Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: jiQ0nQuvXaKxArf7QTLvHtvNbhz9jnIAkt30jsJLUEo=
Subject key identifier: 46:4B:8D:96:E8:79:93:40:C1:C9:2C:DB:F7:D0:16:6B:66:90:D1:1A
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 019EB92142AF82FE4A3866EDDE08EDB9EA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0FD0
Signing time: Fri 12 Jun 2026 00:00:25 +0000
Manifest this update: Fri 12 Jun 2026 00:00:25 +0000
Manifest next update: Sat 13 Jun 2026 00:00:25 +0000
Files and hashes: 1: 6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa (hash: YcDjRze4iyKPM9dw93kDNAJsoNt848x2xiKGlnWWZSI=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: E8l/p6WSyU+tWnDOqmgr9IucUamz1npL7MOWvt0HTdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:42:af:82:fe:4a:38:66:ed:de:08:ed:b9:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jun 12 00:00:25 2026 GMT
Not After : Jun 13 00:00:25 2026 GMT
Subject: CN=464b8d96e8799340c1c92cdbf7d0166b6690d11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:c5:d0:94:ce:5e:a5:5b:ea:bd:3d:4d:c9:
22:ec:d0:d8:46:79:e4:f9:23:b9:b8:cd:12:6b:77:
4d:08:9f:a7:9a:ae:97:83:ea:36:c0:6f:85:ee:be:
43:18:dc:22:b9:58:0f:9c:46:01:2d:51:39:00:29:
e2:73:8d:45:48:80:f0:28:7c:11:e4:7d:95:4e:81:
87:b3:fe:92:b7:72:18:89:1c:e1:20:70:f0:1b:8b:
5a:d3:bd:fe:c8:3d:55:fc:54:35:77:6a:60:64:d5:
48:84:b1:07:b7:70:6e:1a:e2:fb:34:6a:f1:d4:88:
0b:20:aa:64:c5:bb:b6:7b:0a:d5:1a:ce:36:98:47:
d9:4e:a9:eb:d9:e6:ff:ba:85:d6:52:2f:cc:62:d8:
d8:c9:ff:5e:69:30:8c:f5:fc:58:ea:7a:2b:6a:d7:
5e:f1:8c:f9:cf:e5:b4:96:64:da:18:b0:cf:bf:21:
32:45:9e:ef:47:dc:de:e0:9d:4d:bc:4a:2a:8c:23:
21:48:4e:ef:61:70:f0:0d:ae:61:b6:49:f0:31:c0:
b4:d4:5d:c6:7d:2d:99:72:22:82:b4:70:3c:1d:39:
c1:84:8e:88:60:e7:7e:e0:d2:5f:79:6d:38:09:37:
dd:34:8e:13:9d:2d:0b:30:64:e3:d5:69:13:5b:33:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:8D:96:E8:79:93:40:C1:C9:2C:DB:F7:D0:16:6B:66:90:D1:1A
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d1:91:91:95:e8:e4:b4:ec:26:0c:5c:b9:37:a6:db:ea:a0:
69:ed:21:08:cf:ce:92:c4:f4:5c:af:29:57:eb:60:de:06:02:
96:b2:42:d4:73:46:dc:44:00:7b:5a:8d:4a:d7:61:95:5f:7c:
b5:c3:ed:03:90:a2:cb:04:29:1a:f2:5e:c2:81:b9:68:ba:cc:
7d:4e:90:f2:e7:f6:dd:92:5d:51:67:6c:9b:ce:a3:66:96:ad:
8b:c7:af:5f:2a:93:cc:d9:d7:d6:06:74:11:14:2d:92:21:c0:
8e:e5:32:54:41:20:1f:e0:7e:54:1f:65:da:8d:b4:74:ea:c1:
40:29:d4:21:4e:60:d1:ed:2c:f6:18:cb:d8:62:88:f7:cb:ff:
b4:2f:97:5b:0f:39:c5:58:85:5b:2a:19:69:01:09:36:df:04:
9e:22:4c:18:c3:fd:09:72:f2:5c:f2:4e:2d:85:47:7e:39:95:
9f:88:50:74:05:a9:62:ae:99:dc:5a:a1:19:3d:85:d4:e8:13:
ed:b9:78:49:99:80:e8:53:8b:a0:0f:a9:34:ff:6e:de:c8:e5:
ce:30:0a:89:2e:6a:27:16:36:cb:d4:57:10:1d:20:1b:79:bf:
7d:5b:58:0c:2c:c5:3e:77:ec:f1:45:cc:38:3a:de:ef:4c:01:
b9:e9:30:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IUKvgv5KOGbt3gjtuepTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOGE5ODc1ZDdkMGQxMmJjNDdhNzBiN2VkZTlhM2NhNjRk
ODJkMzIwHhcNMjYwNjEyMDAwMDI1WhcNMjYwNjEzMDAwMDI1WjAzMTEwLwYDVQQD
Eyg0NjRiOGQ5NmU4Nzk5MzQwYzFjOTJjZGJmN2QwMTY2YjY2OTBkMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOvF0JTOXqVb6r09Tcki7NDYRnnk
+SO5uM0Sa3dNCJ+nmq6Xg+o2wG+F7r5DGNwiuVgPnEYBLVE5ACnic41FSIDwKHwR
5H2VToGHs/6St3IYiRzhIHDwG4ta073+yD1V/FQ1d2pgZNVIhLEHt3BuGuL7NGrx
1IgLIKpkxbu2ewrVGs42mEfZTqnr2eb/uoXWUi/MYtjYyf9eaTCM9fxY6noratde
8Yz5z+W0lmTaGLDPvyEyRZ7vR9ze4J1NvEoqjCMhSE7vYXDwDa5htknwMcC01F3G
fS2ZciKCtHA8HTnBhI6IYOd+4NJfeW04CTfdNI4TnS0LMGTj1WkTWzOHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZLjZboeZNAwcks2/fQFmtmkNEaMB8GA1UdIwQY
MBaAFE2KmHXX0NErxHpwt+3po8pk2C0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUt
NDU0NTk5YTRkMjJjLzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJj
LzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9GRkZXo
5LTsJgxcuTem2+qgae0hCM/OksT0XK8pV+tg3gYClrJC1HNG3EQAe1qNStdhlV98
tcPtA5CiywQpGvJewoG5aLrMfU6Q8uf23ZJdUWdsm86jZpati8evXyqTzNnX1gZ0
ERQtkiHAjuUyVEEgH+B+VB9l2o20dOrBQCnUIU5g0e0s9hjL2GKI98v/tC+XWw85
xViFWyoZaQEJNt8EniJMGMP9CXLyXPJOLYVHfjmVn4hQdAWpYq6Z3FqhGT2F1OgT
7bl4SZmA6FOLoA+pNP9u3sjlzjAKiS5qJxY2y9RXEB0gG3m/fVtYDCzFPnfs8UXM
ODre70wBuekwbQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:24 2026 by rpki-client