Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: rgrsA54iYaiontPwTXpeXcU6o6RphOV6Y3gfCXcjy1I=
Subject key identifier: 6B:83:7C:EA:52:82:EF:62:08:49:75:B2:20:04:11:AD:ED:48:08:0F
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019DB27DB1D82750725E1E4CDD0A8966D97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 18D1
Signing time: Wed 22 Apr 2026 00:01:15 +0000
Manifest this update: Wed 22 Apr 2026 00:01:15 +0000
Manifest next update: Thu 23 Apr 2026 00:01:15 +0000
Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: 050s/qb64D99blg15e5lxbjYtaZts+bwgg5R6jP7vaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:b1:d8:27:50:72:5e:1e:4c:dd:0a:89:66:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Apr 22 00:01:15 2026 GMT
Not After : Apr 23 00:01:15 2026 GMT
Subject: CN=6b837cea5282ef62084975b2200411aded48080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:74:d6:d3:b1:55:ba:a0:84:8b:ec:c6:06:
1a:45:4a:56:77:bb:63:52:82:8c:eb:1e:46:57:38:
64:be:52:7c:bf:01:36:4b:67:0c:06:46:80:5e:21:
ea:b7:4a:6c:ed:78:3b:65:84:a0:55:c2:05:33:04:
bb:ca:7c:26:91:2d:22:89:14:0c:05:76:99:be:b4:
27:7f:17:20:99:21:55:5e:6b:e3:39:1f:47:26:c3:
e9:29:89:4d:6b:f9:21:f1:57:2d:8a:06:6a:fe:35:
59:ff:ed:9b:2f:06:d8:df:0d:f2:3e:e9:37:61:de:
ed:1a:8a:9a:9d:5a:f9:ba:47:e4:08:b9:2d:10:0f:
20:51:46:7b:44:87:52:c8:2f:e5:62:c1:d1:5d:bf:
be:14:73:5c:25:36:32:2c:29:90:0a:4c:8e:57:6d:
69:33:10:61:af:ed:b9:da:43:c4:a3:0e:be:32:30:
ef:bc:75:23:33:ff:77:cd:97:b6:94:35:64:f2:a7:
df:13:08:0f:ab:ce:07:e6:4a:57:20:db:11:7f:d7:
a0:36:7e:11:14:80:06:be:00:0b:db:36:c4:d9:84:
82:86:fa:d3:5a:07:ad:b8:d5:77:31:89:89:f6:fc:
7c:1e:2c:d8:0b:ed:36:27:cd:b1:f5:52:4f:2c:65:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:7C:EA:52:82:EF:62:08:49:75:B2:20:04:11:AD:ED:48:08:0F
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:3c:53:0a:eb:41:cb:87:07:3f:6d:99:99:d1:4e:91:9c:
af:67:8a:15:44:35:ff:4d:11:fb:c2:2c:61:42:98:d6:06:e3:
9b:61:f6:06:0f:94:9d:6a:94:3c:f6:75:84:5e:53:fe:f0:3d:
e3:72:e2:a8:59:8a:dd:8c:55:ff:0f:d0:c0:e8:bd:3d:b3:58:
67:54:5e:75:d6:02:b8:56:55:0c:ed:97:db:d8:f1:41:bb:66:
23:c5:2b:3f:55:28:8f:b7:54:00:27:82:92:86:8a:29:e6:03:
ed:2f:f1:60:23:44:70:4e:e6:2b:61:f7:3c:4a:a1:bd:2e:a0:
a9:ab:33:69:84:f6:6f:ec:42:d4:fd:06:6b:1f:9a:dc:56:9e:
62:d3:19:43:02:25:91:48:dc:65:b9:9b:30:04:db:b8:7a:8b:
fa:6f:9a:70:f2:1c:70:a4:19:ab:98:97:15:95:47:70:6e:f8:
44:b8:64:1b:60:7c:7a:e5:f3:40:3c:00:4d:89:25:e1:80:c5:
91:fa:ff:09:c9:1d:71:e6:33:02:08:2e:33:5b:1f:7e:05:ca:
9e:96:03:b2:91:f5:2a:71:ae:2e:43:9c:ad:e9:8d:ba:98:50:
96:ce:0d:41:c8:a9:14:25:30:56:8e:11:be:f4:fb:13:0a:74:
48:70:ae:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yfbHYJ1ByXh5M3QqJZtl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk
ODcyYzUwHhcNMjYwNDIyMDAwMTE1WhcNMjYwNDIzMDAwMTE1WjAzMTEwLwYDVQQD
Eyg2YjgzN2NlYTUyODJlZjYyMDg0OTc1YjIyMDA0MTFhZGVkNDgwODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzV01tOxVbqghIvsxgYaRUpWd7tj
UoKM6x5GVzhkvlJ8vwE2S2cMBkaAXiHqt0ps7Xg7ZYSgVcIFMwS7ynwmkS0iiRQM
BXaZvrQnfxcgmSFVXmvjOR9HJsPpKYlNa/kh8VctigZq/jVZ/+2bLwbY3w3yPuk3
Yd7tGoqanVr5ukfkCLktEA8gUUZ7RIdSyC/lYsHRXb++FHNcJTYyLCmQCkyOV21p
MxBhr+252kPEow6+MjDvvHUjM/93zZe2lDVk8qffEwgPq84H5kpXINsRf9egNn4R
FIAGvgAL2zbE2YSChvrTWgetuNV3MYmJ9vx8HizYC+02J82x9VJPLGUuXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuDfOpSgu9iCEl1siAEEa3tSAgPMB8GA1UdIwQY
MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt
Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy
LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7I8Uwrr
QcuHBz9tmZnRTpGcr2eKFUQ1/00R+8IsYUKY1gbjm2H2Bg+UnWqUPPZ1hF5T/vA9
43LiqFmK3YxV/w/QwOi9PbNYZ1ReddYCuFZVDO2X29jxQbtmI8UrP1Uoj7dUACeC
koaKKeYD7S/xYCNEcE7mK2H3PEqhvS6gqaszaYT2b+xC1P0Gax+a3FaeYtMZQwIl
kUjcZbmbMATbuHqL+m+acPIccKQZq5iXFZVHcG74RLhkG2B8euXzQDwATYkl4YDF
kfr/CckdceYzAgguM1sffgXKnpYDspH1KnGuLkOcremNuphQls4NQcipFCUwVo4R
vvT7Ewp0SHCukQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 06:30:59 2026 by rpki-client