Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: F3qHGqEK0Lj2UX4EwHoxRH4cMgJQfP3sdPGN9XwJ+9M=
Subject key identifier: 87:83:16:A3:71:5B:B6:43:34:4D:4E:4B:40:10:15:81:62:A3:62:C5
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019EB845BB68B7CDB6EC8F7DB4DC6B015C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:38 +0000
Manifest this update: Thu 11 Jun 2026 20:00:38 +0000
Manifest next update: Fri 12 Jun 2026 20:00:38 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: Eq1FzYwJPVBmpkDheddFEbHaLWQteeq1ICFYAkhEABs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:bb:68:b7:cd:b6:ec:8f:7d:b4:dc:6b:01:5c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Jun 11 20:00:38 2026 GMT
Not After : Jun 12 20:00:38 2026 GMT
Subject: CN=878316a3715bb643344d4e4b4010158162a362c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:a7:1c:a5:8e:94:9a:5b:4c:b6:01:58:a4:
b4:73:23:84:f3:b8:e5:1c:12:9f:4a:60:f5:76:ac:
cf:cc:0e:c4:5b:a4:e0:c1:74:bf:2e:e2:c4:e8:bc:
1c:59:54:45:5f:b1:e8:f9:b4:47:5f:a3:2e:f2:32:
d5:87:a9:40:84:36:3a:63:71:2f:6e:90:62:d0:dd:
60:8e:a2:0f:90:cf:b7:93:d3:9b:74:8c:93:b8:57:
9e:bc:f1:69:57:83:50:35:5e:6d:70:c2:1d:ba:b3:
1b:46:55:55:47:c3:50:6f:76:c5:51:bc:65:dd:fe:
49:97:06:18:cc:a5:e3:8b:85:40:55:b1:0a:76:de:
2f:9c:5d:2f:2b:e8:06:74:f7:5d:c6:0b:45:2b:bb:
6e:ec:f3:fb:e6:3b:44:b5:c7:98:e3:86:f9:a7:2d:
14:93:84:66:0b:90:2c:4c:1f:10:f1:9a:53:29:03:
5c:de:1c:34:f7:14:66:39:83:18:c6:08:41:46:78:
55:6b:c0:51:04:11:26:24:47:60:57:2e:77:b9:9d:
6b:ee:87:c5:21:c9:8a:31:f2:7f:f6:68:56:f9:26:
8a:a5:fc:2b:32:ae:02:f3:a3:a7:24:eb:db:64:58:
90:ba:fb:ee:de:e0:4c:a6:fa:f9:25:cf:09:42:f4:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:16:A3:71:5B:B6:43:34:4D:4E:4B:40:10:15:81:62:A3:62:C5
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:24:20:61:8c:6c:42:0c:9d:2c:53:c6:e2:1b:14:01:77:
81:4b:f3:fe:cc:80:7e:10:1a:3e:b7:be:3f:e7:d2:1b:b7:b1:
f9:fb:15:99:89:7f:aa:d1:4d:05:58:7a:9d:35:ae:3b:a2:48:
f4:fc:a3:a8:7a:a6:d0:fb:5a:01:16:a6:a4:a0:a3:bd:0f:7c:
f7:2d:b1:55:95:c7:05:be:a3:d3:f9:21:28:90:af:94:1e:31:
80:f2:ec:b0:2f:bb:95:15:5d:40:76:ca:56:79:38:af:ad:bd:
94:4d:73:f9:8f:b6:44:5a:97:e3:02:41:20:5d:ac:e6:cc:a2:
86:2e:a2:9d:5d:b4:f8:5f:7d:ea:f9:8a:fc:90:17:f2:f7:8b:
fb:dc:24:9f:8e:fa:f7:b9:3d:75:17:37:df:6a:7f:9c:e6:e1:
52:56:65:ee:e0:e1:c5:cc:96:7c:bc:0b:67:4e:88:6b:b9:4e:
3e:4b:b0:9f:4a:fa:18:99:89:99:32:af:c3:05:dd:ef:48:4d:
79:00:c8:c6:6b:78:31:f4:bb:bc:94:34:e4:7f:fc:23:2a:33:
4d:e2:da:8e:4c:0b:97:be:85:28:ca:08:07:de:89:62:e7:c5:
7e:7f:86:f6:70:1e:e8:ab:80:2f:62:b0:7f:b4:48:0b:29:a6:
ce:a6:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:25 2026 by rpki-client