Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: Ntn86fSm5yLNUAQ3sgc0RPxCxNgIJdnBIV0p2Ilqpu4=
Subject key identifier: F8:EE:CD:0D:C2:D4:B3:3B:47:50:8A:84:20:EC:11:23:AE:D9:AF:24
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019E3185254D5A2B577DC625F0AA0EF0FA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 010A
Signing time: Sat 16 May 2026 16:01:09 +0000
Manifest this update: Sat 16 May 2026 16:01:09 +0000
Manifest next update: Sun 17 May 2026 16:01:09 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: SpUUMsnFkvv51NMrgRLnvLWVBPXDywW+vaHQmg3GNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:25:4d:5a:2b:57:7d:c6:25:f0:aa:0e:f0:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: May 16 16:01:09 2026 GMT
Not After : May 17 16:01:09 2026 GMT
Subject: CN=f8eecd0dc2d4b33b47508a8420ec1123aed9af24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:20:55:09:04:e4:b6:29:9d:83:90:f9:d6:
88:d1:99:87:42:f1:83:26:3c:e9:76:14:cc:ff:4c:
34:e9:74:f4:49:30:f9:aa:f5:fb:3a:8c:1f:ee:1e:
65:b0:b6:db:ca:0b:1a:dc:e3:a5:28:14:b4:a9:c0:
4c:82:f8:c9:9e:3a:55:c7:88:bf:29:09:f8:f3:c1:
2f:a3:a8:06:b5:a8:14:0e:88:f4:41:6b:53:d0:c7:
84:79:ef:ca:e1:51:82:c6:7a:b4:ce:fd:f8:5d:14:
67:9c:57:63:10:95:6f:93:0b:cb:46:c7:bd:fe:78:
ae:ee:16:97:25:6f:e5:8f:50:99:8c:05:10:69:21:
3c:4f:b5:9f:a3:dc:1e:c0:3c:cb:d6:5c:58:b2:ef:
78:4c:be:7d:be:eb:c5:96:83:9e:a3:dd:30:c7:b0:
66:c7:6e:07:79:e9:46:a5:a0:89:fc:89:8d:22:40:
0a:02:6c:e0:7a:bb:6c:08:7a:58:93:a9:ea:61:19:
64:dc:3d:5e:ef:74:cc:1d:e4:f5:90:84:36:7b:23:
2e:a3:75:54:ab:a6:47:69:50:22:27:f7:81:c2:50:
3c:01:d3:96:e4:76:9c:d1:f9:69:a8:ed:da:43:78:
fe:c3:4c:a6:c8:d6:1b:66:ec:fe:c8:8d:70:6b:d0:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:CD:0D:C2:D4:B3:3B:47:50:8A:84:20:EC:11:23:AE:D9:AF:24
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:f6:94:79:ac:be:60:e1:23:3e:93:80:ef:74:7d:62:9b:
d5:b2:d9:35:92:d9:e2:ca:a7:24:95:4e:b4:3d:bc:ac:d6:f3:
f7:a2:0a:9a:17:7f:6f:68:a4:18:ce:26:6f:d0:11:d0:3d:4d:
7d:ec:67:1b:af:87:d4:05:4d:74:6d:b7:59:be:af:5b:8f:ea:
fe:30:03:4c:e1:85:97:0c:6f:7f:d7:67:36:39:7c:90:e4:71:
e6:6d:a3:6d:94:a7:11:36:99:9c:a4:e0:27:a2:17:75:99:bf:
97:98:fd:41:3b:6d:86:4e:11:49:d7:7d:85:96:e8:d6:ae:79:
98:50:07:cd:c5:4a:b6:a0:19:b5:de:f0:5e:cc:6b:de:f8:db:
fd:bb:85:fb:97:b6:11:6e:77:96:ff:59:a4:fe:3d:7c:9c:38:
d2:bb:13:23:20:11:45:67:ad:96:a8:39:dc:25:1f:c6:9c:55:
f6:a4:2d:0f:9b:5f:e0:f2:99:37:a3:a9:b6:1d:73:6d:54:a3:
ed:96:49:42:e0:66:d1:9c:d4:a1:e5:19:8d:de:61:5a:11:d9:
b9:ed:0f:8f:57:85:bd:67:3c:59:51:d8:ff:77:2f:ef:42:0a:
2b:9c:b8:8f:0f:e7:16:37:ed:06:78:0c:38:a6:7f:f5:a1:9a:
cc:75:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:29 2026 by rpki-client