Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: ueztpq14rf9uxbe2heZ2LzwSLWOw4Z4kYX27XA8WosE=
Subject key identifier: 41:FC:0F:07:27:15:CA:E4:75:66:5F:A0:40:53:C9:4A:67:43:F9:C0
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019D2CCF156DF75FEBA5185B7A98FA499D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 83
Signing time: Fri 27 Mar 2026 01:01:02 +0000
Manifest this update: Fri 27 Mar 2026 01:01:02 +0000
Manifest next update: Sat 28 Mar 2026 01:01:02 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: w6aDS8ZoemtavMt2RLhzH7NjbYvCet+7ng1Up6HLqL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:15:6d:f7:5f:eb:a5:18:5b:7a:98:fa:49:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Mar 27 01:01:02 2026 GMT
Not After : Mar 28 01:01:02 2026 GMT
Subject: CN=41fc0f072715cae475665fa04053c94a6743f9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:8f:3f:c2:3d:6d:25:31:46:a2:8e:aa:0a:
96:b9:d6:bf:90:53:45:d6:ab:d9:e2:97:c6:b3:c5:
25:06:92:95:ea:8b:ec:06:5f:ce:1e:67:9a:75:cf:
ac:b3:45:c5:6b:bf:5d:4c:12:70:f3:77:97:86:c1:
3e:fd:aa:a4:d3:e4:f1:d5:df:61:65:dc:3b:ae:56:
a6:6c:71:78:83:1e:4b:80:25:d2:c2:9c:cc:15:78:
60:f1:21:ad:cc:70:55:7d:7f:d7:05:98:db:25:19:
1a:50:62:da:1c:3f:ac:67:d4:3f:cd:bf:60:29:32:
0f:e6:60:72:00:15:ea:cd:d9:c1:ee:0e:c6:f8:80:
e9:31:76:fa:5a:73:ab:93:04:ee:bd:08:e9:46:89:
c2:21:a4:19:d6:d6:b5:bc:d6:2c:97:6b:8c:5a:dc:
3c:52:ee:a2:88:76:d8:29:3f:fd:89:19:9a:b3:c3:
37:51:62:b6:73:4b:39:4b:aa:24:29:1f:39:a6:87:
29:3e:0e:14:90:26:b1:9f:a2:cc:a1:9f:7c:78:4c:
8f:dd:38:22:01:bc:40:f5:65:dd:26:b7:c5:26:90:
a1:9f:bb:4e:6f:1e:71:9c:a1:96:29:df:f7:6b:94:
5c:69:48:4c:a8:33:b9:8b:6b:c0:42:62:32:3d:8c:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:0F:07:27:15:CA:E4:75:66:5F:A0:40:53:C9:4A:67:43:F9:C0
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0e:9b:27:06:ce:f2:fb:d0:8c:70:cc:52:cb:5e:e8:07:73:
8e:c7:ce:0e:97:f4:0b:85:5f:23:17:27:fd:48:84:1b:5e:2a:
15:ae:64:dc:90:d7:9a:23:10:6a:fa:e2:21:1a:16:c7:ac:3f:
c1:37:6b:c8:a7:66:17:bc:16:c8:a9:e8:a5:0b:87:9a:be:c2:
1c:85:3d:c2:bc:67:bb:23:cc:f3:de:15:0c:2b:a4:12:05:b3:
de:7b:e3:04:0c:54:80:cc:36:c8:7d:ed:16:05:b4:be:f5:d3:
b8:6f:d0:94:ab:d2:f1:53:e8:45:c9:50:54:03:43:2a:7b:d1:
22:c8:6c:bc:14:7f:d9:18:bb:2a:78:c1:c9:7b:8d:e2:93:06:
d1:28:11:16:f4:44:84:ea:2b:4b:0f:6e:ff:19:f4:02:5a:c5:
0c:c7:46:03:d9:0c:ff:5b:2e:41:3d:34:cf:e5:83:d0:1c:09:
d8:8b:b3:aa:df:fe:c9:5b:0a:e6:be:46:ec:49:93:28:6f:22:
de:85:d8:40:ed:9e:68:2d:f2:c2:f4:6a:ec:83:a4:e3:af:31:
6f:5d:10:9a:1b:c4:85:88:54:4c:c2:d9:ab:60:56:9e:a3:09:
8b:88:60:da:89:69:e5:17:13:4e:ff:d6:f1:6c:5c:86:12:b5:
2f:c6:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:41 2026 by rpki-client