:
b0:5b:38:55:87:62:f5:33:b8:84:bd:35:b9:ea:c2:a0:e2:65:
8e:1d:22:14:b7:62:5e:3c:c7:bf:61:1c:6e:bb:2c:c8:e1:2b:
5c:da:5c:1a:80:4a:37:3f:e6:50:4c:4b:4c:fe:0a:ca:45:ca:
30:7c:60:01:d9:f5:b6:a4:f7:44:a7:a8:49:01:1b:06:ba:f3:
a0:00:8b:a4:91:5e:42:a0:e1:f4:df:3f:b9:4e:e6:fd:02:3d:
8b:6e:71:d9:e4:9d:72:9a:8d:23:a9:02:0c:8c:bb:5c:3d:f6:
d5:3c:85:96:91:26:96:7f:22:99:35:82:61:ff:32:67:bc:20:
a8:bd:32:62:87:1c:09:33:de:7b:97:ad:47:4b:e0:50:65:ae:
93:95:e3:44:1c:93:05:d4:39:69:49:c3:04:f6:46:7d:b2:a1:
7c:ff:81:c2:f4:28:38:1b:83:97:ab:2b:a3:b4:42:a7:89:9a:
fa:9c:10:09:e0:43:dd:32:a7:89:c8:73:92:fa:a6:30:bf:c6:
40:60:b7:71:40:ff:2e:e0:94:9f:1e:ec:6b:74:3f:9c:4f:76:
12:8c:0e:86:bf:75:25:84:e3:f3:99:88:49:e7:45:25:e2:be:
01:0d:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:00 2026 by rpki-client