Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json)
Hash identifier: GL6UrrwHHUfr7g1kTPzh7RmAg37MdK872pTPYMYehoQ=
Subject key identifier: 68:4C:EF:89:B4:B2:4E:DE:F1:CE:D3:C9:53:77:EE:DE:57:6B:7C:B4
Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Certificate serial: 019CAD5968DD5E2F5B7ED0F0215E913B6A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
Manifest number: 10B7
Signing time: Mon 02 Mar 2026 07:00:43 +0000
Manifest this update: Mon 02 Mar 2026 07:00:43 +0000
Manifest next update: Tue 03 Mar 2026 07:00:43 +0000
Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: Y9sJ14gCC91byWD/snc9OFDmGwcqAQXqgDCeems7POc=)
2: michsV01Z00JBjY24wayKz4Cjf8.roa (hash: e303uFjUpDcLP+u96UOiCW3TEo59fwyiJHUokZB7KIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:68:dd:5e:2f:5b:7e:d0:f0:21:5e:91:3b:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb
Validity
Not Before: Mar 2 07:00:43 2026 GMT
Not After : Mar 3 07:00:43 2026 GMT
Subject: CN=684cef89b4b24edef1ced3c95377eede576b7cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:88:c6:5c:92:e7:f7:eb:9b:54:e4:53:4f:
a2:38:a6:c5:7c:56:d8:e3:6f:f7:5f:72:71:4a:33:
4b:dc:e3:31:cb:0c:fd:b5:25:7c:eb:40:b6:19:9a:
71:2d:87:e1:09:bf:9c:ce:e3:54:ee:a8:1a:65:12:
ce:67:30:b3:98:ff:be:5f:3c:df:dc:fe:b4:e9:cd:
1c:b8:e1:66:a7:50:5b:a6:8e:c8:e2:54:29:28:af:
ee:6d:16:20:7c:88:ec:3d:f0:b0:7d:9b:5e:e9:70:
02:f3:83:70:5f:52:a5:84:59:47:e0:19:a5:8b:14:
06:ea:69:12:d7:ca:e0:78:bb:82:b6:0b:48:05:d1:
86:d9:4d:6d:cf:fc:5a:80:8d:70:58:08:e5:8a:b6:
b2:24:54:13:f6:5a:77:f4:d4:45:7e:26:7a:24:f6:
e1:dd:cb:b8:ad:75:f6:07:86:43:5d:05:8a:0a:4f:
d2:cb:be:e3:af:d2:47:85:2e:09:9e:14:13:c1:ea:
87:0c:ec:46:7b:ea:1d:f0:81:db:19:80:94:01:c9:
b3:a5:26:9d:50:b0:0c:fd:50:54:2a:34:b1:0b:7f:
6f:0f:36:ed:ba:89:7e:ac:69:03:0c:30:6d:df:b6:
81:b2:83:1e:09:b5:2d:df:71:46:40:14:dd:2c:01:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:EF:89:B4:B2:4E:DE:F1:CE:D3:C9:53:77:EE:DE:57:6B:7C:B4
X509v3 Authority Key Identifier:
keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:69:b4:24:8c:81:8f:24:b7:e1:d2:52:de:fd:ce:19:81:
7e:a6:b9:f9:94:60:0e:74:c5:ad:65:62:22:7f:6e:8f:fb:e4:
71:2e:78:59:f2:d7:1c:56:8c:d7:1a:07:a4:91:c1:1f:fc:1a:
ee:26:39:26:01:44:3f:d9:1a:3e:6c:53:00:62:83:11:b8:53:
02:53:34:48:91:44:39:c2:2b:a1:4c:a9:a2:17:ac:06:ec:d5:
7f:d5:07:5d:44:5b:ca:0a:7b:9b:79:2d:b4:ee:a5:99:0e:20:
9b:b8:ee:6e:fe:18:fe:0a:bd:f3:5f:2b:19:c4:b3:19:da:0f:
37:c8:18:eb:d9:01:36:42:64:37:af:46:45:e9:b0:5b:da:31:
74:b2:85:64:3f:a5:c7:2d:9a:02:15:de:90:fb:41:74:35:f9:
0a:9e:b7:3b:30:06:15:df:5f:91:a4:9c:55:5f:e4:74:dd:6f:
59:00:14:2b:f9:b6:82:24:ff:43:b6:a7:05:f7:84:49:0c:69:
30:28:81:65:44:42:81:30:f4:26:9f:6a:29:bd:56:66:fa:67:
11:e4:ca:8a:2d:81:c5:b2:f0:56:a6:b3:86:58:9f:76:cc:73:
00:99:10:6c:fb:c5:8c:b1:50:75:8c:f7:99:63:dd:eb:02:3e:
64:19:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:36 2026 by rpki-client