Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: YZ+7D4sjM1v71ZQ3uFswKdg/d66DK/unjWben5tnzmY=
Subject key identifier: A2:26:17:FC:C8:5A:9C:8D:6E:CE:17:05:C0:17:09:48:57:32:00:D1
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 01A15108644B541C573F353660688F053AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 02A8
Signing time: Sun 18 Oct 2026 22:01:06 +0000
Manifest this update: Sun 18 Oct 2026 22:01:06 +0000
Manifest next update: Mon 19 Oct 2026 22:01:06 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: xlB80XMkPck6R0ssbncnGgWk6mN4mrOqWO1avqP3RGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:64:4b:54:1c:57:3f:35:36:60:68:8f:05:3a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Oct 18 22:01:06 2026 GMT
Not After : Oct 19 22:01:06 2026 GMT
Subject: CN=a22617fcc85a9c8d6ece1705c0170948573200d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:2d:13:82:72:19:0a:d8:6f:b9:8e:e6:15:
5c:e8:aa:89:b7:e0:ed:92:1d:ff:77:35:09:97:56:
5a:bd:fb:3a:70:94:be:f5:e7:73:ce:07:4c:ae:52:
34:c3:c5:2c:45:88:b6:7c:da:cb:4d:08:1d:98:f7:
b8:30:58:b6:bc:2b:16:25:f6:cd:0f:0f:da:25:26:
8b:a1:a1:c9:4b:a7:2b:b9:71:bb:23:d3:9d:62:7a:
7f:7c:bc:b6:91:e2:68:a9:c7:fa:81:48:8e:a1:f3:
1d:50:17:ec:e8:9d:ca:4a:1d:8d:be:7a:98:c9:5d:
73:b4:04:ad:98:82:f0:ec:d0:cc:8f:5d:1c:af:eb:
a6:5c:a2:57:ae:b3:d0:cd:d4:56:1e:d7:45:6f:d6:
1c:30:f6:ed:cf:55:54:12:d6:1a:37:db:7e:e0:8f:
7e:6a:b4:b5:33:e1:71:9e:12:bf:e3:07:06:5b:21:
8e:2b:03:ba:5c:04:c7:a8:f3:3d:80:b2:05:0d:8e:
c7:78:dc:8f:52:53:aa:05:d1:b5:b7:11:ea:a5:62:
65:ff:f3:87:72:2f:fa:dd:e7:69:5c:31:1c:86:cf:
60:23:e3:f6:d0:53:41:46:75:bf:a0:c9:ee:b0:e3:
e0:3f:a8:c8:fc:57:4b:28:69:53:f7:99:de:d8:91:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:17:FC:C8:5A:9C:8D:6E:CE:17:05:C0:17:09:48:57:32:00:D1
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:95:9b:0b:f7:cf:d5:3d:49:c8:40:05:64:dc:f0:b5:a6:0f:
13:d7:7b:e7:eb:a5:df:24:61:73:ef:ce:48:58:b0:dc:58:65:
80:88:8d:44:7a:e5:b5:ed:42:b2:df:cf:1c:7f:88:05:5d:1c:
78:ac:0f:48:d6:fd:bd:cd:e2:6c:8b:e9:54:36:36:2d:ae:0a:
18:d7:3d:de:a0:68:da:cb:f8:1a:35:26:71:f8:ec:3f:37:91:
94:24:ce:2b:da:d2:0f:82:44:5e:b2:bc:a1:96:7f:20:70:42:
ce:f1:42:58:9e:e7:eb:d4:4d:32:08:d3:c4:10:36:30:ff:48:
5b:d5:33:52:87:53:a2:c8:a2:f1:01:1f:74:c6:02:f0:af:a9:
cc:c2:43:04:21:b3:f6:c3:44:5c:e5:bd:25:c9:73:00:d2:11:
c7:06:eb:cc:0a:e5:04:88:75:db:30:4b:d5:cb:69:ea:9a:19:
a4:b7:14:ef:2e:a9:42:b3:59:1b:ef:4f:23:3d:20:72:3f:d3:
5d:98:d8:97:c4:a2:75:27:77:51:80:5c:21:8b:19:f7:7a:8f:
5f:66:0f:65:dd:30:b9:a4:cb:45:1e:80:1a:fa:26:0d:3c:d1:
f8:75:06:9a:96:7c:53:0e:06:bf:39:25:aa:ac:da:9c:13:d5:
4f:af:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:16 2026 by rpki-client