Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: 0sYcsA3pCnNSI+gDt45XCzOHm1D/AUNUHhurQ7pUPWk=
Subject key identifier: 4C:FB:5F:39:F0:05:7D:C0:FC:E2:41:03:83:DB:3A:DB:1C:7C:19:4A
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 01A08B9F2903F14F20EA727905F1C32C51BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 14:00:58 +0000
Manifest this update: Thu 10 Sep 2026 14:00:58 +0000
Manifest next update: Fri 11 Sep 2026 14:00:58 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: uZiirqHT5y1JkpoIE4+aBnI3cNg40FPuGpLBp0sMKH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:29:03:f1:4f:20:ea:72:79:05:f1:c3:2c:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Sep 10 14:00:58 2026 GMT
Not After : Sep 11 14:00:58 2026 GMT
Subject: CN=4cfb5f39f0057dc0fce2410383db3adb1c7c194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:e5:e0:25:6d:28:2b:bc:e4:ef:a2:57:04:
ba:87:05:70:07:15:6d:8f:c5:8b:43:27:21:de:22:
8d:80:79:74:33:8f:9d:21:e5:c6:ed:35:d8:f7:94:
44:6f:d2:36:35:3b:61:c9:67:43:98:f1:9b:03:f5:
61:ea:83:da:52:db:35:48:e5:ea:b8:5e:43:a7:9e:
b9:49:19:e9:33:80:c1:03:3f:35:f9:47:d0:ca:91:
d3:fe:46:0a:64:4f:2c:54:03:a3:19:22:c3:59:23:
20:d4:7a:01:b5:ad:97:b4:68:de:f5:58:b3:62:94:
36:34:ff:f1:d7:3f:79:65:e1:00:cc:82:66:9d:7c:
05:ce:a0:24:bb:ca:27:be:76:58:f0:d4:c2:c4:ba:
43:cf:8d:de:d8:4c:56:54:f6:95:fa:2e:f5:46:62:
90:22:b7:b3:1a:1d:85:20:86:09:02:be:81:f4:87:
45:43:4a:3f:9d:0d:73:2d:74:7f:e3:bd:eb:d9:be:
ed:0e:a4:64:ea:00:5a:df:8e:b7:6e:e2:48:9d:c5:
83:5b:99:1d:7a:f1:c3:ad:f6:00:a1:e3:a6:44:42:
d0:5c:80:8f:9c:ac:5c:0d:0c:5a:d1:10:9e:2a:15:
5f:32:ba:ca:bc:fb:20:63:43:8e:32:00:a8:a2:a2:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:5F:39:F0:05:7D:C0:FC:E2:41:03:83:DB:3A:DB:1C:7C:19:4A
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f7:37:3e:77:fb:70:52:0a:09:e7:99:ef:00:34:9c:c6:be:
d9:02:a4:5f:74:29:76:3b:1b:57:20:62:1f:bf:07:3d:e0:c6:
a6:ac:25:d0:f9:f5:98:62:5d:77:a9:37:f1:7a:3c:92:1f:48:
de:b4:39:a2:30:a9:7d:4f:82:39:d5:0c:33:d3:18:83:d4:70:
0a:5e:10:f6:d5:94:a1:dd:23:ea:ad:2e:cc:51:db:8b:b0:9e:
b7:1b:98:eb:f2:44:3d:f6:f1:72:5b:53:66:0b:59:30:0c:f1:
c3:eb:de:6e:33:a4:83:2c:31:97:50:44:b1:2e:82:af:f4:87:
48:9c:0e:2a:aa:c4:7c:b6:9a:bf:63:31:ab:c6:02:61:12:e4:
c1:3d:01:14:bb:f7:69:14:cd:b8:02:e7:40:4f:71:0b:5e:80:
1c:84:30:43:09:12:58:f0:cb:39:69:e9:4f:5d:fb:a8:fe:ab:
95:f3:f2:0f:ca:13:7e:1a:f7:54:a4:3e:f6:88:86:44:26:49:
43:2d:9f:43:ba:ae:60:22:f9:d9:d9:fc:3e:f0:e9:dc:e9:ed:
ba:a8:55:85:07:37:03:3a:ca:6c:a8:c7:82:70:94:10:5f:4d:
66:24:6d:ef:74:e4:3c:9e:66:18:3e:e9:90:a5:c3:86:c4:40:
8f:f2:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:25 2026 by rpki-client