
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: rXtp2zUJ5Fo6MmjlSJkqnbbBUpWsu54nYJ5Y+Kko7qg=
Subject key identifier: E9:82:21:FD:FC:A4:0F:FE:53:FE:2E:41:8E:51:F5:C0:1A:30:B0:87
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019E1D905ADF067EFD9E1ECBDCF3675B6CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 0145
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: Vt3N8IbsThIj6LDi4+rq8vzh++QmvGKw56zYE94UtV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5a:df:06:7e:fd:9e:1e:cb:dc:f3:67:5b:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=e98221fdfca40ffe53fe2e418e51f5c01a30b087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:20:28:b3:76:09:74:b3:7d:fe:f3:db:16:
11:08:73:a9:66:ce:8c:cb:fb:10:14:c2:79:fb:b2:
e2:b8:7f:b9:cb:af:29:3a:ad:ca:cf:85:87:a6:ee:
b8:ef:9a:b8:7a:2d:41:10:4c:5d:42:60:88:8d:f9:
aa:96:d6:6c:24:67:57:26:b8:26:5d:00:6e:07:61:
9b:86:f3:8b:e2:e0:36:5f:a7:86:4b:c1:2e:50:14:
3c:17:f5:23:82:41:6f:19:35:5d:ae:59:4d:4b:b4:
8e:5f:22:71:da:78:d9:62:ee:3f:4f:d4:89:94:aa:
21:72:a7:5f:d1:b2:37:f5:a9:08:c8:e7:a7:36:b5:
b2:08:ef:47:ec:3e:41:cc:3e:8e:d9:bb:04:b5:a3:
0f:87:61:1c:05:dc:f5:7e:23:a6:11:9d:b8:9e:bf:
79:5b:cd:d5:11:59:f2:0e:57:a8:33:73:f8:73:0c:
bf:d8:dd:e2:10:79:d6:46:54:b5:a4:89:c0:25:e3:
1b:92:3c:31:ef:a7:69:33:a5:7b:22:44:20:0c:f2:
65:82:72:6f:ea:a1:88:f2:9e:64:26:6c:61:90:9d:
91:eb:f0:f0:53:1b:66:38:fa:2e:85:da:c0:bb:dc:
02:ab:92:4c:c9:11:fe:48:96:ed:75:a8:a9:0a:36:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:21:FD:FC:A4:0F:FE:53:FE:2E:41:8E:51:F5:C0:1A:30:B0:87
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:40:fa:1d:aa:7c:14:32:c3:0f:90:4d:1f:a9:be:04:31:cc:
af:83:3d:87:ed:8b:90:11:a0:7c:29:d1:4c:7e:85:3d:6a:b4:
14:f0:1c:14:62:9e:fc:73:43:c8:2d:65:01:97:2b:b9:b1:01:
51:25:e0:25:c7:1a:27:68:a2:25:fd:bb:a8:a3:a3:89:c5:7f:
ea:b3:be:e0:41:fa:83:1b:c0:73:6c:53:ea:09:30:ba:f8:22:
a5:b0:02:bd:93:f4:e8:9c:8c:c6:ec:77:f2:37:5b:95:36:25:
56:5c:05:b3:b4:fc:8e:0f:78:9b:76:5d:d1:fe:be:96:9d:fa:
78:bd:7d:d1:db:5c:17:04:34:e2:7a:ca:44:51:da:ad:99:dd:
b1:66:67:39:9a:b3:79:d7:6c:c4:2c:5e:ad:70:57:03:b8:12:
04:6f:1e:28:70:ff:f5:0b:87:60:9e:a9:25:23:16:ce:d6:a8:
81:90:6c:1a:13:42:ee:d8:60:62:d4:50:cc:87:23:a2:fd:cb:
49:93:7c:1b:ac:6d:c2:d5:14:eb:2a:f2:eb:e5:84:a5:dc:d7:
46:b4:54:10:f7:fe:b7:aa:62:cf:b2:cc:20:3b:ad:8c:51:8c:
19:34:15:11:a5:88:9b:38:41:f7:f0:8d:e8:2b:1c:d6:10:23:
ef:9f:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:33 2026 by rpki-client