Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: 34/bWUXpY3AF0P87gXVp22s5PCLQbpwQHUnrISPL5pI=
Subject key identifier: AF:42:E7:6A:EA:0D:53:34:BC:AE:B0:4E:EA:B8:7D:1E:CF:1A:E2:1D
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 01A001A6878C075E8211FFD2E9E6B877F5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0D5B
Signing time: Fri 14 Aug 2026 19:01:25 +0000
Manifest this update: Fri 14 Aug 2026 19:01:25 +0000
Manifest next update: Sat 15 Aug 2026 19:01:25 +0000
Files and hashes: 1: 18A7L44_0ILwZodGFUSDQ2eubuc.roa (hash: TWAVfWQBRDutGoFMNTBpWa6veuSEAlw+UuaoPc+ikg4=)
2: 2BnXbJN0-tuiSw2yPhv5M-hIP_g.roa (hash: 7StJAAew0duMZOz948e0I6qxBTgJCwCzq3+RHVzjmKc=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: FDflRoBzDvgt7gcCkthbpEfxLxaH63ep4Jhkh1Zs0KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:87:8c:07:5e:82:11:ff:d2:e9:e6:b8:77:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Aug 14 19:01:25 2026 GMT
Not After : Aug 15 19:01:25 2026 GMT
Subject: CN=af42e76aea0d5334bcaeb04eeab87d1ecf1ae21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:79:da:fc:fe:07:fa:6f:f8:11:66:4d:73:
bb:94:63:ea:8f:56:34:02:e0:f5:f4:82:f7:4f:62:
95:37:8b:ec:8f:04:78:a4:cd:34:27:88:34:d3:ad:
e9:bf:06:f9:88:4a:27:db:fd:73:29:06:3a:45:73:
0c:77:78:72:73:d9:28:8a:4a:55:50:09:77:65:55:
7c:bf:98:b2:81:c3:3b:f2:b7:67:ed:22:80:b8:18:
b3:61:6e:e1:ba:bf:78:a7:98:09:3f:19:ec:2e:05:
5a:2c:74:d4:8a:a5:f0:ab:6a:2b:3c:ee:88:53:5b:
f2:12:b5:ee:52:28:b2:41:a3:5a:5e:2b:35:2c:9d:
74:81:e0:c7:53:f9:ac:9d:18:07:cb:d6:bf:da:df:
84:4b:5c:55:d9:6b:28:79:45:bb:83:91:22:27:ce:
58:71:db:d8:78:87:b9:73:2c:5d:f1:78:44:90:ee:
96:01:8e:3c:64:9b:82:88:45:d9:43:40:0e:34:73:
ab:77:86:21:61:92:7c:79:42:fb:44:57:24:12:e4:
27:47:d7:f0:2f:89:7e:8b:77:01:e1:12:30:11:c6:
42:eb:f8:8b:d2:fa:b8:32:5f:32:4d:cf:1c:d6:6b:
f1:18:3c:64:de:f4:69:1a:61:5e:40:b3:74:cb:40:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:E7:6A:EA:0D:53:34:BC:AE:B0:4E:EA:B8:7D:1E:CF:1A:E2:1D
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:11:dd:01:c6:f4:81:96:a4:14:8f:dd:4c:bd:e9:a7:5d:d1:
3d:21:74:27:40:1f:3b:e8:10:3f:f9:c3:2b:63:a4:e4:e7:f4:
d8:ec:40:46:de:2b:d8:46:9a:bf:5b:b2:bd:39:d2:b4:37:7c:
b3:21:ea:01:0e:6f:8a:38:b7:76:bc:7e:1c:81:4d:58:ca:f1:
41:8b:6d:9c:7e:95:35:84:8d:4f:e2:e9:f9:57:6b:9b:6f:c4:
1e:ac:f8:30:17:1b:17:f3:e9:e2:5c:29:2f:77:4d:f1:75:07:
4a:e6:01:79:c8:76:ea:c9:d3:e8:6e:1c:88:60:f9:12:a8:36:
e3:28:b0:8a:58:49:db:88:d6:64:e2:cc:f7:08:d4:cf:c4:41:
e6:36:89:88:9f:9c:6f:95:a1:44:ba:e0:f6:5e:21:d0:e0:47:
5a:b0:22:ab:e5:66:de:52:fe:22:c5:8c:c2:e5:9e:d8:d6:58:
2d:8d:c9:57:b3:37:59:8f:8e:ec:42:8a:6e:4e:6e:14:0a:a1:
59:1a:10:ae:64:92:bf:48:c5:c5:e7:c1:7a:2f:24:7e:3f:7f:
55:8b:bf:60:c5:41:85:df:07:ba:f1:55:f3:23:22:70:54:b7:
4e:12:cd:e4:48:54:ea:03:69:9f:ed:65:01:23:21:65:92:30:
07:71:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:35:54 2026 by rpki-client