Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: GbDUahmUFfnkie14gu5xrprzuNJxllHY9y2GNxu3g4g=
Subject key identifier: 0B:BD:4A:E9:62:FE:AB:2C:3F:73:0E:AB:2F:4F:AB:EB:15:B1:6E:5B
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019D3866581DAE4B506D4084E9804A83ADC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 89
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: QdV5iy8/FclUa1WDLsXQ8CVNp50ncp78haB/9M0kiNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:1d:ae:4b:50:6d:40:84:e9:80:4a:83:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=0bbd4ae962feab2c3f730eab2f4fabeb15b16e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7b:b8:7f:b1:c5:c5:5b:b3:f7:98:90:fb:69:
bd:59:28:8b:13:fd:3e:8f:48:e5:ee:bb:d7:9b:1a:
f4:c6:ae:a4:2b:9c:29:db:43:92:c0:96:ac:0f:2a:
67:52:95:db:61:9c:35:ad:b3:73:fb:76:9e:f2:a9:
1c:1c:7e:26:2c:fb:9e:ea:e6:29:95:a5:c7:b5:7e:
22:bf:bc:9e:8c:60:15:7c:03:cc:b6:31:35:56:f4:
1b:54:f5:90:d9:9a:43:cd:e3:e8:4c:45:f9:5c:5e:
74:d9:6f:9e:5f:01:60:ca:bd:14:27:d0:37:7c:3a:
ee:04:ca:0e:a7:b4:45:ed:a2:99:e7:6d:8c:79:e7:
8f:d9:62:0f:bc:51:03:6f:7a:85:99:5a:6f:45:83:
e8:39:2d:2e:ab:bf:cf:88:d9:fd:02:4b:6d:87:72:
fb:80:5f:0b:f1:36:c4:f2:72:29:c1:57:b7:66:bd:
a5:c3:d0:04:b4:3d:76:72:7b:28:e9:7b:81:08:0d:
bb:62:88:e3:56:d6:37:ef:e4:1c:86:a6:7d:6e:69:
51:1b:ca:e1:f0:18:63:b4:59:bf:34:97:4b:a0:14:
f5:dd:d9:9a:fc:73:4c:ff:1c:4e:4b:c4:8f:ff:03:
48:43:fa:5c:4e:2e:7a:f5:10:b6:b5:a7:72:d3:28:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:4A:E9:62:FE:AB:2C:3F:73:0E:AB:2F:4F:AB:EB:15:B1:6E:5B
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:fe:35:5a:bf:c9:5e:6f:05:2d:49:af:0c:08:f3:9c:b8:
a2:22:40:80:54:5c:5d:da:4f:67:01:0b:2f:91:a0:2e:e3:55:
36:c3:7f:1a:3a:4b:80:b9:b1:77:0b:a4:8e:28:ca:0d:fa:41:
63:54:27:1f:46:2d:bb:64:a8:d0:20:b5:7a:76:9d:b7:fd:8b:
1c:d0:90:65:aa:fa:a0:66:aa:4a:3b:5f:9a:8f:01:5b:50:bd:
1a:90:fc:88:08:e4:07:96:49:0d:bc:bf:7c:ae:a6:08:36:a2:
e1:df:83:27:e3:d1:27:64:71:40:56:bf:d4:ed:f7:b9:b7:5f:
40:97:44:00:b2:2d:e3:5b:4a:d5:d3:df:f8:9f:47:7c:8d:b9:
57:97:b2:14:a2:1c:28:de:f1:ce:a0:5d:d3:a3:1b:fe:74:5c:
40:6f:59:10:1d:6a:a3:47:a4:c4:a8:7e:50:18:7e:3b:c9:34:
d8:81:c9:1d:8e:b5:bf:7c:ae:40:d4:f5:d8:3f:9a:28:38:bd:
fe:76:7b:54:86:9c:8e:74:27:36:9f:fc:5a:bb:2e:6b:fa:92:
62:7d:73:a3:60:1a:f3:79:fe:49:f6:f0:4b:9e:cb:da:4b:ba:
a9:a9:b7:85:78:54:e6:1a:53:95:d5:7c:3e:a3:6c:ad:64:5a:
57:c2:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:37 2026 by rpki-client