Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: R1+fEGOxtqAdsKuyIeMUtPHKs34LwosSnyyclftN+V8=
Subject key identifier: 01:4B:0E:63:25:61:45:76:0D:3A:5D:9B:F9:8E:20:17:EE:71:C9:49
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019E1E6CAC9C903D24C510CE7FB495B37A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 0B7D
Signing time: Tue 12 May 2026 23:01:39 +0000
Manifest this update: Tue 12 May 2026 23:01:39 +0000
Manifest next update: Wed 13 May 2026 23:01:39 +0000
Files and hashes: 1: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
2: Adqf-0ME2YqN8H_6B4asgnToAUY.roa (hash: 0SCvbw5p8yy5uNnDdQjN/UMJ84WMVAkKE92NJKO0GTk=)
3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
4: NLcVYv7QX8TzU3KtiBGBznThjOY.roa (hash: zcrKX9GnGSrAQghL6HOZ1jKtZzfy7mUWqAXuCLC1AoU=)
5: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: I27PO1u90cZjYPkj3tZrpQe8gPAKh2zitDfbDZcotAE=)
6: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
7: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
8: hrbEjs63rlg9CXl4g7G5mgv-RqA.roa (hash: Vn4Q2C74wZsb2HWkUQIo9qyiOlvy2sNf/LHIwsqyFPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:ac:9c:90:3d:24:c5:10:ce:7f:b4:95:b3:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: May 12 23:01:39 2026 GMT
Not After : May 13 23:01:39 2026 GMT
Subject: CN=014b0e63256145760d3a5d9bf98e2017ee71c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:ba:38:76:57:4e:77:4a:c0:82:c3:1d:26:
e9:31:23:18:9a:ad:60:3d:93:31:83:34:ec:cc:01:
ee:69:5f:2e:35:01:04:bd:b9:31:49:ac:5c:29:71:
6b:b9:a0:3e:34:e5:c9:fa:3a:ed:bf:f1:c7:cd:bd:
cb:a0:8e:e0:37:e4:40:60:b4:2a:fc:57:66:52:ac:
c7:60:dd:2a:fb:57:46:06:b1:e4:5f:75:f0:54:c6:
68:5f:26:ed:d7:d4:36:9e:9d:4a:06:9d:a4:0b:45:
12:3c:b4:96:13:14:01:29:c9:3d:67:52:20:b2:c6:
8d:0e:4e:32:54:a4:67:8a:0c:fe:65:52:1e:9b:73:
80:12:07:95:00:98:c7:3d:9b:84:50:8a:46:d4:b7:
82:74:95:ba:df:a8:b9:67:ac:c0:d1:70:34:ec:7b:
84:a8:f1:a8:11:21:a0:de:a0:2b:58:04:34:49:57:
19:91:ab:c3:4e:d2:0c:c5:8c:86:ba:84:45:61:b1:
06:8a:8e:a0:30:70:cf:d7:87:3f:b5:6b:a8:5f:23:
6d:f0:dc:4a:eb:d6:66:1e:07:f8:97:0b:50:8a:6b:
b1:64:ed:24:11:66:f1:96:c2:88:55:7e:54:0c:72:
06:df:66:c6:72:a2:57:ae:b2:a5:b5:da:42:85:f3:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:0E:63:25:61:45:76:0D:3A:5D:9B:F9:8E:20:17:EE:71:C9:49
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:16:e1:16:17:48:4b:be:4f:a4:83:5e:c0:92:f8:79:f2:9d:
d1:83:61:cc:d9:26:3a:75:59:ce:0f:1b:83:ea:83:fb:67:31:
2d:ee:2d:af:62:ab:cb:9c:9e:72:80:f9:9f:08:d5:64:7d:11:
52:e1:6b:33:cd:33:bd:00:d6:c4:7e:43:35:46:cc:fd:8d:b6:
f3:94:0e:25:42:95:4b:af:3a:49:8e:52:37:50:a5:35:3b:d2:
48:8f:52:28:13:b9:21:a7:2c:5c:f4:d0:bb:18:5e:fa:56:96:
a2:c1:f9:a0:7a:aa:bf:6b:43:87:1d:c7:df:2e:f5:9f:11:1e:
5f:d9:e0:4e:9f:b9:80:21:17:e9:1b:6d:72:3e:64:cc:c4:a5:
16:72:40:81:19:43:db:39:80:19:4a:13:29:94:69:b9:0f:09:
3c:8e:e3:a7:2c:30:5e:2f:db:07:38:2a:8c:59:18:94:af:77:
fc:52:7a:8c:c1:01:2b:25:f4:14:4b:53:99:10:76:1b:06:70:
3c:29:44:cd:1f:fc:f4:6e:3d:6b:9d:e9:21:fb:a2:25:54:76:
72:31:30:67:84:cf:55:d9:fd:2f:96:6c:ed:bc:f6:ff:47:3f:
5e:88:f3:ce:43:15:c3:aa:72:0b:7a:1a:c4:de:2b:af:4c:61:
4f:e2:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:46 2026 by rpki-client