Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: EMhp/+A631kCYxJBcmooACQDIeG1MKxsDPPOFLlIYBo=
Subject key identifier: EA:83:E8:97:A7:62:1E:6B:39:14:52:DE:1F:E6:21:30:D6:21:23:64
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019F90FFA6EF678B4C6C27A192B72AD0CE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 01C0
Signing time: Thu 23 Jul 2026 22:01:41 +0000
Manifest this update: Thu 23 Jul 2026 22:01:41 +0000
Manifest next update: Fri 24 Jul 2026 22:01:41 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: amaaXYR+eSJRtHjDCC4KQA1JS4/EG1kMHYIa2PIQe7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:a6:ef:67:8b:4c:6c:27:a1:92:b7:2a:d0:ce:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Jul 23 22:01:41 2026 GMT
Not After : Jul 24 22:01:41 2026 GMT
Subject: CN=ea83e897a7621e6b391452de1fe62130d6212364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:0b:7f:ea:de:fa:6a:ee:f5:a5:49:c7:6e:
92:9a:d2:48:90:71:99:f7:61:ca:78:2f:86:2a:4e:
6c:0c:a7:f8:9c:da:48:a1:f4:fc:c0:c4:17:28:71:
9c:4f:64:05:eb:8b:2d:86:43:54:60:61:9f:a9:83:
c1:49:04:07:41:30:76:45:f8:db:47:54:ce:0c:cb:
e7:1d:9b:79:e4:b4:f2:64:4a:d5:44:cd:5f:a7:38:
33:87:c1:e4:20:94:79:90:e9:6a:53:2b:4c:fa:97:
a4:27:4b:22:5b:f7:f1:ec:6d:e6:ce:63:1e:ec:2b:
84:b2:e7:7a:0f:66:c0:8c:8d:02:11:71:4c:40:90:
d9:3c:db:c1:fb:a3:8e:e9:eb:ab:5c:c6:7a:cb:37:
a0:64:b1:5c:11:c1:eb:83:0f:12:fa:17:8e:37:a9:
a9:9e:c0:20:58:66:1b:d4:ed:4d:a4:c9:a0:f1:de:
be:6c:02:c7:3b:65:ed:80:b9:3b:31:27:8e:25:9a:
8b:c0:bd:b0:ff:e6:6c:0e:90:75:12:29:30:76:92:
3d:1e:e6:fe:f3:ae:48:f6:61:30:ee:6f:81:b1:bb:
45:36:a6:09:0f:96:2d:14:ad:c4:c6:d2:c8:19:31:
ed:77:e5:54:44:c3:92:3a:16:a0:d8:ad:91:68:23:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:E8:97:A7:62:1E:6B:39:14:52:DE:1F:E6:21:30:D6:21:23:64
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:a4:8c:fb:a3:2c:24:f3:95:ee:d2:f3:6e:b9:3a:16:d3:
25:d0:aa:58:65:08:7e:98:af:2d:c4:34:4d:8a:b6:e2:fa:1d:
5d:ee:d1:5a:54:6c:3c:fc:52:41:38:a9:2e:70:94:33:f4:3e:
5c:e3:ba:7e:d9:a0:50:b2:9e:42:d9:eb:14:a4:ed:44:25:66:
fa:68:fa:60:90:34:c4:be:f5:61:19:78:36:b8:9d:16:c0:16:
c7:2c:27:9e:21:5a:ef:d5:97:8f:44:4e:57:99:57:c4:c0:5c:
8e:e3:f8:d9:64:6c:af:c5:97:62:37:23:00:9a:6a:7e:20:7e:
47:65:ff:ce:d7:35:61:30:13:13:4c:c3:3f:87:46:19:8d:48:
86:89:a2:24:c7:aa:df:de:06:67:32:28:9c:d4:a1:8b:62:92:
e9:6c:90:ed:68:3b:8f:b0:e2:c3:9d:27:80:4a:68:c2:36:ac:
88:0f:00:86:23:73:f0:c0:50:3c:66:34:c1:d5:4d:b3:f8:43:
b7:8e:87:62:f8:aa:47:f4:03:cb:04:c6:90:14:5b:a8:be:e2:
47:3a:f6:47:98:02:88:1f:8a:c2:32:4e:e4:fa:d8:f9:1b:dd:
58:24:f9:23:75:c4:a5:33:5a:64:fb:31:d4:8f:8a:11:0e:05:
84:dc:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:58 2026 by rpki-client