Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: 922pwU9h3qr0eOrqjjImsL7X5QpWisFV/TcRcasCLcc=
Subject key identifier: 41:E9:C2:F7:19:5E:AA:53:36:E0:11:D0:01:39:C6:14:FE:68:19:C2
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019CCAC009F49787F917D7C40C80E1C6B683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 1859
Signing time: Sun 08 Mar 2026 00:01:48 +0000
Manifest this update: Sun 08 Mar 2026 00:01:48 +0000
Manifest next update: Mon 09 Mar 2026 00:01:48 +0000
Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: iIlq+jP569wFuvq+b4j6eAWCMlSDFmMMEkxCJM5Kk8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:c0:09:f4:97:87:f9:17:d7:c4:0c:80:e1:c6:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Mar 8 00:01:48 2026 GMT
Not After : Mar 9 00:01:48 2026 GMT
Subject: CN=41e9c2f7195eaa5336e011d00139c614fe6819c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:c9:4c:63:4d:ef:72:c2:5d:a7:10:9a:52:
fb:69:b3:88:3c:61:11:6d:78:f9:cc:c0:72:28:81:
90:9c:78:b6:ea:ef:36:1d:9d:bd:01:6f:65:79:68:
eb:e9:16:3a:ce:e7:38:4b:71:67:74:76:74:20:8e:
e4:41:c2:a5:25:c0:33:b9:c9:94:f4:a3:93:f6:74:
01:d8:b1:a4:2d:1d:d9:2b:e5:a7:28:26:79:f0:c8:
73:b8:83:94:1b:46:f5:17:9b:87:23:72:c4:4c:32:
05:06:ae:12:2c:21:f8:36:a3:8e:d5:bc:ab:88:87:
6e:9f:20:4d:87:17:9a:ff:fb:0f:eb:d4:4c:ab:3a:
b0:d5:77:c8:43:d2:8b:e4:67:fa:78:8e:8c:cf:54:
af:09:df:2c:8d:9d:80:3c:44:68:54:c6:04:c2:86:
09:a5:c1:16:e1:95:f6:67:63:10:93:1c:6a:a2:91:
0a:7d:7a:73:79:54:9b:c6:0e:24:05:50:c6:b0:5c:
c0:0e:e9:55:85:d6:9c:3a:e1:67:83:51:3d:ef:51:
e5:f4:73:ea:78:4f:5e:fd:fa:81:cc:8b:ab:5a:e1:
33:03:ff:81:e5:35:16:3d:b8:d5:78:64:58:58:b3:
12:26:3c:72:f6:8d:82:13:3c:d6:78:37:09:51:0b:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E9:C2:F7:19:5E:AA:53:36:E0:11:D0:01:39:C6:14:FE:68:19:C2
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e7:6c:dc:82:f9:19:9a:56:f2:ee:85:c7:15:27:af:ac:9c:
08:3e:e1:dd:68:37:43:f7:ed:23:13:3f:1b:46:d6:a2:10:cf:
9c:54:fd:df:8d:04:9b:6b:9a:7c:74:da:2a:13:f3:87:b8:57:
d2:90:30:7a:fe:c0:1c:ef:35:c7:40:c4:c7:56:22:4c:6c:c1:
d8:62:43:40:c4:11:0b:2b:d3:59:80:72:93:2f:54:6c:82:d5:
e0:bb:0f:a3:b4:5f:0f:65:bd:8b:ad:1b:78:3c:4a:bc:96:bb:
47:44:63:69:a1:c7:62:46:89:14:21:53:37:7c:6a:94:87:1d:
6d:55:3d:38:85:9d:d7:ab:9c:d8:29:d8:52:7c:f0:ef:aa:a0:
b7:88:69:ed:5d:e4:ae:93:27:f8:5b:a7:97:63:35:71:dd:56:
2f:66:5c:ad:e7:5b:a2:18:91:25:cc:6c:0f:62:cf:a6:db:3f:
8e:97:be:ea:84:e2:f3:9f:1b:91:b9:92:9c:1b:59:e7:70:fd:
a5:36:5d:91:7d:e8:d5:32:1e:06:cc:dd:12:f2:8f:f5:b7:b3:
18:d0:eb:29:af:e0:d7:29:ed:2c:a6:57:34:80:51:35:4f:3a:
40:d4:a2:83:fc:4d:84:01:20:c0:fc:ff:d6:86:b7:2b:64:91:
9e:fa:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:36:33 2026 by rpki-client