Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: 3vYYUsNObcXsLuncNnKbpx5L7IG2PBJ5WYsvBN0tbow=
Subject key identifier: C0:18:F3:7F:13:F2:55:4D:63:C1:DD:06:1B:79:B6:5C:A3:03:C4:89
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 01A0E4E37A36259009182026DFBBEA776700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 0270
Signing time: Sun 27 Sep 2026 22:01:48 +0000
Manifest this update: Sun 27 Sep 2026 22:01:48 +0000
Manifest next update: Mon 28 Sep 2026 22:01:48 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: ctJB4yQj+mfxp4HtQ1xhD+r2iZlLTFr7fw+Ua3/17V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:7a:36:25:90:09:18:20:26:df:bb:ea:77:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Sep 27 22:01:48 2026 GMT
Not After : Sep 28 22:01:48 2026 GMT
Subject: CN=c018f37f13f2554d63c1dd061b79b65ca303c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:82:81:b9:1e:68:ca:a6:82:d9:e8:02:5f:
d7:86:ae:21:b8:ac:43:0a:ee:09:3d:b4:04:4f:84:
c2:14:0c:ec:8e:28:74:50:93:60:45:a6:c6:b3:ef:
71:6c:96:bf:de:12:c5:1e:26:d6:f4:ba:d9:c1:e6:
dd:90:7e:f1:d4:92:9c:50:6d:73:b9:51:2a:56:7c:
ef:b9:6a:21:b8:69:d5:5a:4f:b5:5f:e4:a6:7a:8b:
63:e2:32:85:75:23:36:ae:97:b3:58:b0:12:2f:a5:
f6:4a:23:69:f8:d9:7e:ea:62:69:22:2c:e4:6e:9e:
5a:2d:57:b3:dc:0a:0e:92:16:e7:85:09:16:98:83:
70:8c:b2:d4:bb:1a:5f:81:71:04:df:d5:97:5a:53:
a0:54:ce:2c:db:f3:18:bb:02:ff:c2:6f:4e:6c:33:
74:c7:1f:8d:bf:ca:9e:e5:1f:10:5f:f1:ab:05:75:
a6:e6:b9:b1:8f:94:4f:04:fa:31:61:8d:89:14:a2:
db:c7:65:72:ab:fd:40:38:11:85:93:d3:e1:57:17:
ba:85:be:71:37:f0:27:56:e0:8f:b6:19:2f:87:2e:
08:ae:db:3f:4b:3d:e4:62:96:8f:26:59:ba:94:d9:
b0:7f:f1:ba:15:82:95:f3:82:e3:d2:06:29:10:49:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:F3:7F:13:F2:55:4D:63:C1:DD:06:1B:79:B6:5C:A3:03:C4:89
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:11:51:3c:71:4f:37:84:0e:b4:ff:e9:b0:7c:13:a7:60:
7a:e3:28:6a:a5:a9:78:f3:26:3d:64:9b:b8:11:d9:8d:31:31:
c6:12:8e:f0:6c:2b:b5:c6:7b:03:6d:d4:01:eb:16:32:63:84:
4b:53:d1:43:99:29:1e:b9:fb:29:ca:cd:fe:1c:9a:cc:88:1f:
af:f3:c8:f8:3c:05:c2:55:0d:73:80:7c:2a:0d:a9:18:2e:3c:
80:53:12:2e:99:35:8d:70:3a:d4:dd:c0:38:c3:ed:73:ef:b4:
36:63:87:c7:f0:08:d1:77:da:c2:ad:c2:07:6d:86:e6:92:a2:
80:a4:0a:bc:b5:87:a2:e3:6d:2c:64:84:4d:fb:f7:a5:7b:13:
47:82:8b:e3:e0:32:ec:df:da:3a:4a:19:f0:ba:b6:67:1a:02:
81:97:4e:d6:2a:a2:83:da:77:1c:31:a9:0f:60:d4:7a:1b:f1:
b1:bc:41:f5:d2:94:95:a2:c3:b6:2f:e9:08:a4:26:b4:47:a9:
5e:ff:bf:e8:d6:8d:97:2d:0f:2d:5f:cb:09:3e:eb:35:25:2c:
f6:0a:0d:e3:c7:e2:0c:3d:34:58:e0:9c:af:30:88:4b:de:09:
05:3f:47:27:a6:2e:b8:6c:ba:4a:6d:96:7c:51:06:5c:37:40:
c6:79:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:06:43 2026 by rpki-client