Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: tEaUkzV2to0rW4OJYBONwj8Y6tqjry2UopiTCtLv7sQ=
Subject key identifier: FF:75:F1:47:D8:DF:54:B5:48:91:5B:C9:7A:DB:F6:52:25:FC:CB:26
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019CA9B380DAE105CE5B244863B0243CEE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 0AB9
Signing time: Sun 01 Mar 2026 14:00:39 +0000
Manifest this update: Sun 01 Mar 2026 14:00:39 +0000
Manifest next update: Mon 02 Mar 2026 14:00:39 +0000
Files and hashes: 1: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (hash: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo=)
2: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
4: Ly8SorW7w_Dg6fAIrTVOdpaVPT8.roa (hash: HGTHpvo69BEECWSdkFYK6o3wp1FqLkLH4LXf5TzKib4=)
5: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: 4cV7e+5rStVT+EuWqyM66QcoGnNP1YU+IO4hWHzWln8=)
6: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
7: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
8: ghjgpQCXu2keg81nWlTEtZo7k4E.roa (hash: iE1H5q2bGSfCm5jtVmORl4h7Daec5vdTAeKEQr0iK/I=)
9: iZcZ_-KRFzETMXfXgFqcCVyHHWw.roa (hash: rbsN5PPkcbMSn4E12T9YbjsvzB+VtJOV1oya4fK1cDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:80:da:e1:05:ce:5b:24:48:63:b0:24:3c:ee:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Mar 1 14:00:39 2026 GMT
Not After : Mar 2 14:00:39 2026 GMT
Subject: CN=ff75f147d8df54b548915bc97adbf65225fccb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:df:17:4d:fd:cf:27:2b:55:b6:67:39:41:
1a:4d:4a:50:f2:07:fe:84:24:e3:d2:0a:0d:62:ee:
54:fc:88:e5:86:88:37:ef:d8:fc:bc:3e:12:ca:73:
fe:7d:5a:a0:6b:32:54:27:c9:0f:cf:13:0b:5c:7f:
d3:ba:8c:3c:80:76:82:a6:91:38:fb:68:b1:24:eb:
4a:d0:42:d3:61:1b:53:98:50:5e:05:5d:d1:ec:3e:
c0:46:25:a2:e8:09:e4:14:71:0f:93:79:6b:6c:5d:
86:c6:c2:c1:37:84:c0:2e:a4:14:07:14:ee:d9:73:
3e:4e:60:96:d2:37:02:c2:25:37:6c:53:88:b0:1a:
cc:57:8e:40:be:9a:03:18:6b:2a:9e:28:5e:60:e0:
bf:7b:75:a2:d9:53:3a:ba:ed:57:ab:1b:d5:1d:9a:
c9:07:0c:9d:30:d2:29:6f:be:d8:be:9f:53:ac:67:
cc:ab:20:00:39:c5:70:65:dd:cb:4a:89:2f:de:55:
3c:35:4d:ea:a7:ee:69:36:c9:6c:22:09:ec:ec:8f:
4b:18:15:db:60:68:ad:dc:fe:25:1d:5c:e2:ed:2e:
c8:9f:49:f8:aa:00:57:0b:eb:9a:79:79:a1:11:33:
fd:16:58:35:e7:3b:55:8b:f8:5a:e2:5a:9a:4c:1c:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:F1:47:D8:DF:54:B5:48:91:5B:C9:7A:DB:F6:52:25:FC:CB:26
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4f:8c:8b:78:6f:28:7b:9a:b4:ce:af:5e:7c:bd:4e:6b:75:
9f:75:a7:c5:bb:0b:7e:2c:f0:9a:28:91:cd:06:95:29:da:d5:
61:8f:6a:5e:2a:fe:7d:c4:e8:bf:d0:b7:32:2b:12:dd:cc:d5:
29:e3:d3:c6:eb:c1:55:94:cd:8c:89:63:c9:39:e5:ee:9f:64:
f7:40:91:99:cb:ad:e9:c0:92:09:6c:31:e2:38:19:c1:b7:85:
26:e1:a4:00:b0:ea:67:37:cd:dc:57:68:95:21:05:94:62:25:
2c:e7:1b:b6:d6:e6:a6:15:b6:c3:94:38:e8:43:68:f4:2c:da:
6d:2b:61:49:57:ef:82:d8:30:e7:ee:d6:2f:a6:8f:de:9a:53:
d2:33:d4:03:55:df:4f:f9:2b:5a:ed:bc:f6:f0:32:b2:61:83:
88:8e:59:97:cd:bc:2b:8f:13:a0:ac:a1:11:89:3e:5c:d7:46:
83:06:09:cd:a0:da:1d:a7:16:7c:5c:1d:68:02:68:19:20:8f:
be:16:55:32:31:e4:1c:ea:3d:10:88:16:75:13:11:04:28:a8:
eb:42:87:54:6f:c1:40:4f:78:50:69:20:9d:22:98:13:9d:2f:
92:a1:9f:d9:f9:24:c2:30:42:24:db:7f:7c:b6:80:21:67:de:
7a:27:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:43 2026 by rpki-client