Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier: JywKXryb/BvbXLq4yD6oZZGezZUeDYsmD1AgtLvF7VE=
Subject key identifier: DC:B2:31:26:E8:02:D0:DC:52:82:60:C6:54:0C:C5:CF:9E:67:6A:F4
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019CABA23C91291C8E86BC5257E5AA92BF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number: 0ABA
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (hash: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo=)
2: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
3: I2Umub_SU4NDlntrD-fNKlSfw2A.roa (hash: +WIWYqc1qAYKSxLwYH4qBjDRq+jDT6j8Mg3i7GXbP1w=)
4: Ly8SorW7w_Dg6fAIrTVOdpaVPT8.roa (hash: HGTHpvo69BEECWSdkFYK6o3wp1FqLkLH4LXf5TzKib4=)
5: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: GAGcMHufIZziTy+7KvLW5COQueXVXm1Uv7GJqAHU+iE=)
6: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
7: f87NuGp7A6DaRUC_zwqT_7O3tS4.roa (hash: c2ACPzTSYNtKwiyoMpx3Rg168yL6C/jP/BnBOYSTTR4=)
8: ghjgpQCXu2keg81nWlTEtZo7k4E.roa (hash: iE1H5q2bGSfCm5jtVmORl4h7Daec5vdTAeKEQr0iK/I=)
9: iZcZ_-KRFzETMXfXgFqcCVyHHWw.roa (hash: rbsN5PPkcbMSn4E12T9YbjsvzB+VtJOV1oya4fK1cDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3c:91:29:1c:8e:86:bc:52:57:e5:aa:92:bf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=dcb23126e802d0dc528260c6540cc5cf9e676af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:02:6d:04:f1:89:d2:e4:04:fc:cf:a2:80:
fc:b3:86:4a:9d:26:85:dd:c5:17:92:c3:20:9e:5f:
63:79:9e:dd:42:ac:df:85:e5:8a:22:93:71:ab:9f:
ef:69:05:68:8d:d5:a8:9f:e2:3a:c0:0d:f5:37:f2:
92:fd:a5:8d:03:36:34:4e:c9:ab:53:ea:d3:34:08:
dc:a8:88:c4:d3:34:63:17:fe:1b:25:2c:d3:09:67:
e5:3f:69:d5:56:92:82:7d:e4:23:cd:ee:db:8f:d8:
8d:0d:a3:d8:4f:71:5d:e9:cc:88:5b:cc:42:58:cb:
dc:c2:da:67:b9:fb:56:a9:21:fe:03:7e:cb:3d:89:
38:90:e6:4b:2a:57:76:d1:68:6a:94:98:fe:a5:7e:
46:55:84:48:cc:05:b4:5e:55:af:88:90:ca:d5:93:
2b:af:d9:1f:72:c9:eb:65:5b:27:4b:58:6a:43:86:
c4:bb:62:73:1a:30:3e:4b:bc:1e:29:99:cc:aa:48:
57:79:87:5e:23:8c:68:c2:09:9a:dc:60:dc:09:be:
06:f8:57:b0:23:37:3b:bf:0a:cb:11:79:8c:b9:be:
3e:c7:e2:f9:ea:5c:0b:4d:97:84:be:ad:24:7f:62:
bb:36:98:e6:89:88:d5:bb:96:86:9c:4b:08:2a:de:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:31:26:E8:02:D0:DC:52:82:60:C6:54:0C:C5:CF:9E:67:6A:F4
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:c3:79:88:16:38:b0:9d:a3:17:bd:b5:c6:a0:2d:7c:5b:
dd:d2:28:db:d9:02:ba:73:d4:ac:ba:3b:3d:82:21:74:43:8f:
b4:ad:7e:0b:a4:97:d5:4b:ee:98:a4:c8:32:40:62:bc:49:55:
ca:1a:ea:82:37:e9:6e:c3:ae:ae:d7:fb:ed:cb:cc:e8:94:4f:
75:e7:29:be:09:f6:35:f9:26:9f:6e:58:07:90:64:f1:80:6e:
51:ed:65:20:13:17:ef:a1:6c:1d:59:b6:a9:b2:40:a6:61:e3:
7f:16:40:64:6a:4c:f9:af:fb:e7:7b:7d:73:b5:5e:a9:d8:21:
9b:a3:11:25:e1:0f:10:08:53:55:2a:48:a9:31:cf:ae:70:33:
23:67:3b:1f:0d:22:19:c3:3f:89:02:7f:34:84:f6:76:55:80:
a0:88:27:c4:b2:60:35:8a:49:a3:5c:93:44:04:43:62:03:cb:
de:75:e9:bb:98:0f:c2:31:a9:ca:5b:f0:53:d7:6f:c7:b0:26:
80:67:f0:f2:9c:09:c1:d8:cf:f5:02:d2:20:ac:a7:99:18:c5:
cc:10:fc:30:5f:27:4a:1f:39:05:75:88:7e:41:87:8d:b3:6f:
7b:2b:56:a2:5b:1c:c8:98:6b:35:ea:43:4e:ec:0a:0a:dc:0a:
a5:a8:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:31 2026 by rpki-client