Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: gS2UjIMDPfA58TsSVmV+gsodPKqyowAbl+IYZVPViBA=
Subject key identifier: 10:75:F4:7A:26:10:FB:95:C1:77:3E:CC:1B:6B:87:5D:37:AB:6B:09
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019D2470D87886F0DA5D95C99DC6DCA548B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 10:01:08 +0000
Manifest this update: Wed 25 Mar 2026 10:01:08 +0000
Manifest next update: Thu 26 Mar 2026 10:01:08 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: UBr8nQr/zY1Pruee/WZUVbIMVSmnduhQ9PVtMAqOTUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:d8:78:86:f0:da:5d:95:c9:9d:c6:dc:a5:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Mar 25 10:01:08 2026 GMT
Not After : Mar 26 10:01:08 2026 GMT
Subject: CN=1075f47a2610fb95c1773ecc1b6b875d37ab6b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:d1:b8:5a:57:d7:2c:64:83:57:e8:56:29:
e4:e0:19:20:8c:9a:21:36:b7:6b:08:92:3a:a6:62:
17:42:e2:61:4f:72:50:80:6e:98:f4:7f:7d:31:41:
90:41:a9:78:a3:74:24:a0:61:d5:cd:9e:95:eb:0f:
82:f0:96:b3:3b:02:15:63:a2:f2:6e:91:9b:cf:00:
f5:21:da:09:5f:64:2e:0c:fa:96:91:72:0e:84:76:
98:ab:30:5e:8c:dd:cd:62:78:a4:b1:3e:a4:00:2a:
16:3f:b3:5b:52:eb:4a:b1:f8:87:63:44:6d:7f:01:
ac:47:5b:3c:a6:69:e1:6d:de:61:1d:85:50:1a:9f:
07:0a:4c:e6:d2:8d:09:ab:51:71:cf:92:7d:cb:07:
2a:0c:90:1a:bb:67:40:48:a1:d8:f0:b2:a0:41:91:
fc:31:fa:fa:a3:c2:f4:82:c7:e3:e7:0c:b2:48:76:
9b:73:85:e9:c0:88:6c:9c:5e:e5:81:b8:19:9f:c2:
d6:27:94:49:40:a8:55:46:a7:41:70:ca:e6:b4:9d:
6a:e5:44:85:2d:64:31:33:3c:ba:24:6c:66:67:d5:
79:63:07:e5:b1:cf:96:b0:78:70:84:8f:39:34:fa:
89:06:d5:32:98:7d:a9:db:96:3e:d8:a2:93:95:af:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:F4:7A:26:10:FB:95:C1:77:3E:CC:1B:6B:87:5D:37:AB:6B:09
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:d6:91:c0:17:ba:19:a3:0e:fe:6e:25:01:87:8c:05:0b:
36:4c:85:5b:9e:db:c7:50:55:92:f9:75:40:45:b1:95:0c:70:
81:23:0d:13:23:21:fb:8d:c6:f2:9c:f5:53:1b:54:b0:04:da:
cb:79:6d:f5:8a:32:39:65:83:9b:81:88:da:fb:cd:86:21:82:
69:64:1b:cc:df:c6:1a:a5:ab:7f:a3:4f:70:54:ed:1f:02:89:
bf:34:21:e7:34:35:f2:53:b4:bd:b3:dd:d7:e1:a1:30:d8:f6:
bc:a3:d0:79:14:05:60:7e:54:b5:72:ad:5f:4d:e3:7f:32:0b:
e7:11:64:5e:01:48:ae:36:02:f8:e5:ba:c0:46:f0:4c:7e:bc:
d3:e7:fc:5f:e2:e2:f8:0d:9e:ef:84:d8:53:a9:d6:0a:ad:89:
d3:4a:49:0a:49:b5:97:1a:26:98:c2:9a:16:37:14:14:26:1f:
87:12:56:2a:ef:c1:fe:26:f5:e5:a6:01:c5:32:c4:29:ad:f8:
d1:2b:cb:09:75:4e:40:1e:99:75:3e:47:57:50:3e:e6:9e:69:
54:44:ad:75:47:a6:40:e9:90:17:3f:dd:9e:3b:f9:a8:26:d5:
3f:e5:c4:be:fd:e6:f7:33:63:fa:2c:be:df:e8:45:31:e8:00:
1f:06:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:13 2026 by rpki-client