Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File: TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier: VCjt2VfpVvhjEZ1OgutqA9mctTA8WgIY8xAyBJ+Nnz4=
Subject key identifier: 62:40:B2:00:9C:0D:52:06:B1:7B:DF:3D:C3:80:27:50:A2:AA:85:4B
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 01A131EAFDFED7BB109D1ADB533128F95F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number: 0889
Signing time: Mon 12 Oct 2026 21:00:46 +0000
Manifest this update: Mon 12 Oct 2026 21:00:46 +0000
Manifest next update: Tue 13 Oct 2026 21:00:46 +0000
Files and hashes: 1: 1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa (hash: fjeWtz//51nB13NzQwtc912b3agAHVfHErKRO/L6d0o=)
2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: qZUoqrPe4Ch8unkdK8H6zwNLWe8zN+ktW9d5MrEu8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:ea:fd:fe:d7:bb:10:9d:1a:db:53:31:28:f9:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Oct 12 21:00:46 2026 GMT
Not After : Oct 13 21:00:46 2026 GMT
Subject: CN=6240b2009c0d5206b17bdf3dc3802750a2aa854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:27:41:80:e3:ab:ab:ab:4f:ba:58:6f:1d:
b2:2c:f9:6d:23:bb:1b:80:d5:d3:c9:e0:de:48:b6:
25:65:f4:15:6a:b8:b2:4b:e9:f5:ee:81:7e:ee:44:
37:9c:26:05:42:7b:e9:0b:81:df:14:99:51:21:72:
e4:09:d0:f2:62:1e:55:16:12:45:96:2a:bd:7f:4e:
60:ba:b2:44:5b:70:ea:f0:69:ae:44:bc:61:81:1a:
a2:bf:21:4c:97:2c:43:6d:fb:ec:34:13:1b:09:43:
12:20:79:7c:76:ac:34:6e:67:df:0a:20:b1:53:67:
12:b9:8f:06:7a:78:94:ad:db:91:52:48:53:65:44:
16:dc:a6:c6:4f:08:5a:e2:35:56:c9:9f:37:ea:5e:
ea:07:91:b3:31:df:5e:0d:1d:d2:89:95:19:f1:f5:
8a:b2:fe:2c:cd:4c:92:b8:c3:c5:e8:94:8e:d5:b7:
57:20:c1:ab:c5:71:b5:3e:ec:30:b7:55:3d:33:26:
9e:bb:40:c6:75:8d:ae:e3:9e:1e:ac:56:62:f4:56:
61:5b:30:dc:07:62:59:c7:86:6f:13:53:64:51:7d:
04:b9:04:5c:c6:d1:f8:91:3f:50:6d:4a:d1:d4:63:
af:85:19:79:51:c3:79:e4:a8:4c:ff:b5:46:9d:4e:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:B2:00:9C:0D:52:06:B1:7B:DF:3D:C3:80:27:50:A2:AA:85:4B
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dd:b8:32:df:0b:bc:9e:0e:d2:ec:31:d0:da:71:f3:45:27:
6a:2c:b0:1a:d3:92:82:11:9e:be:ef:8c:34:e3:5d:92:51:94:
0a:9c:99:3d:e4:4d:e5:eb:cd:b4:61:d5:92:7a:52:f0:8d:22:
11:17:a3:e5:d1:a4:6f:22:45:e1:93:b1:ad:9d:3b:8d:33:2e:
b1:09:9f:ba:52:38:1e:5d:a9:00:86:e0:dc:e1:6a:21:51:a2:
8f:73:fb:b8:c3:0b:94:20:4f:ee:a7:17:e7:fe:ac:36:a9:6d:
a0:27:b5:a1:4b:79:3d:05:d8:14:74:41:db:95:9a:25:5f:00:
78:ed:40:ca:b4:0a:05:f5:0d:0b:b0:01:c6:4a:6a:00:8b:b1:
b5:21:a5:0d:42:10:93:04:84:df:29:e9:b6:6c:28:15:f3:d7:
f6:93:13:38:ce:87:5e:ab:6b:07:a6:b0:a5:ec:56:a1:0b:ff:
c1:57:d1:be:f9:79:3c:41:dd:61:1a:14:78:bc:1b:04:a6:0d:
80:c4:17:f0:bc:2d:6f:4a:03:4f:52:14:f6:52:0b:29:d7:0f:
c3:d9:06:b7:b1:ef:4a:25:77:1c:68:27:a0:a3:11:a9:7c:bb:
26:80:02:5a:a9:24:37:35:c5:98:c8:56:56:cb:36:28:e1:b6:
b7:6a:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:13:20 2026 by rpki-client