Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
File: TYSYYfMMjxxiytuIlYRGumIAIe0.mft (raw, json)
Hash identifier: ENWyabuERgGlobuIQ10PAp3WRp0821NwAh894l6h2v0=
Subject key identifier: 80:14:3C:0B:DC:C4:22:56:34:EE:95:08:F5:CB:1C:07:9E:72:EC:0F
Authority key identifier: 4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
Certificate issuer: /CN=4d849861f30c8f1c62cadb88958446ba620021ed
Certificate serial: 019D9CD120C550AA7674B7094D7A8A4F3D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
Manifest number: BD
Signing time: Fri 17 Apr 2026 19:00:44 +0000
Manifest this update: Fri 17 Apr 2026 19:00:44 +0000
Manifest next update: Sat 18 Apr 2026 19:00:44 +0000
Files and hashes: 1: GeKF_o_PfrSG_Hb_I-53-eabGPA.roa (hash: HwtzsWwHgYO3i4AZJzWKNYuJqNwg3RNNj5C8hQ0FBi0=)
2: TYSYYfMMjxxiytuIlYRGumIAIe0.crl (hash: gPvYbNyVrnqLHG+rEJacOqwAOVX31oVdWb12NtZvNOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:20:c5:50:aa:76:74:b7:09:4d:7a:8a:4f:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d849861f30c8f1c62cadb88958446ba620021ed
Validity
Not Before: Apr 17 19:00:44 2026 GMT
Not After : Apr 18 19:00:44 2026 GMT
Subject: CN=80143c0bdcc4225634ee9508f5cb1c079e72ec0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:92:52:e9:f7:9e:51:76:10:a9:ba:7a:a1:
2b:72:d2:16:87:a3:9e:07:9b:43:c9:39:7e:f6:ed:
7e:33:d2:6b:9a:1f:ff:50:5b:7d:81:bc:2e:cf:11:
e1:4c:ce:2e:97:cc:3d:a2:e6:b6:2a:0e:63:6a:5d:
3a:e8:aa:c8:19:57:71:65:73:02:88:69:49:17:3e:
bb:84:78:c1:e3:9d:da:64:61:bd:a5:ba:7f:39:97:
66:e1:9d:4c:63:15:67:3c:cc:ef:1a:2b:80:98:c1:
56:1e:af:f4:00:bf:16:d5:75:d1:3d:6c:10:ff:e0:
00:23:50:09:23:e2:3a:2c:b3:11:8b:10:0d:29:4c:
9f:86:62:7a:28:d1:69:af:f3:08:03:09:c7:b5:3f:
96:e3:85:f1:83:2e:22:02:d7:c3:8e:cd:8b:9c:5b:
1b:9a:a0:40:47:f2:2e:e8:b2:f4:a1:76:a4:a5:f7:
49:f4:da:ef:02:67:bf:95:08:74:ff:be:30:96:20:
1f:6a:0f:62:5c:bc:77:77:54:e3:87:f0:6a:c5:d9:
af:d1:de:7f:a9:45:9b:24:4e:2c:02:0d:59:db:31:
d5:60:78:7b:f8:39:d0:89:57:2d:d2:9c:98:d5:56:
1c:f2:a5:d9:59:27:00:04:68:35:a9:fc:86:6f:fd:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:3C:0B:DC:C4:22:56:34:EE:95:08:F5:CB:1C:07:9E:72:EC:0F
X509v3 Authority Key Identifier:
keyid:4D:84:98:61:F3:0C:8F:1C:62:CA:DB:88:95:84:46:BA:62:00:21:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYSYYfMMjxxiytuIlYRGumIAIe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/63c648-1aad-49e6-a817-6d6856fd1e7f/1/TYSYYfMMjxxiytuIlYRGumIAIe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:11:be:86:6c:3f:86:64:22:c5:84:33:a5:36:61:5c:59:
1e:bc:04:45:2c:a8:64:73:82:8a:c5:f5:09:c4:68:a8:e7:df:
b8:3b:de:82:c5:86:82:98:30:3a:60:a7:7a:bc:22:f6:12:b3:
f6:c6:78:ed:7f:b7:14:67:17:8a:97:d9:fa:a7:4e:1a:9e:b1:
b6:43:72:64:88:64:3e:2b:66:3e:f1:fd:96:60:e5:0e:a2:f4:
d4:82:5b:a1:e8:17:05:69:b8:c0:4a:39:7e:36:fe:14:46:7a:
d0:81:a8:1d:af:16:68:79:5d:65:18:29:2d:9f:21:7a:88:ad:
8a:74:39:3f:62:d0:72:9a:91:8f:06:f9:32:e1:c8:14:c8:33:
9f:42:81:b6:65:e0:a3:dd:68:eb:9f:73:6f:77:a6:d6:9f:9f:
ee:00:c2:95:03:4c:0a:62:bf:c8:47:ab:5b:ae:ef:8a:20:aa:
5f:61:10:35:7b:b8:ab:3a:93:99:7a:7a:1a:88:66:c8:8b:2b:
e8:a5:f7:41:0f:fc:ba:8e:ee:85:21:a9:a0:27:2a:4e:35:02:
5a:30:eb:d6:c7:9e:a6:53:38:09:e9:99:8d:e6:b2:f9:f7:fd:
30:41:f7:68:48:ae:cf:2c:18:98:5e:a4:3d:2c:5d:66:c5:4e:
76:72:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:54 2026 by rpki-client