Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: +yeKlQVQqbGPAulQ8Mj88tH0RrnB4bpsrOIOoZl+4vw=
Subject key identifier: 51:15:FD:70:FB:56:D2:0D:25:36:D8:2A:D5:3C:47:DE:4B:EF:BD:40
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 01A10F95FBC252AC9F53BC9DF1128A459FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 14C9
Signing time: Tue 06 Oct 2026 05:00:49 +0000
Manifest this update: Tue 06 Oct 2026 05:00:49 +0000
Manifest next update: Wed 07 Oct 2026 05:00:49 +0000
Files and hashes: 1: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (hash: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM=)
2: Kng8WN3TArrnNPoyNaNDEEsmxbw.roa (hash: zHx9dAEAvR3nmTiDNacQD/5h5khoJ8N9qawCWG7hAtw=)
3: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: NCpFH7sn0V0fAqFz2JrIVxfvIZ8gmEVwamZxOHGEG+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:95:fb:c2:52:ac:9f:53:bc:9d:f1:12:8a:45:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Oct 6 05:00:49 2026 GMT
Not After : Oct 7 05:00:49 2026 GMT
Subject: CN=5115fd70fb56d20d2536d82ad53c47de4befbd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:50:4d:61:a3:3b:95:e5:16:77:26:79:41:
af:50:cf:97:7e:46:cb:a9:ec:de:7e:9c:60:7f:26:
49:4f:10:0c:29:b6:c1:32:e9:ba:33:2d:ee:14:30:
24:b4:d1:42:2f:0d:05:51:45:c7:a6:cd:15:63:28:
24:0e:6f:fd:f7:1f:c7:66:35:f8:4c:4f:70:c0:90:
91:b6:29:38:4e:9d:ad:54:4e:1d:9b:de:fd:4d:32:
a3:69:30:ac:ea:72:69:de:2c:fa:f2:a2:0f:79:60:
35:c2:81:20:ce:c0:4e:51:10:32:04:98:72:6e:23:
dd:99:5b:a6:0a:b8:3e:51:e9:34:86:ac:aa:5b:09:
87:6b:4c:d4:04:ea:54:22:0c:38:f3:9d:cd:4b:2f:
db:68:1c:11:ff:b5:95:5e:62:31:44:7d:12:87:b9:
66:e5:53:67:97:f8:db:7c:21:3c:bf:55:bb:61:56:
a5:28:10:09:d1:f4:d5:63:8d:52:94:e8:cb:92:00:
24:b5:08:d7:c7:0f:1b:2a:31:9e:37:14:e0:5e:68:
cf:49:ac:c0:76:5f:4e:da:e1:b8:d0:0f:bd:7f:5d:
6d:79:f6:ed:7c:9a:14:d1:fa:df:8d:aa:98:d3:7f:
82:3a:2d:34:c2:b4:ab:7d:33:86:f2:80:24:9f:23:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:15:FD:70:FB:56:D2:0D:25:36:D8:2A:D5:3C:47:DE:4B:EF:BD:40
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9b:59:80:57:06:a7:b6:3f:03:48:b4:88:93:c3:5f:cc:b7:
f7:d1:be:23:53:8b:8e:a5:f1:37:64:be:4a:28:8a:26:7f:10:
de:4f:53:71:84:06:e1:89:6f:9f:85:0d:96:d9:64:a8:34:38:
e7:cb:c6:ce:05:9e:cc:15:a8:99:6d:4c:5f:a4:af:9a:59:15:
3b:c8:58:0b:94:51:f1:1f:be:14:ba:1e:b3:ab:2f:7e:ba:4d:
85:6a:09:89:16:5c:37:ed:98:72:3b:0b:68:f9:f2:9b:e0:ff:
91:58:6c:13:3b:2e:bb:49:83:58:d1:8e:37:d0:0b:67:0d:7f:
1a:86:4c:2d:89:c9:2f:a1:a6:cf:26:2f:cd:37:2e:18:b8:c1:
e9:e2:95:21:bb:78:e7:29:23:07:2f:e8:6d:1a:2f:54:12:c4:
db:b6:32:b2:fa:c0:3e:50:c6:07:68:27:7a:30:b5:56:30:8a:
98:21:43:55:98:ae:89:82:e6:de:1b:23:8b:25:bc:a1:73:42:
c5:04:87:b5:ee:4d:f4:04:c7:c4:bc:dc:f7:e2:bd:e0:4a:bf:
9d:b9:4b:ae:86:de:b2:c4:27:c8:85:f1:7c:99:7a:74:c5:ba:
ea:15:13:fd:18:65:2b:e9:3c:4c:03:40:93:08:ff:22:f8:78:
3d:9a:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:03:52 2026 by rpki-client