Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: FW1PmCoci6PMijziaZ+HxIQ8r6TYxiFjiXGUvyqSDlI=
Subject key identifier: 36:0A:A5:5C:DC:00:8E:AD:BB:D2:C4:0F:B8:57:4B:AD:81:7A:30:1D
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019FAC0818E382E29B883C52B5936156A06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: 01CE
Signing time: Wed 29 Jul 2026 04:00:39 +0000
Manifest this update: Wed 29 Jul 2026 04:00:39 +0000
Manifest next update: Thu 30 Jul 2026 04:00:39 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: pYq9ZrtoRohr4QpWubVXmIGO21ivRsNupa8+4PoaO7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:18:e3:82:e2:9b:88:3c:52:b5:93:61:56:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Jul 29 04:00:39 2026 GMT
Not After : Jul 30 04:00:39 2026 GMT
Subject: CN=360aa55cdc008eadbbd2c40fb8574bad817a301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:5b:fe:75:64:64:ca:92:00:98:f2:ea:e3:
71:b6:c0:62:c7:84:03:4e:75:81:29:f3:10:16:89:
7a:58:fe:cb:56:ee:0a:7c:d6:ed:8c:14:d8:0d:b0:
da:07:22:8e:3b:9b:eb:d5:02:91:18:cc:fb:26:c6:
f9:91:3b:63:a4:64:f5:6c:21:2d:fe:3e:bb:9f:40:
6f:49:82:d5:ba:f2:cb:20:db:c4:b6:44:bb:a2:2a:
3b:21:11:e0:46:80:08:5c:47:ce:0a:18:78:e9:4c:
f6:02:87:f2:b9:f6:a9:1e:ae:3e:14:36:07:25:99:
24:18:70:74:67:e4:7c:b6:24:88:9f:cf:99:63:cd:
17:e4:fc:f2:f5:f7:70:f2:ad:c0:7d:10:e7:65:e2:
e4:d8:48:7b:e8:af:73:21:fd:51:c7:da:81:98:33:
90:be:a0:da:7e:c1:17:b4:95:de:58:71:86:c2:19:
c8:b2:48:fd:67:50:0b:57:27:9d:48:14:d5:4c:0b:
8a:8a:45:64:21:f3:c5:11:a2:df:11:e5:9a:b8:cc:
8b:84:94:5d:f8:9a:fc:a2:18:76:b9:05:7d:80:24:
96:82:23:a4:17:26:e9:14:00:6f:bc:8e:ef:e1:10:
6e:53:07:8c:09:fb:b1:51:3b:aa:b3:c7:61:77:93:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:A5:5C:DC:00:8E:AD:BB:D2:C4:0F:B8:57:4B:AD:81:7A:30:1D
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c3:04:b4:d2:69:45:ec:4c:ea:e8:12:16:59:9f:87:93:51:
45:33:6a:7b:59:8c:ba:09:ca:b4:33:34:a8:f8:9c:c1:c4:58:
62:ee:a3:0b:ff:49:eb:50:90:eb:ce:26:fd:17:91:e9:07:26:
d1:97:a1:3b:51:13:65:74:e7:55:0d:16:00:19:70:7e:1e:37:
cd:dd:b4:3c:b2:a7:01:61:2c:7c:65:c6:ae:31:f0:59:7e:1b:
99:a7:46:77:e0:20:0e:7c:61:f8:af:03:d0:b2:12:3d:91:1a:
ff:4b:54:9e:cb:4f:14:ff:b4:e8:5d:70:be:e8:6e:86:a6:da:
c2:eb:4e:65:5f:df:d7:ce:4d:9b:21:9f:1b:28:8e:95:11:a0:
54:f1:58:f6:08:3e:5a:c9:45:6a:95:4d:84:03:49:84:7a:cd:
63:82:a8:ab:28:63:4a:50:ee:91:76:f0:fc:20:18:1e:a2:ce:
e4:74:e3:ea:c1:29:7f:8d:c3:84:ca:41:c0:e2:6f:ab:93:33:
a2:50:cd:e5:f0:69:ed:0c:a2:b1:d5:b3:6f:a8:21:1d:90:9b:
28:76:ea:9d:3b:e5:19:ce:9a:26:78:b5:af:d0:8c:0d:d8:db:
45:b6:41:d2:60:23:70:a9:4c:45:ae:f7:71:1a:ce:9a:e1:cf:
ac:70:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:20 2026 by rpki-client