Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: /hqfSj8JeQYZi2fKwRl7vK4/ZUZyaFTQw//nQ+u09xQ=
Subject key identifier: B1:EE:42:D6:EB:A7:B4:67:B8:B2:C1:92:5A:AB:AE:26:35:F7:3D:E4
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019FA9AC577FFA960259D83A771FB908F463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 17:01:11 +0000
Manifest this update: Tue 28 Jul 2026 17:01:11 +0000
Manifest next update: Wed 29 Jul 2026 17:01:11 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: OQmPXLNSDwhLQOBpmXttwROB8W+02ed40N7UPV/o2og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:57:7f:fa:96:02:59:d8:3a:77:1f:b9:08:f4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Jul 28 17:01:11 2026 GMT
Not After : Jul 29 17:01:11 2026 GMT
Subject: CN=b1ee42d6eba7b467b8b2c1925aabae2635f73de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:bf:c6:94:5f:2a:14:84:d7:89:16:1f:02:
d0:54:82:22:86:31:e8:fd:36:fb:3d:25:c9:95:39:
8f:c3:ec:ac:21:9a:f6:23:fb:7d:41:9d:26:e0:b0:
11:80:78:95:fc:ea:1f:24:13:6b:fa:65:7d:7e:d2:
f7:79:85:f9:c5:bc:53:0b:96:91:d9:6f:43:c5:d7:
0b:32:ff:ba:c6:3a:6e:fc:5e:da:42:95:db:36:46:
5d:6c:7e:6b:4f:3f:f7:ee:fa:88:a4:bc:e8:9c:d7:
83:54:8c:f7:bf:ef:27:32:f6:54:8f:fd:12:8e:51:
04:fb:6f:51:f9:f1:e9:51:9d:83:d2:9d:ba:d7:a6:
c6:82:2a:49:a1:0b:d7:bd:f3:0f:19:7f:db:85:73:
b8:b2:7a:fc:07:2d:be:00:95:bc:6f:76:26:b3:58:
80:d0:38:b0:2b:fb:a1:a0:8c:13:3f:42:22:51:e2:
20:40:41:ef:5b:40:78:cf:1b:13:e0:fe:30:50:74:
72:4e:f2:b5:d9:8c:ba:f0:99:f2:bc:2c:66:d7:93:
78:cd:11:ec:9d:14:8c:2e:62:d3:d0:21:59:05:c2:
1d:d4:7d:9f:55:d8:b3:97:60:be:c7:0c:cd:02:89:
b5:98:18:3d:1f:3c:45:6b:cc:77:5e:f5:51:c9:6b:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:42:D6:EB:A7:B4:67:B8:B2:C1:92:5A:AB:AE:26:35:F7:3D:E4
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:23:b5:a8:fc:17:e6:39:7b:ca:84:ce:14:42:87:54:97:12:
76:9f:cc:d0:0f:59:76:ad:6a:01:26:bf:fa:f8:60:5d:66:b5:
35:0d:83:3a:c8:c4:60:60:e8:0e:d1:e8:38:46:8e:c4:92:8c:
f1:c9:8a:09:29:92:bb:35:cf:af:e4:4b:c8:87:86:2e:0f:10:
00:54:79:5d:e5:17:7b:e6:04:aa:1b:78:2c:a0:2a:e7:00:e6:
83:06:fa:01:9c:bd:f1:7b:a5:3c:10:52:55:0d:45:ba:9b:d5:
80:a2:38:06:d8:46:4b:d9:d1:e5:03:fc:ef:1d:b3:af:bb:92:
7f:cf:2b:16:63:16:9a:96:e0:19:86:ce:e7:b5:b6:31:da:5b:
ac:7a:e9:be:24:d6:62:34:bd:91:b1:03:31:ec:78:1e:22:c7:
21:50:4f:30:2c:fe:5a:87:66:f1:98:0e:bd:be:28:c4:e0:75:
19:e7:c6:27:1e:7d:e2:ae:52:8e:7e:bf:8c:5c:93:48:4a:70:
1c:83:3e:55:4a:77:b6:d9:2e:89:6d:68:26:5d:90:9a:3f:e7:
08:88:cc:c7:46:f2:48:b1:40:e5:b8:db:d7:4b:92:80:56:89:
f8:7e:32:31:3e:fe:17:65:2b:e3:3d:57:10:f2:2c:81:a1:87:
fd:cd:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:33 2026 by rpki-client