Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: 0lwJwInIZXjLQSewWWf/CJ3MJop0hxVLOUrWVpWw2zk=
Subject key identifier: 6D:D2:18:3D:63:23:5F:CB:8B:F8:71:A6:85:A5:B0:D8:C1:ED:0E:5A
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019D9A7525E2F3EA5A219CB7105D46A0C9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: 3wkfzwu7GHmkFerA3tu4I5EGWrCPzuWT1jOSz+46eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:25:e2:f3:ea:5a:21:9c:b7:10:5d:46:a0:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=6dd2183d63235fcb8bf871a685a5b0d8c1ed0e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:20:e4:1c:61:91:f1:40:3d:c1:48:4c:fc:
13:88:7b:88:4e:b2:a2:da:59:bd:49:25:1c:d7:d9:
cd:1d:12:e2:13:ec:50:58:2d:91:9f:bd:2c:d0:02:
08:98:19:86:47:3d:09:a2:dd:9b:1b:df:86:89:86:
24:d4:ab:98:8e:af:60:c7:93:63:09:61:5b:b8:1f:
d1:f1:4b:b5:cf:6c:b5:75:ec:89:5c:65:bd:e5:f6:
40:f4:73:95:13:49:88:29:e8:14:73:4e:c9:73:a6:
bf:96:26:c5:35:93:1f:72:f2:bc:ea:39:8f:b4:ed:
28:c9:6d:b9:82:cc:e6:ef:77:71:29:61:3e:a4:96:
ec:4f:c4:47:57:98:4b:39:ed:a6:50:8c:13:25:70:
48:13:bf:0f:83:e2:09:72:3e:27:8d:97:ff:71:9b:
ef:14:7c:46:31:d5:e0:8d:01:99:6e:18:a7:af:f4:
3d:7a:71:7e:3c:c8:f7:da:d7:d6:90:27:49:56:3d:
05:88:7a:d7:9f:e2:66:cb:95:e8:d9:78:20:e4:7c:
b9:9f:8b:5c:ae:58:3c:35:2e:1a:3d:77:a2:29:60:
e8:21:17:10:e4:a0:ca:1e:7a:7f:dc:42:d1:ed:91:
7d:9f:90:60:82:6c:d3:e4:16:01:88:18:ce:09:51:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:18:3D:63:23:5F:CB:8B:F8:71:A6:85:A5:B0:D8:C1:ED:0E:5A
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:af:43:67:39:f2:43:15:26:0e:15:be:e3:ac:ee:4c:88:
65:e5:d0:bf:df:8a:89:56:22:f4:6f:28:97:cf:f7:9f:42:f6:
87:b7:99:da:26:2b:f2:0d:d9:72:eb:97:dc:07:1e:eb:e4:88:
53:83:35:36:9e:98:95:ab:e5:ed:b4:4e:40:25:65:2d:79:89:
12:aa:a0:4c:79:0e:6b:15:51:cd:52:fd:df:6d:a8:a6:11:f0:
c1:c8:b8:31:fd:2e:d6:2c:ae:b1:d7:5d:f1:ee:e2:10:8b:f7:
cd:47:a7:41:00:69:96:fb:6d:64:85:d3:73:25:82:d6:6a:ad:
6a:01:bd:0c:65:7e:be:17:68:f4:04:64:b2:a3:07:9b:bd:69:
79:00:75:b5:27:ef:fb:e8:01:2c:a6:3b:2f:dc:98:8f:b7:0d:
06:2d:59:69:a5:3b:ad:b9:81:4f:a3:bf:73:ed:43:54:ca:85:
35:b3:39:c7:d8:e0:bc:a3:53:49:9a:ee:a6:35:0c:3c:73:16:
35:f0:63:ba:75:2d:fd:5f:18:e6:e9:45:b8:d6:1d:93:b7:b6:
dd:ef:e5:5d:b3:ef:c5:4d:d7:60:4d:f6:76:e6:5e:b9:f0:cb:
70:90:c0:39:91:44:4f:1f:27:d2:93:79:91:f3:8d:60:17:a8:
90:64:9d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adSXi8+paIZy3EF1GoMm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjYwNDE3MDgwMTAxWhcNMjYwNDE4MDgwMTAxWjAzMTEwLwYDVQQD
Eyg2ZGQyMTgzZDYzMjM1ZmNiOGJmODcxYTY4NWE1YjBkOGMxZWQwZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteEg5BxhkfFAPcFITPwTiHuITrKi
2lm9SSUc19nNHRLiE+xQWC2Rn70s0AIImBmGRz0Jot2bG9+GiYYk1KuYjq9gx5Nj
CWFbuB/R8Uu1z2y1deyJXGW95fZA9HOVE0mIKegUc07Jc6a/libFNZMfcvK86jmP
tO0oyW25gszm73dxKWE+pJbsT8RHV5hLOe2mUIwTJXBIE78Pg+IJcj4njZf/cZvv
FHxGMdXgjQGZbhinr/Q9enF+PMj32tfWkCdJVj0FiHrXn+Jmy5Xo2Xgg5Hy5n4tc
rlg8NS4aPXeiKWDoIRcQ5KDKHnp/3ELR7ZF9n5BggmzT5BYBiBjOCVGWcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3SGD1jI1/Li/hxpoWlsNjB7Q5aMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6WvQ2c5
8kMVJg4VvuOs7kyIZeXQv9+KiVYi9G8ol8/3n0L2h7eZ2iYr8g3ZcuuX3Ace6+SI
U4M1Np6Ylavl7bROQCVlLXmJEqqgTHkOaxVRzVL9322ophHwwci4Mf0u1iyusddd
8e7iEIv3zUenQQBplvttZIXTcyWC1mqtagG9DGV+vhdo9ARksqMHm71peQB1tSfv
++gBLKY7L9yYj7cNBi1ZaaU7rbmBT6O/c+1DVMqFNbM5x9jgvKNTSZrupjUMPHMW
NfBjunUt/V8Y5ulFuNYdk7e23e/lXbPvxU3XYE32duZeufDLcJDAOZFETx8n0pN5
kfONYBeokGSd9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:20 2026 by rpki-client