Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: IkpuhradQm++CgZFv36wPqNvi3ngVZtnROvRojJi81M=
Subject key identifier: 33:03:44:26:7C:1A:93:EF:E0:84:F7:04:45:A2:42:4A:3B:68:ED:D0
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 019E2A705BBAC5516123E229C03790D8FC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 11DC
Signing time: Fri 15 May 2026 07:01:07 +0000
Manifest this update: Fri 15 May 2026 07:01:07 +0000
Manifest next update: Sat 16 May 2026 07:01:07 +0000
Files and hashes: 1: Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa (hash: W91Un4+cAWOmCfRYL9NpIZw0WnRk1OPj82pCoQEGyIs=)
2: px387i4PMR3bxTg6V44Yz40bBQk.roa (hash: zLXh41bENdVi+kdvA9RLWLAUXLX8rorUJoL9hmG7R2k=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: jEfp15MTGeXxjcqx/VvUw5eVWIoqeYh9IWbB7aOWYsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:5b:ba:c5:51:61:23:e2:29:c0:37:90:d8:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: May 15 07:01:07 2026 GMT
Not After : May 16 07:01:07 2026 GMT
Subject: CN=330344267c1a93efe084f70445a2424a3b68edd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:c4:7c:a5:83:08:c2:32:58:cf:18:f2:ac:
71:74:d7:28:b8:ea:4a:00:dc:d9:66:80:60:97:a2:
2e:20:37:b0:67:aa:c5:e7:3b:74:4b:db:52:9e:b8:
29:ee:41:a4:9a:7b:4b:a8:0b:38:4c:d8:ac:56:14:
68:c7:d9:59:b3:2b:2e:38:b9:1e:8b:9a:43:7e:c9:
48:bb:48:8c:5d:03:9d:a5:8b:50:9b:9b:bb:f3:40:
50:66:f6:0a:41:52:2b:d4:32:77:17:53:c5:b0:e2:
d0:b1:49:f8:a3:66:16:cc:03:3b:16:3a:bd:45:8a:
53:1c:35:51:54:b8:87:ef:4b:57:5f:f2:41:16:b4:
be:2e:1c:31:5b:bd:9c:a4:73:4f:6b:41:90:c0:a5:
4a:f2:94:eb:58:bd:de:05:91:b0:70:0e:af:f8:1a:
86:1e:44:13:77:d1:cb:eb:c1:48:a1:89:83:21:75:
ad:69:f9:35:fa:72:fb:b2:7f:c1:48:93:1d:cc:b7:
f1:8c:b6:99:43:19:3c:b3:1d:22:2a:4a:ac:be:22:
35:67:b5:18:31:53:95:ef:7e:23:4a:93:aa:87:a3:
12:71:e3:fc:9d:f8:a5:1d:92:97:39:48:01:19:0e:
b4:40:c9:49:22:79:80:45:b5:f2:4a:90:6b:f7:90:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:44:26:7C:1A:93:EF:E0:84:F7:04:45:A2:42:4A:3B:68:ED:D0
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:f4:ec:f2:8e:dd:0c:c6:85:f1:07:85:a3:32:34:d3:80:
db:b1:0e:26:5c:eb:48:c8:5a:c7:57:90:15:9a:47:83:60:3d:
79:01:d7:9a:1c:dc:00:87:f5:ce:b8:4b:d2:4a:c4:dd:2b:45:
63:e2:12:0c:72:73:75:07:2c:2f:1a:b2:d9:17:50:43:67:81:
3e:be:75:5e:7c:b1:0e:c9:56:68:bc:bb:3b:e5:3c:6c:35:92:
3a:4b:ea:d8:c2:25:ce:97:4d:45:57:48:8b:d0:ca:fd:95:4d:
c1:f3:e9:0f:e7:73:c8:a7:24:2a:41:66:eb:42:78:9f:22:03:
e2:40:9d:d7:12:68:ae:d0:7d:6d:39:12:f5:69:3e:55:9e:87:
30:bf:ce:37:ae:07:0d:a6:17:dc:2c:9b:00:4f:38:a8:c5:b2:
32:d5:9e:e9:06:4b:0d:75:c3:24:23:8d:b7:98:8f:44:61:71:
a4:54:b2:b0:ff:36:7e:ed:1e:3e:5f:28:78:88:27:9b:bc:f3:
93:bf:22:b4:07:05:25:90:0f:5b:e5:b4:3d:60:ce:12:5b:84:
4b:06:1e:97:e2:ed:d1:62:53:d4:e7:49:24:dc:c2:0a:f5:a0:
3f:ce:56:05:6b:c0:fb:b8:fa:0f:ff:ef:c7:b1:e6:03:ec:26:
04:33:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:41:07 2026 by rpki-client