Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: goF4G6eAOLGwQ4dq4YMDv3NsfVZQYlWBfrrHk5BH3Cc=
Subject key identifier: D7:DD:46:77:C5:09:40:9F:33:E2:A6:F1:FA:7E:0D:F9:27:25:54:2D
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 01A180E238DEB22156B40832F9CA3C67A6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 05:01:11 +0000
Manifest this update: Wed 28 Oct 2026 05:01:11 +0000
Manifest next update: Thu 29 Oct 2026 05:01:11 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: UHH0RSIqCqS11KUCOWYUntjo8SW6opDYgUAD6QOCK5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:38:de:b2:21:56:b4:08:32:f9:ca:3c:67:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Oct 28 05:01:11 2026 GMT
Not After : Oct 29 05:01:11 2026 GMT
Subject: CN=d7dd4677c509409f33e2a6f1fa7e0df92725542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:6c:c2:17:8f:98:b3:37:6c:99:4f:f3:82:
e1:04:5f:88:41:66:77:74:df:86:09:68:e1:1b:81:
0d:18:af:35:de:f5:0c:27:74:f4:6d:c3:5a:89:ba:
e6:20:c8:10:7c:c5:a0:66:f9:58:fd:6e:f7:7c:a5:
72:ea:93:6e:f9:80:df:6c:d2:a9:31:57:92:ff:9b:
bb:73:0a:90:2a:a1:81:2a:9c:f1:c1:c1:26:58:e0:
ae:9b:7b:1d:f1:8d:9f:a2:47:b5:f0:54:c2:ff:53:
32:c2:a2:41:73:9a:b6:da:a6:08:ff:93:fb:f6:d5:
a7:cb:fb:29:b3:5d:c0:94:2c:ef:a6:71:bb:92:36:
23:37:7b:cd:ca:25:2f:99:46:77:ea:cf:34:29:22:
63:e2:65:10:ca:4b:d1:2c:c8:32:ba:59:7a:8d:f4:
73:5b:d5:aa:bf:55:84:cc:78:3c:5f:0b:c2:ab:86:
ae:93:fd:00:53:68:ae:8f:17:8a:b4:fe:3d:0e:45:
ff:8a:f3:dc:7b:a1:09:59:a9:79:17:6c:09:fd:ad:
74:19:97:22:1c:1f:c8:9e:5f:59:0f:f2:39:7c:b0:
99:43:8f:1a:f9:d7:72:58:62:87:ad:69:49:ba:29:
e2:f9:85:ac:09:e5:a7:9f:68:c0:d7:7c:2d:a8:78:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:46:77:C5:09:40:9F:33:E2:A6:F1:FA:7E:0D:F9:27:25:54:2D
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:d3:a9:c4:5d:de:19:0c:0c:63:27:74:72:07:3f:47:50:
72:4b:89:aa:88:87:fd:fb:8c:d1:ba:33:14:3b:d4:3a:b2:a7:
3b:d5:1c:c9:ff:c0:91:8e:08:5b:3e:f5:18:89:1c:06:f4:f2:
1d:23:5a:17:6f:ec:24:0f:e5:7a:af:1b:bf:81:56:f0:89:ac:
dc:e8:e7:73:3a:93:1e:2b:61:d4:27:ed:a4:25:26:19:db:44:
e1:a1:e7:c1:83:a7:c5:40:e4:82:ba:10:08:6d:f6:7d:93:31:
db:5a:c2:16:63:86:0f:92:b7:c5:e8:7a:14:75:72:9a:75:9a:
00:a4:3b:ae:92:62:b2:28:9b:06:f5:c1:fc:c2:66:8c:eb:75:
b4:74:0d:68:bb:cf:94:49:d6:be:b1:86:32:eb:1c:fd:ca:08:
06:49:61:ea:83:a0:a6:de:8b:3f:83:dd:6a:f6:0b:46:29:af:
1d:0e:82:c6:bc:e0:fe:5e:8e:22:37:69:48:48:85:d1:12:0e:
38:52:39:9a:33:97:97:bc:ca:ba:ae:c7:9f:00:f6:70:ea:b7:
4e:0c:eb:83:0c:67:59:84:cd:0f:96:7f:a8:16:97:4b:1e:c2:
56:41:3e:83:36:a0:c3:33:d5:f2:7b:40:cc:51:22:74:54:83:
f7:50:7a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:26 2026 by rpki-client