Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: wYjZtT9k0yHp6/LbAm5iGLP7x2G5Dt/6xOjjF1Yke4o=
Subject key identifier: 4A:33:05:68:A2:E0:6B:7B:A0:72:B6:7C:EB:58:5B:05:FF:AE:71:90
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 019D38D3354556CE8A570500FB2A4CA9EAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 1741
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: +kRJC0ilbMc15yGbUe2DkdSqP5NeOj3mHjjrDErjNEk=)
2: w6PRimv4AQwUjZljEFUbn9_lMpE.roa (hash: 1BAWM7GxFGhcr0Nj+ZV21NpmZtGOTmrrpW3/r3X5CNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:35:45:56:ce:8a:57:05:00:fb:2a:4c:a9:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=4a330568a2e06b7ba072b67ceb585b05ffae7190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:bd:49:87:f0:ab:34:e7:a8:c1:d1:91:e6:
d2:74:1c:89:f3:32:ac:f8:32:56:cb:7d:5b:7a:db:
86:2c:17:a8:ed:d3:8c:46:1e:f1:93:3d:c9:75:0a:
5a:5e:ab:2c:67:1f:bb:cc:70:ff:ea:3b:b8:7f:f3:
f0:d5:74:bc:df:3c:95:ed:3d:f6:62:7a:97:e3:a4:
07:79:12:b4:49:b1:cd:2d:18:dc:07:7e:07:43:f1:
eb:d2:26:0b:d2:b1:4e:7a:fc:16:ca:54:1d:42:85:
a9:39:c8:09:3d:f6:e8:6f:9b:08:f3:34:fc:59:30:
fb:e7:ac:c1:d9:51:9e:89:c4:ea:05:ec:14:f4:8b:
1e:fb:88:ce:8a:81:67:5c:37:e0:8a:65:14:d1:91:
a2:e9:f5:40:77:b1:b9:02:d1:22:d8:df:13:55:4b:
e9:ad:f7:37:3e:fc:8b:12:18:0f:e7:53:b0:0c:a9:
d0:46:47:18:f5:44:84:01:80:b4:59:48:b9:9c:c8:
ce:f9:45:80:71:93:d9:6d:39:6e:3d:76:01:fd:68:
4f:62:fd:17:59:78:02:f6:cc:f7:63:41:9e:7f:a6:
ca:a5:b0:ab:11:0a:35:44:fb:65:0a:3b:c1:5b:b3:
da:90:12:9f:ac:99:c0:5f:7c:a4:d8:02:c9:ef:cc:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:05:68:A2:E0:6B:7B:A0:72:B6:7C:EB:58:5B:05:FF:AE:71:90
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:32:e8:e3:ab:56:76:ac:65:51:89:34:b6:59:b1:84:0f:1b:
19:ff:01:ee:70:7d:db:a8:83:a5:c9:7b:c3:53:7d:5b:fe:96:
10:28:95:51:67:be:24:75:3d:7b:ee:55:7b:d7:88:51:79:aa:
c5:5c:80:5b:82:c7:08:73:2c:c9:7e:10:6e:9a:75:03:82:88:
d8:63:3f:c8:30:f3:b2:22:25:a7:56:c0:00:5b:f0:db:f1:65:
4c:a8:d2:eb:89:27:d8:c9:d1:8a:a7:11:58:f1:43:17:f0:53:
eb:ca:93:ab:6f:df:f7:ce:64:b5:bb:b2:02:08:fa:35:52:f9:
ab:50:6c:78:4d:43:90:48:6a:82:9d:0e:c5:45:0d:44:db:0a:
93:73:df:e4:74:54:08:f8:a2:06:55:b6:05:49:2f:53:93:d3:
67:6b:5f:c6:84:ac:d8:e0:18:91:d1:3b:2e:81:a7:41:65:0a:
bd:fa:ae:a7:8b:a4:8f:39:97:fd:64:1c:1e:9d:38:c0:ff:06:
76:b7:12:0c:9a:7e:37:58:ef:be:e2:4e:f3:16:a7:ce:81:83:
ff:e8:f9:82:d1:e7:11:0d:99:b1:29:52:b3:21:b1:37:68:45:
a4:56:04:3b:55:91:4a:a3:2f:48:b0:4c:59:7d:5e:e2:b8:25:
0f:fc:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:55 2026 by rpki-client