Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: +MOwtqazxCbZs/fjPaQhL0APxmCKunVgpl/KxudPA0Q=
Subject key identifier: 1E:6F:62:AB:A2:A8:61:D4:5A:44:5A:31:04:BB:DE:4D:F3:C9:0A:6D
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 019FA0E0479B482B2C24D01A934E5CCF8C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 1048
Signing time: Mon 27 Jul 2026 00:01:20 +0000
Manifest this update: Mon 27 Jul 2026 00:01:20 +0000
Manifest next update: Tue 28 Jul 2026 00:01:20 +0000
Files and hashes: 1: 6bZLoAsiuD7u4TsiKdKZiFMS8wg.roa (hash: YcDjRze4iyKPM9dw93kDNAJsoNt848x2xiKGlnWWZSI=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: wVqF1V9O95tW9c1j33pbLGb1Ra7QExK/jovQ7U6I9i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:47:9b:48:2b:2c:24:d0:1a:93:4e:5c:cf:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jul 27 00:01:20 2026 GMT
Not After : Jul 28 00:01:20 2026 GMT
Subject: CN=1e6f62aba2a861d45a445a3104bbde4df3c90a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:9c:06:14:68:b8:0f:4c:92:bb:0a:74:06:
9d:d9:c5:56:b3:a6:0f:f4:6f:28:75:5d:7c:5a:5b:
fb:9a:53:99:8e:ed:d8:13:d4:f0:d4:31:90:4b:98:
d7:c8:19:31:18:b2:ab:2b:5e:89:c2:55:f2:84:43:
a5:f8:6d:42:9c:8d:ff:80:65:02:b4:6b:82:b0:33:
11:7c:98:c5:91:13:e0:94:e3:bd:bd:3f:e0:45:36:
1d:6f:71:cd:df:2d:cf:d2:5b:b4:54:63:f4:0a:79:
b2:f7:14:e7:64:e5:54:15:b3:b0:b8:39:49:d5:c6:
ad:5e:e6:7b:49:f8:06:b8:9b:02:44:01:26:15:ec:
d1:72:9f:b9:ef:7b:d6:4c:50:b5:ac:a9:06:54:60:
fb:26:b6:7e:7b:86:f7:57:c5:28:b9:ab:34:e1:aa:
5d:88:af:5a:8a:0d:51:ec:2d:69:58:7b:bf:d7:b7:
05:86:30:49:96:fa:90:b6:e2:96:fb:e2:86:18:7a:
5e:10:03:db:c4:2a:18:38:19:d0:6b:ce:56:d3:fe:
14:fe:40:48:0b:73:03:ee:60:72:01:71:56:07:90:
39:32:f0:a5:98:de:f1:90:9a:55:37:be:20:3b:d5:
d9:b3:5a:e9:22:ec:85:94:47:97:e9:f1:3f:24:ec:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:62:AB:A2:A8:61:D4:5A:44:5A:31:04:BB:DE:4D:F3:C9:0A:6D
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9a:95:62:c9:00:e5:0f:88:cc:8c:c0:c4:2c:b5:34:d9:3b:
36:69:7c:47:ae:77:e5:b9:b8:2b:85:16:3d:8e:24:18:e2:34:
02:af:8f:4d:96:c2:73:3c:4f:3b:96:03:08:92:db:79:94:c0:
5d:03:e5:37:4c:bc:ba:99:99:0b:21:6f:76:ff:d4:8c:01:72:
7b:e2:ee:88:76:64:45:8a:27:2f:ee:66:ca:40:0b:6b:f7:4d:
49:64:fc:1d:5f:8a:b5:0c:f8:64:22:a7:be:56:cb:c9:70:db:
89:91:fe:33:0c:52:14:bb:ce:24:53:3e:70:6e:c6:4a:ab:f2:
30:5a:b2:b3:bf:7b:4f:e5:14:2b:a6:67:89:7a:a8:34:43:51:
b2:15:1e:44:01:b1:0a:fb:a8:1b:ef:2d:a4:09:30:30:cb:d5:
4b:f5:f9:30:ad:c9:af:60:96:3e:88:dd:11:1b:58:49:a2:37:
37:c4:b9:0a:24:84:79:01:5b:d4:d5:8a:27:61:e3:2b:47:a7:
4d:d4:4e:36:72:34:9e:38:24:db:cc:62:f4:c2:38:36:2c:60:
42:13:90:41:fa:63:a9:92:42:40:e6:5a:2c:28:fe:0a:57:5f:
b5:1e:4a:91:5e:3d:a9:f4:1e:59:3d:ba:14:b1:98:26:63:b7:
ae:f0:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:58:09 2026 by rpki-client