Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: R4q+MVJSXZAKUuxiLWYXNapxC4PsahWIs3H677DJLdQ=
Subject key identifier: 1D:71:10:A8:B9:AA:39:AD:0C:47:AD:3D:C3:DE:BE:37:E1:82:DD:6F
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019E202459A4B5E8777E5AE7CA3A4EA8E56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 0101
Signing time: Wed 13 May 2026 07:01:53 +0000
Manifest this update: Wed 13 May 2026 07:01:53 +0000
Manifest next update: Thu 14 May 2026 07:01:53 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: hpF5oTMbWP7eTTN0KtMEWLQY5WsDrWVupQuGCUfPBSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:59:a4:b5:e8:77:7e:5a:e7:ca:3a:4e:a8:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: May 13 07:01:53 2026 GMT
Not After : May 14 07:01:53 2026 GMT
Subject: CN=1d7110a8b9aa39ad0c47ad3dc3debe37e182dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:81:89:6b:74:e9:3b:c9:58:1f:30:5c:24:
0c:04:cc:46:08:65:85:3d:b7:ec:84:10:c3:34:dc:
f5:41:55:30:6e:fd:c4:70:5c:47:3c:48:7e:90:f9:
86:9c:9b:2e:71:3a:64:88:fb:f4:84:fe:23:76:c1:
bd:6b:30:f9:ef:6c:a3:f6:f0:bc:d5:4f:9b:b3:ff:
d3:e2:b6:fd:40:b1:3f:b3:35:36:98:05:8e:75:91:
5e:c5:8b:32:b1:08:c2:96:7b:e2:c8:36:73:bf:8f:
1b:f0:aa:f1:26:40:95:12:ab:54:96:f6:b7:a0:04:
51:e3:1a:a9:f7:63:cd:82:b8:c9:47:f0:e6:32:51:
8e:a1:a7:b9:45:e0:57:1b:3b:39:06:92:a6:81:20:
56:46:c6:06:16:00:21:f4:08:f1:a4:8b:32:3a:e3:
9f:d4:0f:db:e9:09:3f:a5:b7:e2:7f:54:03:43:e3:
b6:67:6c:42:95:22:9f:87:fa:c2:9a:0e:fd:cb:6e:
f6:89:d5:96:4b:26:5e:1f:3c:d5:c9:61:cb:03:4a:
43:81:1e:39:71:f8:0d:64:13:62:ba:ee:88:0f:09:
01:42:c5:18:71:b4:2e:3b:15:43:d1:b0:4b:d5:00:
22:b4:9d:21:49:4b:9e:bf:92:5c:3d:8b:85:ea:46:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:71:10:A8:B9:AA:39:AD:0C:47:AD:3D:C3:DE:BE:37:E1:82:DD:6F
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:80:dd:70:cc:a7:17:20:12:1d:fd:f5:57:ce:7e:60:b8:19:
54:6d:07:e2:16:d3:09:00:d8:48:c2:0e:53:0f:0d:89:bb:f2:
7c:0c:88:ac:65:93:dd:89:ea:05:85:3d:0e:50:00:99:90:51:
e0:38:7b:18:6a:d6:7d:84:e4:66:93:20:92:d7:9f:ad:f3:b9:
05:24:db:48:49:18:52:d9:16:36:49:ea:e8:f0:a9:4b:62:9a:
92:3a:13:8d:5f:d8:48:35:3f:70:6e:24:ae:0f:02:1e:fc:b9:
17:db:10:8e:8e:03:ab:6c:36:6d:0a:42:42:a1:c7:d4:89:fd:
66:6c:e0:ba:8c:a5:95:57:c3:81:00:56:b9:1c:95:fc:f1:92:
1a:64:66:19:14:d0:de:06:5f:35:5d:54:0b:72:0b:75:b2:f7:
46:ed:76:84:65:3f:a4:9c:20:36:01:4c:3f:58:10:60:14:98:
f7:01:07:33:7f:c5:63:cf:eb:a5:4f:05:39:f6:ca:ab:28:49:
de:71:e3:75:85:2b:5e:43:3c:bb:9f:af:4f:85:da:85:fe:3f:
25:12:ae:c2:3e:99:8e:3d:51:df:16:4a:04:85:09:ac:9d:63:
b6:83:9e:85:ac:dd:3d:d2:d3:52:0f:7a:65:fe:e0:d6:21:ab:
6a:46:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:51 2026 by rpki-client