Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: eA2kuz/V8HjsQveboTQCVoSQ7ZlchUFW5PyEtE7KeU0=
Subject key identifier: 80:55:22:55:64:D5:56:AD:1B:70:72:A4:AC:9D:FD:5A:CF:37:D7:B8
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 019D9962400904E133C1CCE41DF53D894310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: pqkhSYjP-nkqC5_S5A5CsOprA-8.roa (hash: 50Nqcsyer8Upn0ElKeD09JHBaYwaegFxyuG4mQJ2tJI=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: cmHhWS+E5bgay7n2dpy/y+beDW9uQsjWEz/eZZzLiZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:40:09:04:e1:33:c1:cc:e4:1d:f5:3d:89:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=8055225564d556ad1b7072a4ac9dfd5acf37d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:6c:22:11:66:d1:da:35:fd:aa:65:74:b7:
9a:51:17:6f:c7:1d:f5:59:1d:32:5e:fa:e9:4b:ae:
41:03:45:3c:22:01:74:78:46:b2:e7:bf:76:95:35:
f3:8d:13:33:aa:a3:d3:14:f5:16:44:f4:1c:f4:e2:
1c:5e:69:44:99:c5:b9:d3:d0:62:14:71:42:39:ac:
d5:ca:6c:5f:3d:e7:ca:d3:05:9e:9f:d6:74:dd:87:
0d:e5:41:4b:71:33:12:10:5a:3b:0e:16:25:ba:5a:
45:a8:61:5a:80:99:fa:d1:89:27:7f:27:20:3f:d4:
27:16:ce:3c:87:c7:6e:f2:62:97:e2:1f:12:6a:e7:
97:16:af:be:61:82:db:1c:27:f2:69:92:a9:22:4b:
b4:34:d2:b6:ee:47:b1:92:24:55:31:85:d9:24:e7:
bb:67:1d:8b:60:c0:15:8a:ef:dd:e4:df:6a:3d:c4:
b2:63:99:34:a9:da:ff:1a:d0:59:35:35:82:79:f6:
f0:f4:a1:1f:71:af:12:ce:9e:dd:ee:6c:48:25:b5:
e4:6e:a7:44:ef:4b:a3:2b:ef:c5:16:d2:c5:d6:23:
8e:3a:a2:d1:2e:4e:54:71:3f:c0:b1:10:53:60:d8:
b4:63:19:e3:96:c0:9c:6d:de:43:e7:c7:41:8c:4f:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:22:55:64:D5:56:AD:1B:70:72:A4:AC:9D:FD:5A:CF:37:D7:B8
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:83:ef:68:73:33:c3:b7:11:35:c9:d9:28:88:18:3d:c7:
74:31:71:b7:95:05:bb:f4:17:e4:ba:35:00:38:b7:c4:53:99:
a7:8a:e3:aa:05:bd:37:98:58:6b:70:0a:3f:6e:9f:a6:08:06:
aa:be:42:d7:d3:1b:15:b2:78:6e:ed:01:74:5c:64:02:dc:fa:
95:b6:ce:6f:a2:27:3a:4e:f2:32:57:1b:49:38:f5:d4:b9:a3:
0a:cb:57:9d:0d:53:f9:f1:2f:7c:20:62:60:3f:98:c7:50:d7:
ff:7c:14:2b:91:40:9e:30:cb:dd:89:69:b9:33:d6:35:cf:5e:
85:46:71:ca:5e:25:e4:f8:9b:7d:67:57:43:fa:a2:36:45:07:
98:1f:04:3d:4d:15:72:a8:9f:60:34:c4:8b:70:8c:c8:2a:af:
f9:9a:11:bc:3c:d0:23:e9:f1:93:65:1d:e7:71:eb:f5:e1:b4:
2e:3f:ee:c7:22:f0:02:eb:30:1c:5e:a1:f3:f2:43:d3:e9:d4:
9a:3c:2f:6b:a3:74:68:7a:6a:9b:4a:ec:ad:b8:1e:d0:81:af:
36:aa:e5:b4:78:bb:18:c9:ad:ff:92:1c:19:cf:99:87:ed:c2:
18:bb:63:7e:1a:55:66:5b:3e:f6:03:4e:69:d1:19:6b:a7:a2:
d8:d6:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:02 2026 by rpki-client