Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: ZsVsTq+qARpJnyKKlQELWqkCJCEm5QUQ/hhruOjkqBs=
Subject key identifier: 57:ED:4E:94:72:D2:8D:E8:B5:60:93:C4:A1:A0:20:5A:6A:F1:85:23
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019D37F7449C4214340397C1E2D02AE8943F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: 8r87ZfDHqNPM/bSYFDKNSOqD1Sz6LyMjuJftixtBafA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:44:9c:42:14:34:03:97:c1:e2:d0:2a:e8:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=57ed4e9472d28de8b56093c4a1a0205a6af18523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:c7:8b:ee:98:e9:f2:af:79:59:7c:3f:f1:
cb:9a:e9:3d:c4:33:f0:b8:82:aa:98:6a:e2:5d:c5:
cc:7f:df:0f:5d:62:fa:12:51:74:52:59:20:d7:3f:
a8:05:eb:7a:e6:fb:5a:0b:4d:11:84:7a:d0:9d:a2:
8e:96:6f:0d:f4:40:99:cb:81:fb:68:b4:f8:7f:76:
c2:94:b8:2b:cc:21:99:72:25:77:d4:69:d6:26:e7:
18:42:cb:b4:e7:6e:8b:69:19:e6:d2:76:28:81:4a:
86:c4:1a:eb:1d:1a:67:6e:c4:a0:f2:eb:62:e8:80:
53:b2:5b:32:ee:27:4e:7d:0c:4f:06:95:c3:f3:65:
7c:f8:36:b3:c8:a8:22:2c:ce:45:5c:c7:c8:21:22:
c2:d8:e0:fb:37:a8:b5:f2:2a:5f:99:f4:bf:e4:dd:
0f:67:de:07:61:1c:9c:0f:32:61:99:97:2e:b5:ab:
d2:d5:96:9a:ec:1b:87:9c:19:76:a4:2b:90:9a:b8:
08:d6:c0:fe:7c:ef:f1:b5:62:df:75:a1:64:37:5e:
5b:7a:61:b5:6e:8a:0a:17:02:85:7a:bd:87:44:86:
38:46:42:f9:c2:37:dc:7f:b6:0a:13:d0:80:23:54:
6e:b7:29:73:b0:1b:e6:2c:f0:db:c5:f6:5c:de:ad:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:4E:94:72:D2:8D:E8:B5:60:93:C4:A1:A0:20:5A:6A:F1:85:23
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:f9:0a:c7:68:d5:9e:22:b6:3e:b1:a5:d2:42:be:6f:bf:
75:f1:43:01:26:2a:a3:b5:01:9c:f0:2a:6c:46:3e:91:80:2f:
2c:07:0a:f8:c1:04:5c:d6:d8:2b:0e:e1:44:33:64:d3:96:4d:
4d:3b:4e:f4:59:15:39:9b:7c:aa:18:da:2c:db:e5:ef:59:54:
17:47:52:08:52:56:48:64:1d:91:1a:43:5c:37:78:f1:27:a4:
04:db:16:2e:38:73:85:a4:9d:d6:c5:2b:fc:91:08:3d:8f:81:
35:b8:95:56:1d:79:b9:6f:1d:e6:e9:d4:1b:30:7c:19:2c:24:
27:c1:3f:83:93:85:11:f8:cf:11:d4:2e:50:db:36:52:ba:79:
f7:37:15:a4:35:09:04:11:da:f4:54:52:9a:69:48:50:8e:a2:
5b:45:9d:d9:90:ed:c0:36:83:a1:d4:76:d7:9a:32:59:99:9c:
79:81:44:0a:c5:a7:3d:fa:f4:d0:da:34:77:dc:e1:a8:f1:aa:
8d:0c:a8:a1:ee:96:e1:97:1c:f7:72:37:a6:a7:a6:59:50:ca:
f2:42:20:89:6b:1c:b5:53:54:eb:b9:e6:66:33:a6:38:59:1c:
48:61:53:d9:01:87:51:a2:7b:42:8f:08:ff:2f:c5:67:5f:91:
82:e3:7e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390ScQhQ0A5fB4tAq6JQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjYwMzI5MDUwMDQ0WhcNMjYwMzMwMDUwMDQ0WjAzMTEwLwYDVQQD
Eyg1N2VkNGU5NDcyZDI4ZGU4YjU2MDkzYzRhMWEwMjA1YTZhZjE4NTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm/Hi+6Y6fKveVl8P/HLmuk9xDPw
uIKqmGriXcXMf98PXWL6ElF0Ulkg1z+oBet65vtaC00RhHrQnaKOlm8N9ECZy4H7
aLT4f3bClLgrzCGZciV31GnWJucYQsu0526LaRnm0nYogUqGxBrrHRpnbsSg8uti
6IBTslsy7idOfQxPBpXD82V8+DazyKgiLM5FXMfIISLC2OD7N6i18ipfmfS/5N0P
Z94HYRycDzJhmZcutavS1Zaa7BuHnBl2pCuQmrgI1sD+fO/xtWLfdaFkN15bemG1
booKFwKFer2HRIY4RkL5wjfcf7YKE9CAI1RutylzsBvmLPDbxfZc3q2cRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFftTpRy0o3otWCTxKGgIFpq8YUjMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/f5Csdo
1Z4itj6xpdJCvm+/dfFDASYqo7UBnPAqbEY+kYAvLAcK+MEEXNbYKw7hRDNk05ZN
TTtO9FkVOZt8qhjaLNvl71lUF0dSCFJWSGQdkRpDXDd48SekBNsWLjhzhaSd1sUr
/JEIPY+BNbiVVh15uW8d5unUGzB8GSwkJ8E/g5OFEfjPEdQuUNs2Urp59zcVpDUJ
BBHa9FRSmmlIUI6iW0Wd2ZDtwDaDodR215oyWZmceYFECsWnPfr00No0d9zhqPGq
jQyooe6W4Zcc93I3pqemWVDK8kIgiWsctVNU67nmZjOmOFkcSGFT2QGHUaJ7Qo8I
/y/FZ1+RguN+2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:38 2026 by rpki-client