Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: whpyknveVxPJ/BukItHh8l1lnqNLpywXj9g85e9sp/s=
Subject key identifier: 4A:80:80:C4:C0:E6:39:98:4E:3F:0C:87:73:D2:5E:79:49:61:26:16
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 019D2772B0048E8F1413CD8116B6A86F501B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0F00
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa (hash: YcDjRze4iyKPM9dw93kDNAJsoNt848x2xiKGlnWWZSI=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: eQscx2n2hnOEPh8nc7gH5Tw6NJKD8pvTExDEua8zjOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b0:04:8e:8f:14:13:cd:81:16:b6:a8:6f:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=4a8080c4c0e639984e3f0c8773d25e7949612616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:1c:97:2d:4f:7a:90:dd:7f:22:70:e6:72:
95:06:4b:5b:99:05:c4:b8:6f:f1:8b:78:ae:ef:4b:
98:3c:bf:06:5d:00:8f:9c:06:1c:09:dd:f8:9c:64:
a8:2e:ea:23:21:80:1a:9f:7e:ba:a1:21:1f:87:f9:
ef:20:2b:89:d8:59:67:2f:aa:72:63:9f:22:1d:44:
63:b2:f2:a2:af:cb:33:3d:0a:50:fd:a6:15:e4:69:
9d:7e:7b:c9:65:90:c0:8e:75:9c:22:2c:9e:a2:c2:
11:4a:be:4d:09:25:a6:39:11:f0:c9:5b:8e:1d:b4:
5a:01:82:45:c7:a5:e6:bb:6b:dc:3d:db:44:63:b5:
a7:63:8c:9c:59:ab:9f:45:22:87:d8:16:5a:3d:11:
ba:ec:e9:fb:4e:c8:10:01:d0:fa:f0:b7:a4:23:6b:
2f:bf:65:d3:35:d8:e1:c7:32:97:f7:c0:a6:c6:40:
0f:89:86:00:8f:d9:da:3e:49:8b:b9:09:b3:56:f6:
76:fb:12:dd:37:ab:12:9a:30:2a:81:f6:4f:b0:6e:
a2:85:b9:88:c4:a6:86:4b:e6:5a:2f:73:fd:33:46:
04:46:10:67:05:a1:3d:d0:7b:99:3d:0a:4c:d9:89:
90:f1:d6:d4:06:71:40:80:0b:0e:b9:89:e9:ab:ff:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:80:C4:C0:E6:39:98:4E:3F:0C:87:73:D2:5E:79:49:61:26:16
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:07:5c:70:03:ac:4a:b7:3c:89:06:85:19:d9:15:ab:d2:e1:
33:bb:bc:c6:9c:6b:c9:48:03:92:dd:00:2e:5b:dc:ca:94:bc:
e3:d7:2e:3d:da:5f:f2:91:93:f8:b0:9f:20:52:2b:1f:66:af:
75:b9:4c:5d:1d:c0:e6:4c:f3:a8:f0:da:29:1f:a6:33:ec:a3:
8c:d2:d8:d3:88:65:c5:0c:9b:91:d9:7a:f8:5e:6a:7a:d2:1f:
a5:ec:5a:3e:21:a9:1f:a4:36:15:30:6d:0a:1b:69:1e:9f:28:
b4:cb:f1:ae:f8:d0:c6:c4:cd:7f:5f:b9:7a:28:e6:ec:3a:4b:
6b:c1:bb:d6:d3:c9:28:73:47:a3:d4:d7:a2:b6:a0:5f:8d:6f:
3f:bb:18:96:60:68:9a:ce:01:29:39:6e:13:aa:ca:63:9b:ec:
5a:58:63:cd:12:c7:e1:44:75:d5:95:cc:cd:5c:ce:5d:17:14:
24:de:76:5d:25:d4:74:ee:10:33:89:c2:c0:51:5b:4f:38:07:
bb:0b:13:73:87:da:77:ac:a3:d7:84:6a:0e:84:50:90:d4:75:
90:c3:38:b3:39:7c:b8:74:49:f5:32:be:64:2c:24:8b:4c:f6:
5f:82:cd:d8:2a:07:ab:b3:c6:ac:98:be:9b:8a:89:80:f5:da:
ce:ef:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:31 2026 by rpki-client