
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File: tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier: TTjCqinHO/DXOZ9SaUhnHhEUWnMzLruBzxFKh8OdtqM=
Subject key identifier: 53:C5:E4:DA:EC:2B:4A:39:E5:22:9C:43:21:B6:73:CB:D1:00:95:8A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DB20FA93AA2378A0D9433D8F253F2B0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number: 1A34
Signing time: Tue 21 Apr 2026 22:01:03 +0000
Manifest this update: Tue 21 Apr 2026 22:01:03 +0000
Manifest next update: Wed 22 Apr 2026 22:01:03 +0000
Files and hashes: 1: 1-6yxprrU4uaIf-t6dg83iszIusk.roa (hash: E4cV83Mcbo6G1vQZTG0m3B+aRwks4252JTHD0pN9HWo=)
2: 1QyVG3mxG2Kv9gIND6C7DAyJRhE.roa (hash: GEGJ/9gdMmqUNvs39zCJc76PD/y3c88ohFq0EfvFHAM=)
3: 5kJ-KBOslxl7eMMVxRA35-Jf9wk.roa (hash: iy3DwQD9iS+0vnz5GqNL6+JAoJO5FEqtMUwE9gE3Dgo=)
4: 6Iosru2rgefqb-G1dkNZm3eQBbo.roa (hash: 1dV8hYXsGdshFlGk0ddmJ5AcxJeAQGJGdw+VePlaJr0=)
5: 7avrlJYrUSerPMTKzs3xP0drONc.roa (hash: 9Vj/SAAtvvSD+6av601AcprLR9mdYNV2QWSfMJzy91Q=)
6: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (hash: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg=)
7: 8_6z_ALRGz-CVjgclabyD5HofuI.roa (hash: 87JSE9qMyZcP6Ekmnt+zFI5GapB2S4KMZVgpMzi9vh4=)
8: H5m8M-4zQyNkYJc-cNRRL3tUXmQ.roa (hash: ilJ18CrU4Kb07zVh4U8HqZ3eAwSyJCEzKDwT4+JWTN4=)
9: Hiap0OVVLyo8exwHEORYRd-74Sw.roa (hash: mPLHn17XrcfRZQAiSgGZtGpJ14NN5e45m0IORKRFOUU=)
10: IuaBqY2GadGcg3FDyUG5eeweXtw.roa (hash: HkIMLZemJswFZ1lLlbUgk4yP8IDP4ASfJ/qPNB+Uu+w=)
11: Ktrpt7jtXNMAfyStrGUJcQnYb08.roa (hash: ft9/CRwjWLB+mDfLZHwzK+b5/WwIQUvyJ2tbIXeNRxw=)
12: MaOHk2gP7cUQt2loZrif0X4VzaI.roa (hash: Nm8fnUnwQa9HONKUJo8GZExQmCBUU28ttAecmBpxDYE=)
13: N3YzN0Fa_WNt3JaYtFw3pJOs_8Q.roa (hash: RT7YUz4t5rtzx/9w/YIkNQD7bAKwt7Hc9i+CTJF4tNw=)
14: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (hash: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=)
15: R_ebvm8_dQqwHiuttmlwT7UcgGA.roa (hash: gVZwLP3R55gVNwUakpUJWOO1ZTkbRigReVPhDpAd5Vw=)
16: VzM1aG3yNVkeQkrZee6u4OpvzC0.roa (hash: z7C5HZSPq/ZYXJLA4/UFUVo7PstPgze0oL1hcp4+WsY=)
17: WWSGxlrbZYwECNaECjDy1PuYLjY.roa (hash: yBj3tI9Jz4/WNbmjkDEo7hR8YZ5QJTRICSQl9iRXgrE=)
18: ZDcCyWNO8GuHDm-AW9Inb5JkYYo.roa (hash: LZPBZlEy7N34nWdLfNVUwjM5rQouIeo33BppVJ7mP4s=)
19: ZVdYS7hWyL07oFURFx4lZvwSczY.roa (hash: RghHfrkEi1zVpQo1/Dt+V+ZJO7/dn/6tqBNS1rrNT9c=)
20: aECIq53kmn8OJ2RgHuWhbVsJ2gk.roa (hash: +ZhDaozPaa0XNW6L0g1DoTS8Qn7rbBIdQRWJZoxChcc=)
21: b9Dh_UeOJvMX7mS9n4z8FGHg4Ac.roa (hash: TsKKF7D/c/MjkTAoubzU5UyUbp2KE6LY4Yz6BNqvcX4=)
22: bGSEPaNtMNtWUlVTHFzssRogxAw.roa (hash: MF4TkWoRFFtVq0wlpaLP7q78ww43mp6CC35kVOFtuyc=)
23: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (hash: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU=)
24: e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (hash: DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=)
25: hKt_LDA2znF1i5FMyMXJ4_vTugo.roa (hash: i2tFIa9dPefQFxdN53wBfIScjnwzGr39U65xb787QKY=)
26: hzuKIdZ3gIbCkZehkpdrWevAxmw.roa (hash: D1viKAayX1t1nvkkRSxzUa3YxX4UEEikcKEBzJm9yww=)
27: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (hash: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4=)
28: jdECG7KzTcPN9YPIoXCcXM3HMjc.roa (hash: lkfgFqI3R9CxVaChxh1arNEuKIhs+n+FWUd3RLQ9nVo=)
29: kWnM6EJkJSvkftfeSMQK2jPRvW4.roa (hash: GH4eT2I8lHO3lE4vIWCSS4R08KHPn9HZscNvGp+IydQ=)
30: nfiTo4QevUPGdzaI7fi_jgLbp6g.roa (hash: iP0aq7Kz8uVCsEVP37No2SXtGPnlmpNDDThQMaUIRG4=)
31: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (hash: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys=)
32: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (hash: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA=)
33: sGxBkJsDb4cSDB9YLAQ4WsuWlSM.roa (hash: e/01H24SljJCRbIVQagIuqTJISHsrceaMA0ctl1O+PM=)
34: tml7s1FEM_9KEwjG1ZFBVK9B8KM.roa (hash: n8PMHdIGzbLhBNN6Xpxhp4apLQiZy0TRKprVqL0yAqc=)
35: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: rsHhtnMitarLh7nad3mv/chmI+Iv6seVfMw40HZ+zyY=)
36: wlOq_n0_05HtOczXJqqOw_68LpU.roa (hash: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c=)
37: xoCyTYq3JkKW4BK4zaSxkOZubuM.roa (hash: gtNFd3CA4+aXuTCUqDqV1r9txHsasodxyZ7Ic/3d83E=)
38: y8utpL3cM7zCx1Fhe9N07v3iiSE.roa (hash: Z5Pf+xhpAVmx/4aRGgIsXBtgaV9RserBgzo3xepCieo=)
39: zQQ3up_sVp85Vu9FjrlPZdIUAo4.roa (hash: CoIauExbBLiSe/+TXSN+Xpl0pzQnWGj8jVHsHEggBc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:a9:3a:a2:37:8a:0d:94:33:d8:f2:53:f2:b0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 21 22:01:03 2026 GMT
Not After : Apr 22 22:01:03 2026 GMT
Subject: CN=53c5e4daec2b4a39e5229c4321b673cbd100958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:21:d8:a5:b5:e3:45:25:4c:b5:a7:db:c0:
6d:60:f2:f4:f4:18:92:cc:56:b9:fd:07:88:a0:b8:
95:52:66:8e:8e:a9:38:c2:06:22:61:1c:5c:46:4b:
5a:35:53:cc:c6:79:0d:b7:52:9f:7d:69:e6:17:60:
a6:4a:7c:55:17:f8:12:2a:33:68:f0:53:a5:cd:31:
f4:63:c5:bb:5a:47:87:c8:fb:ba:29:8b:05:6c:a5:
86:8b:28:3e:9d:dc:d4:3f:e5:1d:6c:7e:cd:90:6d:
dd:06:ce:4f:95:c5:45:00:b7:3c:0c:c1:1a:dd:a2:
31:06:1a:82:e4:20:d0:12:59:61:97:68:1d:01:09:
77:6d:85:40:e9:ae:9c:9c:9b:01:28:2c:62:60:73:
7f:3c:82:2d:b7:16:34:67:ca:93:c1:6a:42:97:16:
1b:27:0a:d6:ba:51:47:e9:97:62:e0:6f:d4:0a:14:
ff:54:98:0d:18:4f:e4:c4:77:45:47:b9:cf:ad:ae:
fb:2a:ad:a0:aa:fa:55:5a:06:1a:ff:eb:a4:96:9d:
63:d0:6c:26:04:cf:a3:b2:d9:36:25:99:5e:16:59:
da:8a:8b:24:ee:61:b3:e1:28:72:27:98:b8:35:7c:
81:81:a4:1c:76:75:2d:05:c1:cb:8d:0a:ad:92:e7:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:E4:DA:EC:2B:4A:39:E5:22:9C:43:21:B6:73:CB:D1:00:95:8A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:79:a5:de:18:42:39:68:9a:17:0d:ee:ae:9f:f1:ea:6a:91:
8c:af:99:e3:00:01:b7:fa:ed:63:cf:96:cb:a5:a8:c2:c2:e7:
14:26:4a:e0:27:1e:56:08:ec:46:1b:a4:29:d1:f0:97:bf:c1:
9e:d7:7c:30:d6:5c:ea:62:e4:2d:4b:e0:0a:98:8b:40:03:da:
3d:30:d6:b6:84:e0:cc:c7:db:60:e7:00:d4:59:99:cb:7e:d4:
8e:f3:89:c9:db:67:19:e1:33:d0:ca:fe:0e:52:aa:5f:09:d0:
73:aa:9d:01:ee:da:73:b6:75:0b:36:7d:73:81:7f:87:0c:5a:
56:e8:18:31:ee:1e:a2:ea:fb:21:ae:44:8a:f6:3f:fb:ac:b2:
da:12:e6:bd:21:82:35:9f:ed:48:5c:93:6a:47:d8:5c:c4:84:
91:58:70:5e:6b:db:2f:ef:dd:2e:27:cb:33:6b:25:45:3d:de:
35:69:35:06:6c:94:c1:bf:15:43:ab:92:e1:43:7b:19:38:21:
c3:39:80:83:12:77:10:7b:72:65:92:f4:e5:39:4a:fa:73:0e:
de:02:1e:46:22:c8:1e:35:27:1b:42:64:5d:de:a4:a8:da:cc:
17:e0:6a:9e:d8:6e:28:77:4d:68:29:42:01:7c:9e:35:62:be:
68:8c:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:01:03 2026 by rpki-client