Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: gjXyPJACcVah4FDup4H+jEXkSW13+yiUpyslGfkFtKc=
Subject key identifier: 66:F5:BB:14:DC:8B:BA:7B:6F:50:97:9D:12:9D:2E:7F:5B:EC:97:EF
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019CE2C7A94BBB794909DBDA82AD8413816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 0AD8
Signing time: Thu 12 Mar 2026 16:01:01 +0000
Manifest this update: Thu 12 Mar 2026 16:01:01 +0000
Manifest next update: Fri 13 Mar 2026 16:01:01 +0000
Files and hashes: 1: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
2: Adqf-0ME2YqN8H_6B4asgnToAUY.roa (hash: 0SCvbw5p8yy5uNnDdQjN/UMJ84WMVAkKE92NJKO0GTk=)
3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
4: Ly8SorW7w_Dg6fAIrTVOdpaVPT8.roa (hash: HGTHpvo69BEECWSdkFYK6o3wp1FqLkLH4LXf5TzKib4=)
5: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: ZufiH7TVJtRgWJmPjTYYdBOg64IEHnW1SUSCK4Ewm0s=)
6: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
7: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
8: ghjgpQCXu2keg81nWlTEtZo7k4E.roa (hash: iE1H5q2bGSfCm5jtVmORl4h7Daec5vdTAeKEQr0iK/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:a9:4b:bb:79:49:09:db:da:82:ad:84:13:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Mar 12 16:01:01 2026 GMT
Not After : Mar 13 16:01:01 2026 GMT
Subject: CN=66f5bb14dc8bba7b6f50979d129d2e7f5bec97ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:ab:44:07:9a:9b:2c:88:f7:b8:94:47:7a:
66:62:e5:47:e2:55:04:c4:f3:ec:e8:97:6b:3d:8e:
8f:73:64:44:d0:80:2d:06:fb:d6:0d:2d:58:fd:67:
69:1c:24:d0:9f:70:68:75:e7:f5:83:85:eb:50:70:
77:f8:c4:72:4b:d0:df:90:f5:97:a3:3a:44:4b:d5:
0c:75:95:b4:1d:d3:9a:e4:3a:30:ce:82:b9:a2:ea:
c1:a2:4c:f3:fa:0f:f9:7c:fe:8e:fc:5b:67:e8:f1:
2d:72:41:9d:1a:a4:5b:d2:5f:03:3e:55:76:99:12:
e6:8e:85:84:00:d7:f3:ac:a0:a4:c8:4c:17:4e:93:
47:37:f3:2a:07:55:b5:90:75:7a:3a:b7:6e:01:ea:
39:76:88:09:ac:c4:37:c5:27:de:14:5d:9d:4a:7d:
cc:07:43:be:d5:2c:20:87:34:a2:21:9f:eb:4a:cc:
99:bd:bb:96:79:a7:b5:45:35:8f:e9:e1:6b:8d:b2:
0e:ec:37:22:10:3c:c0:84:cf:34:dd:7c:f0:33:fb:
07:27:95:3c:56:af:49:81:49:0b:26:3d:dc:10:8e:
62:fa:8d:e0:cd:b1:20:51:2c:0e:35:72:42:99:d0:
e5:3a:df:ee:5a:65:40:b3:4c:04:f2:09:4c:c4:91:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:BB:14:DC:8B:BA:7B:6F:50:97:9D:12:9D:2E:7F:5B:EC:97:EF
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:72:64:c3:b8:4a:cc:d6:8a:df:58:61:ac:9c:ca:b4:fc:86:
42:2a:9a:19:d9:2c:fa:65:e8:81:1a:4e:56:99:ae:50:64:36:
e5:4e:a7:3d:d1:64:53:aa:73:47:f3:60:5a:0a:3f:77:fa:d6:
63:9e:23:2a:48:75:b2:47:a8:1b:4c:0b:0b:ca:05:0d:3f:52:
a5:7a:34:e4:cd:ae:df:dc:b4:af:a2:6d:b3:34:43:08:a4:58:
11:dd:0b:db:12:97:06:a6:50:1b:7d:12:c1:4a:31:07:84:fd:
74:7f:d2:04:7f:e9:3f:ea:9b:7e:55:60:b5:05:b0:c0:1a:1f:
32:c2:e6:24:42:7a:3a:b6:35:b0:6e:a0:23:e1:99:b7:bd:5d:
c1:47:5d:92:aa:f7:71:35:74:07:e1:48:6f:e0:ab:1d:b2:e5:
42:c9:41:7c:f6:61:c3:e7:93:46:d1:0d:29:93:82:fb:9b:d9:
6f:3b:87:40:25:0f:69:d6:7e:55:cf:4a:4c:70:39:95:42:48:
fa:35:d1:9f:5c:5e:50:63:07:95:c9:95:00:f4:90:b9:b6:a8:
cb:eb:b7:fc:42:cd:7e:84:76:41:6b:ff:4d:af:46:90:e9:17:
ee:cd:39:50:96:02:25:53:46:de:18:d4:76:75:13:7f:64:1d:
52:50:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:37:39 2026 by rpki-client