Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: sjeg9WOQit8J2Pw9pqOtnylcdCf7tJClbkAqlB6kySs=
Subject key identifier: 5C:3D:F2:E9:EF:81:A3:0C:E9:D9:BE:5B:1F:3E:CF:1B:94:1C:E3:D7
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 019D389C2162E1E5D101ED462C3B72E8BC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 12CB
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (hash: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: 9ylgpGh80CGOai5YHrRTECfrBUrQNkqnHf7Jf7Fx9Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:62:e1:e5:d1:01:ed:46:2c:3b:72:e8:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=5c3df2e9ef81a30ce9d9be5b1f3ecf1b941ce3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:6c:ef:f7:48:dc:8a:6b:5c:06:95:15:f8:
ff:74:61:da:a7:36:44:2d:bf:05:c4:99:15:ac:7e:
2f:e7:61:21:3d:14:a5:de:43:21:2c:39:da:1a:48:
87:13:8c:0d:30:04:e3:e5:ab:cb:3e:da:b2:46:6f:
3c:3f:c2:29:a5:42:c2:55:f0:d7:62:73:28:3e:7d:
36:fc:b6:b7:3e:ac:f8:3e:a9:2a:c2:0b:a5:1d:20:
b3:80:b0:c8:9b:1d:9b:47:fe:fb:21:64:0d:c9:2b:
15:e7:c9:fc:58:21:db:a2:26:49:08:2e:9d:1a:f6:
43:9d:72:9c:d1:29:86:dc:85:da:c8:3c:8f:36:8e:
a8:db:d0:26:ea:b7:9a:75:91:fa:1e:cd:6e:16:42:
40:5b:bb:e3:7c:16:e2:cf:e2:07:26:fc:bc:3f:fe:
47:ca:9c:40:ad:38:c4:bf:35:df:e2:bf:65:f0:99:
b0:41:90:31:8f:35:5c:07:fd:b4:d7:f9:e1:84:68:
d8:b0:69:7c:9e:a6:dd:cd:9a:d4:95:e9:6b:11:ae:
19:32:4c:0e:1a:fc:ae:0f:ad:2f:a7:67:34:31:a3:
5e:15:65:51:7b:71:d6:a3:25:a4:dc:5a:19:68:10:
7a:21:94:35:d7:56:8a:cb:a2:ea:87:d6:ea:d9:90:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:F2:E9:EF:81:A3:0C:E9:D9:BE:5B:1F:3E:CF:1B:94:1C:E3:D7
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8b:3a:4b:b6:26:98:e4:2a:b4:45:99:2a:02:0d:a8:ab:1e:
12:f7:aa:92:3d:e2:2b:63:cb:f0:57:95:95:36:49:94:41:f0:
94:58:63:83:ea:5c:ee:ab:b8:86:cd:3c:3b:66:f0:1e:a2:48:
32:46:67:58:0b:2b:65:d0:e5:ea:fd:8e:ee:28:29:87:ea:af:
d2:94:06:a9:51:36:0e:b3:cc:03:1f:5e:f0:d8:1f:a5:d3:bf:
36:43:74:ca:51:4f:a5:27:6a:7a:3d:07:eb:e4:ea:30:2e:61:
00:00:13:79:80:95:42:06:cd:0f:30:11:f4:12:c3:48:8f:8a:
e2:ee:c1:0b:7b:c8:97:48:af:ec:cf:19:63:d6:5c:34:78:b8:
1c:d7:41:fe:64:fe:63:c8:de:75:24:a5:22:68:0f:2d:c4:49:
44:36:4f:8b:86:75:8c:d0:ec:13:d2:c8:de:5b:65:13:bf:ff:
05:22:91:a9:a2:11:c4:f9:64:d2:2b:ed:65:9d:5a:b4:7e:93:
00:10:49:a3:c1:53:48:78:32:20:1a:e7:df:1f:eb:ff:e5:28:
83:4a:72:0c:2e:15:b9:7b:08:e3:08:c2:4e:68:35:bb:0d:c0:
15:f8:b4:9d:63:f3:0a:44:d7:20:b4:3f:62:e2:40:cc:92:02:
57:13:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:08 2026 by rpki-client