Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: 0D3G0Rg/lGX7zXpZzm+iXY65fFMhLmxUa5OK29IcNEo=
Subject key identifier: D8:6F:CE:25:B4:90:03:B2:E8:76:5A:A9:71:23:1E:55:0C:4E:B6:B8
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 019E1DC76AA75CD8926E3E1CC567E557B3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 18F4
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: WYougfzbO3pUtPQcOX9UFCepCqSjIYOnDi/ECeLSD4s=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:6a:a7:5c:d8:92:6e:3e:1c:c5:67:e5:57:b3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=d86fce25b49003b2e8765aa971231e550c4eb6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:d9:0e:3e:7c:08:67:64:ce:8c:9e:96:5c:
fb:e1:b6:13:8e:83:96:3b:07:65:5b:c2:6a:44:db:
7b:53:c8:fe:f7:c3:50:81:d7:54:80:3a:81:74:53:
a1:1e:57:c9:b9:38:07:4a:73:f0:d1:80:0c:ac:3c:
6a:82:96:87:00:78:89:1d:e2:38:74:d2:d4:d5:b1:
e7:1c:dc:de:f1:e9:56:ab:0b:62:34:ba:5d:31:c7:
16:1b:0f:f6:8e:9c:e5:08:57:89:fb:6f:83:94:30:
7e:44:88:dd:ed:66:0d:ee:2f:ed:ae:2e:95:49:31:
f3:8e:69:87:58:ca:34:47:54:5c:f9:10:70:71:3d:
c6:11:70:bf:f7:21:1d:ad:54:a0:e5:87:a9:67:06:
e5:1a:7d:9b:d7:8f:ca:e8:03:4c:e9:3f:e0:2c:11:
07:5b:da:47:3f:2b:4b:6d:7d:b5:ca:7d:f3:d2:70:
2b:4c:86:b4:ba:e9:10:66:50:f8:7d:84:e5:f1:d2:
16:ff:9b:26:43:14:bc:63:d1:e1:1c:59:c1:88:ed:
b2:ba:9c:bb:cf:ba:48:35:52:a3:b0:11:d3:d7:7a:
55:63:5e:98:83:e0:6f:3d:15:dd:fd:47:6e:51:1c:
a9:a4:1c:3d:84:d7:33:eb:8f:c7:2b:54:10:fa:00:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:CE:25:B4:90:03:B2:E8:76:5A:A9:71:23:1E:55:0C:4E:B6:B8
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e1:2f:f5:bf:af:26:7c:54:b6:6b:32:64:7a:bb:cd:4a:7b:
cc:39:a3:0e:95:4c:71:31:b7:ba:d0:93:36:14:a6:be:ce:a5:
67:d3:72:80:61:b1:3e:61:c5:db:69:37:53:0a:9d:9c:fb:fe:
c4:a1:16:77:76:8a:70:27:fa:b2:a6:b4:bc:c6:5d:aa:b3:24:
9e:07:cc:bd:35:29:45:91:eb:83:6f:ee:d5:7f:0e:b5:0b:26:
22:87:c7:91:63:d8:9e:72:d9:be:79:5f:be:a6:07:e2:80:f2:
c8:e2:dd:d8:b4:92:ce:32:90:05:66:b9:90:49:2c:ea:78:82:
f7:cd:f6:5b:af:40:70:08:17:91:c7:4c:ed:a2:0a:c8:63:3a:
53:98:85:47:9e:44:25:c5:04:05:97:56:83:26:8a:84:3b:64:
1b:df:81:e8:d4:ac:29:df:fe:71:d1:25:e4:bf:df:41:fd:b4:
45:3d:0f:6e:af:6e:f3:92:9a:88:ca:e7:e7:5e:db:bc:6b:6a:
b9:08:a4:0d:e6:64:ae:1b:a7:67:61:d1:d9:f5:9e:e2:d5:2f:
2a:0a:48:0a:58:0b:e8:56:89:ac:37:82:b1:aa:06:95:c3:f3:
a8:cf:df:1d:58:76:c4:aa:cc:c1:2d:d7:46:26:61:71:df:6b:
e3:9a:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:31:07 2026 by rpki-client