Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File: TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier: hsS2HFUcW2XaJjd4YoA7En54RQonSC+aQGPwql+CcqM=
Subject key identifier: 0E:EC:FA:94:E5:94:27:6F:DE:37:81:BC:88:D8:4F:DD:14:F0:25:1D
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial: 019D25F18D32CAB428641B76D67EFFB3DFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number: 0DB3
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: hrjvMd/egAPQH9dIsejBwdN27Uh8jtIK6JrqEwSLdxY=)
2: vAkzuvASkFh_KGqYPQNyZYP0fBs.roa (hash: KpkKu8c+7onfa9Op2gIOjP7LL4+RRO2mfg+8l2jgbPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8d:32:ca:b4:28:64:1b:76:d6:7e:ff:b3:df:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=0eecfa94e594276fde3781bc88d84fdd14f0251d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:38:db:8b:69:ac:87:37:7e:84:b4:12:91:
2f:2b:56:c9:e2:78:09:1c:97:1e:5e:1a:fe:73:61:
9b:b6:4d:26:f1:76:a4:01:28:32:0e:5f:8d:48:f8:
72:c0:f1:73:cf:25:32:55:cc:88:ab:f2:f5:6c:9d:
4b:1d:d2:ba:c8:a7:0a:13:17:d3:fc:b1:99:f4:1b:
df:cb:3d:32:e0:d6:88:af:83:b7:8f:16:84:d6:41:
d7:f6:cc:47:83:0e:8f:80:f9:08:eb:fe:f3:a1:9a:
c2:0a:3e:df:eb:7d:ea:11:a2:48:ff:c0:fd:69:c0:
01:06:ed:aa:4e:b3:3a:45:0e:8c:7c:1a:d0:f8:4d:
22:a5:96:9a:5f:71:d9:8f:30:8f:5b:e3:a6:4b:88:
47:7c:a1:2e:01:03:9e:64:a6:50:61:5c:8d:28:04:
81:e9:25:14:a5:b3:a6:bd:75:f3:7e:bf:8e:6a:be:
e0:79:93:2b:98:c3:4a:0b:3f:48:4e:86:19:c3:db:
e6:10:c4:df:d8:91:d9:25:4d:07:e0:65:61:71:b9:
81:ff:15:b1:ce:65:69:f2:55:37:3b:d3:f4:8e:42:
2b:0f:c9:49:41:c7:5a:df:f0:dc:3b:96:31:6f:06:
a7:ce:14:1c:a6:eb:bf:a0:c3:ce:93:fe:f9:3c:84:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:FA:94:E5:94:27:6F:DE:37:81:BC:88:D8:4F:DD:14:F0:25:1D
X509v3 Authority Key Identifier:
keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e8:61:9b:5c:cf:52:ce:a9:54:3c:f9:38:9a:fd:97:64:97:
ec:7e:fa:f4:50:2d:52:6e:bb:dc:5f:5c:8d:8f:80:37:11:36:
3a:69:f7:4a:ed:4a:86:3b:28:b3:b5:89:01:64:8f:a6:2d:47:
0c:d6:ea:98:72:28:ce:73:b2:3a:e3:47:fa:0b:d7:68:e0:ca:
b2:db:19:27:06:8e:70:52:c4:d8:87:bd:fb:78:96:99:af:38:
f5:cf:ab:e6:d3:ee:a6:3f:8c:17:cc:46:81:f9:e9:e9:7f:75:
ae:8e:6a:f0:61:3a:5b:cd:bc:4b:a8:10:f1:63:14:2f:ab:03:
08:3a:e4:aa:df:44:3f:81:4c:07:ab:a2:40:0f:02:3e:6d:7e:
18:75:5c:84:85:2c:45:dc:80:c5:32:41:b1:99:9f:93:5c:09:
1e:ec:bf:ac:fa:7f:df:65:40:b8:72:1c:7e:b6:9b:62:57:74:
6f:e0:01:b4:a1:f8:b3:1a:b1:cb:39:71:2b:52:72:f2:fa:d5:
ba:bc:65:b4:64:ab:30:02:78:8a:f8:1f:bd:7b:c3:14:95:98:
35:95:e0:87:b0:b2:85:89:9f:38:3d:68:33:7e:24:e7:59:97:
de:b3:95:d7:2b:61:48:65:aa:d4:ad:6a:6b:ab:a0:44:ca:f1:
16:9d:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:56 2026 by rpki-client