Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: eDzFVvKCd6xO5FR9rjGCo4Y97ZP7dkwybyWB+sNsHhk=
Subject key identifier: F1:87:DB:6D:70:57:B8:30:78:D7:DF:39:CB:7D:F6:69:1B:A6:FF:3B
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 01A0D125143922E7127CE14B3A7D6807E2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 02:01:03 +0000
Manifest this update: Thu 24 Sep 2026 02:01:03 +0000
Manifest next update: Fri 25 Sep 2026 02:01:03 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: aSNd7WXO/m1UwN+uukvFDUbT2i8CCnQP3xikRlI6zWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:25:14:39:22:e7:12:7c:e1:4b:3a:7d:68:07:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Sep 24 02:01:03 2026 GMT
Not After : Sep 25 02:01:03 2026 GMT
Subject: CN=f187db6d7057b83078d7df39cb7df6691ba6ff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:77:bf:34:e7:77:f8:e5:bc:04:d9:41:2b:
f4:b2:78:45:27:09:6b:97:10:3f:d3:94:4d:30:eb:
c4:6b:40:de:51:60:1f:92:9a:7b:32:38:f1:20:e2:
a4:8d:3f:11:65:9e:de:8a:bc:06:0c:af:ed:97:9b:
28:b3:db:92:23:52:0d:3c:21:52:60:0f:eb:5e:b4:
83:32:fc:00:61:00:37:40:ac:a8:d2:08:7a:74:da:
4c:3d:f3:34:58:ad:40:4d:07:2a:46:af:a5:6c:44:
6c:6f:92:c5:21:b2:07:da:12:1c:0a:f4:28:7b:b8:
3a:eb:81:cb:31:1f:13:28:7a:60:eb:41:f8:ea:cb:
f5:56:8f:a4:f7:c3:4b:d3:bc:7e:24:80:1d:aa:25:
1d:e8:39:b3:5c:4e:4d:12:5e:86:b1:c6:22:90:8b:
4d:55:7b:44:78:8d:c8:80:9a:2f:fe:a9:9a:c8:90:
ff:82:3a:e2:2d:81:f2:1c:4f:e3:4f:cd:1d:a9:16:
fe:44:94:d9:55:d8:9c:39:6f:8f:30:2e:5d:92:bb:
1c:44:cd:2d:5f:87:2f:52:41:b6:0d:ee:2b:6e:e1:
7e:8c:65:24:f8:77:8c:bf:9e:a5:d3:38:8b:50:b4:
39:57:4f:2a:e6:cb:cc:c6:e3:d5:13:58:ae:70:2c:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:DB:6D:70:57:B8:30:78:D7:DF:39:CB:7D:F6:69:1B:A6:FF:3B
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:09:d8:73:a1:d7:00:0a:fe:cd:60:ba:f1:d1:19:5a:67:
20:ac:d8:da:80:43:81:11:c3:be:26:4f:e6:4e:4c:fc:6b:a2:
66:55:ed:3d:2c:a5:00:5a:1c:24:42:c2:a3:25:d4:90:0f:b9:
85:ed:04:51:22:fd:20:23:c5:c1:2b:6d:c8:6a:51:e4:d4:66:
6a:ab:ed:bf:59:a3:04:4c:72:1c:73:af:ff:8e:93:d5:15:8a:
df:a1:0e:62:ab:ca:f3:7a:f2:1c:62:c0:5a:46:e0:e5:cd:a4:
29:07:46:2f:37:cc:2d:5f:5e:4b:1b:52:68:6b:19:da:42:32:
42:c6:38:17:e0:09:ff:83:81:ad:4a:b3:23:ae:16:c3:28:2d:
0c:ea:c1:4e:bf:87:81:78:70:de:c7:8b:4f:94:d0:a0:fc:bb:
b0:25:e8:e5:49:f5:67:96:06:4f:be:16:d2:e7:6e:24:fd:b9:
2a:11:8f:7e:8e:55:d4:8d:fe:05:15:ac:c4:9f:dc:1c:56:8a:
3b:a1:f4:17:6e:74:7a:0f:58:32:ba:35:50:22:72:83:f0:91:
fe:c1:e1:4a:38:39:03:6a:b8:56:57:7e:18:a0:d0:56:9d:25:
ec:66:3f:ed:44:0c:ca:ea:d0:cc:51:b0:ba:95:47:45:74:a1:
fd:a9:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:51:06 2026 by rpki-client