Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: Ek0fdJ6Xm+mFA/7d03iel/MDMN13x5mtKmXxG0ESI00=
Subject key identifier: 96:85:F8:2B:C6:64:44:A3:35:D5:7E:41:86:85:08:7C:C5:0F:AC:FC
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 019F9323F481D004D7F9ADD33B8D2EC464D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 1403
Signing time: Fri 24 Jul 2026 08:00:34 +0000
Manifest this update: Fri 24 Jul 2026 08:00:34 +0000
Manifest next update: Sat 25 Jul 2026 08:00:34 +0000
Files and hashes: 1: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (hash: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: BhfDOYMMyLMWZdni2SmLlCWrw0p9V/pafszLRTU3tbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f4:81:d0:04:d7:f9:ad:d3:3b:8d:2e:c4:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Jul 24 08:00:34 2026 GMT
Not After : Jul 25 08:00:34 2026 GMT
Subject: CN=9685f82bc66444a335d57e418685087cc50facfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:31:ce:39:f7:55:3e:6f:fe:e9:e5:94:7d:
3b:11:3b:24:8e:42:cb:fb:2b:5e:e8:c4:32:01:c6:
c8:0e:af:7c:80:e9:db:00:09:14:10:aa:d2:ae:4a:
2c:5c:7f:33:91:b0:b4:97:3b:74:58:87:0f:53:8a:
ad:86:15:47:05:17:88:d8:21:cb:e0:e1:54:79:f2:
72:52:e4:f4:3d:11:39:f5:bd:a5:fe:c2:72:03:e0:
6f:54:7f:46:18:e6:ea:c8:62:d9:ba:7e:ec:77:58:
33:2f:c1:c4:f2:60:9a:af:ac:43:05:dc:82:ee:c3:
d7:ee:c6:82:2e:97:d5:13:cc:37:86:87:47:fe:3b:
9d:bc:80:04:69:1d:67:dc:aa:88:4c:2f:0c:e8:dc:
81:f0:14:46:11:24:ad:ee:a8:59:22:92:a5:ed:24:
17:d7:f9:a4:6a:b7:28:49:ba:9e:c6:f2:f7:8b:a4:
78:e0:85:60:7b:eb:97:01:e3:ce:9f:70:86:86:a6:
d7:7a:09:ec:57:b3:01:d7:63:43:1d:49:dc:f2:6e:
0f:df:cf:83:53:ec:ce:07:09:71:9e:52:10:a4:6e:
ca:26:60:b3:63:56:17:e8:92:2c:47:82:2d:7b:e7:
84:b7:d9:29:3d:25:87:bb:52:ed:86:eb:b5:5f:51:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:85:F8:2B:C6:64:44:A3:35:D5:7E:41:86:85:08:7C:C5:0F:AC:FC
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:53:6f:e0:38:b1:70:8f:72:06:0a:57:7a:f0:cb:e9:9b:
22:e1:ba:19:51:e5:27:3e:43:4b:36:7c:b6:51:8a:38:9f:5c:
61:6f:21:bb:42:dd:3e:93:31:fe:da:33:0e:d6:03:cf:33:b1:
12:ed:19:06:95:70:2e:0a:c9:e7:b1:a8:88:c6:b2:48:95:5e:
1d:e5:78:41:2d:55:51:f0:51:41:da:5d:0e:f9:f3:0e:6f:29:
13:97:09:c8:a2:3c:05:2d:bf:36:d9:81:4e:24:ab:17:1d:0f:
89:7d:a0:93:e9:c3:d2:fb:85:4e:60:56:d8:d8:92:71:5b:e0:
4e:ef:5a:6b:e9:fc:89:28:f7:70:53:c8:89:6d:bd:26:c3:ae:
7c:28:66:cb:4f:7a:05:1f:c0:70:d5:43:3d:6c:9b:cd:2b:53:
c3:b8:6c:f5:11:65:51:f0:3e:e8:07:54:5e:ac:45:aa:c8:7a:
16:4d:a3:79:e7:78:e9:a3:f8:f9:83:4f:a8:5c:6f:89:48:2d:
f2:4c:99:ba:61:d7:85:5e:87:a0:2f:b9:c2:6f:2a:0a:e7:1f:
ca:b1:7a:92:8d:4d:54:e3:7a:66:12:3e:2c:20:bd:0b:78:69:
4d:4b:94:04:25:7a:7c:b0:4c:fc:3f:99:7d:50:90:79:7d:d9:
d4:48:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:19 2026 by rpki-client