Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: 7cFe66+F9WD0riBGD41MvKpITqeBT90GJNLQJlE1ghs=
Subject key identifier: 59:49:36:04:13:D6:BA:8F:39:2C:5B:67:E8:46:42:DC:33:7F:BB:6D
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019CAAFD3AF2BE6609DFD9983C49850A0496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: UFVUfchgYn6mp3dpVOpQ9/e3lOTffBAkBvBIKB7EJhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3a:f2:be:66:09:df:d9:98:3c:49:85:0a:04:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=5949360413d6ba8f392c5b67e84642dc337fbb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:07:0a:32:b0:d8:0b:30:65:c8:e7:f7:29:
b0:c2:4a:6b:a5:8c:df:bb:8c:03:10:2f:29:47:a2:
e1:4b:9f:2d:8f:37:7d:ee:34:58:89:a9:8a:13:da:
30:b2:32:f1:14:21:96:09:2a:9a:95:b1:af:d4:ec:
f0:a0:42:ed:da:10:28:2c:60:3a:ef:8e:7a:eb:b2:
19:b7:57:8c:9b:86:05:17:dd:4e:52:59:98:e1:52:
07:44:8e:7f:d8:a4:d9:5b:0e:7b:fa:44:2b:2d:b6:
da:ce:cb:05:56:34:1a:dc:d0:33:eb:f6:a5:af:71:
21:85:42:a8:85:96:83:00:15:47:9a:88:7a:a2:9c:
3a:6d:6e:1f:dc:3b:ba:00:23:6d:e5:45:f7:53:f5:
ad:54:70:2f:0b:d0:ed:5c:09:10:66:6c:42:ed:8b:
4b:a7:04:6d:4a:29:5f:f5:74:39:32:3e:84:55:97:
97:d9:ec:cf:32:60:ef:00:0c:44:2f:cf:11:81:0b:
28:64:a7:65:0a:3d:aa:36:e5:0c:f7:5d:f3:66:df:
fa:6a:1d:0b:86:c5:fd:9d:bc:cb:1b:28:d3:22:00:
ae:a7:e5:a8:e2:ad:7f:bc:51:39:06:f9:97:ad:56:
2b:4c:82:83:ab:c9:7f:3d:f8:64:ac:c1:72:4b:0d:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:36:04:13:D6:BA:8F:39:2C:5B:67:E8:46:42:DC:33:7F:BB:6D
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:8c:c9:46:30:58:75:d9:d2:47:0a:cd:40:05:9a:f9:81:
7d:5c:fc:3d:38:db:74:86:9c:fc:d7:52:fb:ae:29:0a:60:56:
a6:36:c7:79:45:40:44:fe:66:0f:f4:67:83:7a:41:9a:5d:e7:
88:9a:5b:f0:b1:45:23:ca:5c:4c:ea:27:c2:99:b4:55:07:27:
8d:24:78:5a:73:ef:00:b7:7a:a7:eb:b9:53:7f:b2:fe:30:06:
5c:eb:03:9d:14:9e:dc:a9:a5:d7:12:0b:5a:3f:eb:06:9b:42:
65:41:dd:08:25:b7:e9:0c:1c:33:75:89:69:a1:2b:1b:50:0a:
03:20:cb:fa:ba:ba:43:f6:a1:82:0c:36:6c:83:ba:74:93:b2:
50:52:34:9a:f7:34:78:f6:1f:2e:12:e1:b2:c6:16:34:8e:69:
3a:d2:38:b9:a2:d3:16:b7:72:9f:64:fe:7f:b6:e1:ee:e5:f4:
ea:88:fb:86:84:1a:45:5d:07:a8:e4:b0:29:1d:67:52:53:4b:
dd:3d:9d:d6:33:61:b4:5d:51:8a:84:51:1c:9b:57:44:77:58:
2f:f0:e0:ab:0a:53:c3:85:4e:76:89:75:82:d2:bc:b6:eb:30:
53:f7:ca:48:52:19:c0:d8:dc:44:97:b0:7b:45:6e:89:b3:a7:
c1:77:3e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TryvmYJ39mYPEmFCgSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjYwMzAxMjAwMDQ4WhcNMjYwMzAyMjAwMDQ4WjAzMTEwLwYDVQQD
Eyg1OTQ5MzYwNDEzZDZiYThmMzkyYzViNjdlODQ2NDJkYzMzN2ZiYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf8HCjKw2AswZcjn9ymwwkprpYzf
u4wDEC8pR6LhS58tjzd97jRYiamKE9owsjLxFCGWCSqalbGv1OzwoELt2hAoLGA6
745667IZt1eMm4YFF91OUlmY4VIHRI5/2KTZWw57+kQrLbbazssFVjQa3NAz6/al
r3EhhUKohZaDABVHmoh6opw6bW4f3Du6ACNt5UX3U/WtVHAvC9DtXAkQZmxC7YtL
pwRtSilf9XQ5Mj6EVZeX2ezPMmDvAAxEL88RgQsoZKdlCj2qNuUM913zZt/6ah0L
hsX9nbzLGyjTIgCup+Wo4q1/vFE5BvmXrVYrTIKDq8l/PfhkrMFySw1MFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlJNgQT1rqPOSxbZ+hGQtwzf7ttMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVqMyUYw
WHXZ0kcKzUAFmvmBfVz8PTjbdIac/NdS+64pCmBWpjbHeUVARP5mD/Rng3pBml3n
iJpb8LFFI8pcTOonwpm0VQcnjSR4WnPvALd6p+u5U3+y/jAGXOsDnRSe3Kml1xIL
Wj/rBptCZUHdCCW36QwcM3WJaaErG1AKAyDL+rq6Q/ahggw2bIO6dJOyUFI0mvc0
ePYfLhLhssYWNI5pOtI4uaLTFrdyn2T+f7bh7uX06oj7hoQaRV0HqOSwKR1nUlNL
3T2d1jNhtF1RioRRHJtXRHdYL/DgqwpTw4VOdol1gtK8tuswU/fKSFIZwNjcRJew
e0VuibOnwXc+hA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:04 2026 by rpki-client