Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File: TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier: L85fbdTTUK11STkp+I9RxHp/uOxZddNTaLXZgBR5xe8=
Subject key identifier: 3C:CE:1E:5C:63:7D:C3:13:BE:1F:C3:AB:A4:86:DD:26:70:74:57:B9
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 01A186E35E6FE08C7245DFE2E716FBF9AAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number: 08B5
Signing time: Thu 29 Oct 2026 09:00:10 +0000
Manifest this update: Thu 29 Oct 2026 09:00:10 +0000
Manifest next update: Fri 30 Oct 2026 09:00:10 +0000
Files and hashes: 1: 1-cEaaO_Ysid8Br5DRVo96OE6Rw0.roa (hash: fjeWtz//51nB13NzQwtc912b3agAHVfHErKRO/L6d0o=)
2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: lsomWuVs4FfVbSBvsV8izpdSsDRz3Og48aIzu0INM8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:5e:6f:e0:8c:72:45:df:e2:e7:16:fb:f9:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Oct 29 09:00:10 2026 GMT
Not After : Oct 30 09:00:10 2026 GMT
Subject: CN=3cce1e5c637dc313be1fc3aba486dd26707457b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:4c:38:7f:95:cb:cc:15:ef:fd:b9:17:a3:
1c:20:9a:92:86:d1:7b:a9:6c:e0:a6:f3:6d:98:8d:
18:54:1b:a6:0e:1c:06:92:fe:de:dc:dd:53:ae:af:
9c:7a:bb:2c:d0:df:84:98:4f:15:d1:9d:25:7c:4b:
a1:84:a1:6d:1d:cd:46:c5:63:62:49:87:87:23:38:
07:ff:15:9c:72:50:96:05:3c:87:fb:89:88:d3:8c:
13:46:a9:49:3c:f4:c6:15:3a:5b:4b:59:f7:1d:74:
3c:36:45:eb:a7:9c:8f:0c:d1:d6:e1:7e:a4:90:26:
7d:77:69:51:6c:9d:05:1a:2f:11:f6:cb:3e:b4:98:
ab:53:4f:bd:bf:ae:97:90:e1:ee:d7:3b:b1:6f:4a:
d1:8e:44:19:b3:42:57:56:8a:25:8b:68:c6:e4:e9:
5a:5e:07:6b:9a:26:87:56:ba:af:cd:87:f8:0b:40:
98:58:00:f9:ba:d3:07:fd:4d:31:04:9a:5b:90:df:
c9:6a:0f:e0:47:7e:4a:41:e7:34:ec:5a:06:54:6e:
c0:4d:87:11:54:e2:b0:e9:28:6e:ba:08:a9:b6:fc:
10:b6:dc:a2:41:67:f0:33:ff:21:69:0d:77:a9:00:
b8:cb:06:05:cb:0c:43:91:ff:27:2d:33:ab:ad:42:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:1E:5C:63:7D:C3:13:BE:1F:C3:AB:A4:86:DD:26:70:74:57:B9
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5f:9a:36:1b:6e:a0:dd:aa:96:2c:ec:d1:6d:c6:55:3e:69:
8e:af:f4:27:33:da:8c:c1:d4:7b:0c:1a:5f:b3:95:23:81:16:
51:0f:f8:31:2b:7d:fe:8a:98:f1:51:40:9a:9a:1b:f3:fa:9d:
da:bd:a9:33:a6:7a:02:36:0d:64:f1:c0:27:63:c4:91:0f:08:
0f:ed:f2:6c:b8:f8:9c:98:77:ab:8d:2d:11:a1:89:83:64:a9:
d0:74:fb:52:5a:6d:fa:0d:c3:aa:cd:38:d1:55:49:7e:bc:d8:
fa:62:69:a8:3c:01:12:ff:56:87:38:fb:47:52:c7:65:1f:d0:
58:ae:7a:bc:6a:b0:48:3c:30:37:b0:fb:e0:0e:16:9a:65:0d:
87:13:84:d1:a1:46:f5:c4:4a:68:94:16:b9:28:f5:14:e2:4b:
49:93:0c:1a:47:47:d1:90:92:29:e2:1a:37:69:d1:79:02:0b:
47:ac:d6:c4:08:3d:f3:0f:4c:8c:1c:36:b8:ef:29:e6:be:85:
9a:cd:ce:49:66:8e:8b:59:e9:41:b4:24:85:55:63:05:27:67:
78:4f:b1:20:90:64:cc:73:09:24:d0:3f:05:53:db:96:10:46:
b4:8a:5f:91:2f:cd:4e:35:14:20:34:a2:c5:42:c6:d2:ce:57:
ed:c2:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:28:54 2026 by rpki-client