Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: qx+faAngODZLLg8wSxGRnD1lnyI8Yg5sosIPDCxlA1U=
Subject key identifier: 7F:31:99:13:A1:E8:98:A7:5C:C2:0C:1C:29:9C:9C:CA:92:FA:36:21
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019D9A3E9F832102A19AE0FF6BF198C428E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 0101
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: FMLStO04SrWJsEzxQo6tEupv2oUqLXnqEo3lbjMXjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9f:83:21:02:a1:9a:e0:ff:6b:f1:98:c4:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=7f319913a1e898a75cc20c1c299c9cca92fa3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:e2:72:c5:72:01:cc:17:ce:46:bc:38:5b:
46:92:e8:60:b4:42:36:4e:81:a3:a7:46:a8:8e:52:
11:a9:23:c2:e4:db:8c:c2:2f:aa:a4:11:de:43:69:
8b:3a:73:c8:70:43:4c:a7:a2:4b:c9:c7:35:bc:df:
76:2b:e0:ff:a8:de:f6:d5:ad:8c:0b:10:da:3e:a1:
8c:37:69:a4:46:57:31:c4:66:3c:39:b4:e7:d0:ad:
46:58:67:cf:08:a0:73:1f:02:a1:07:1f:e6:42:ab:
c2:32:c8:b3:c7:92:f4:1d:f1:b8:04:5f:3c:55:5d:
64:a0:b7:57:29:9f:4f:6a:66:14:59:e4:ce:89:08:
b4:e2:51:6e:63:49:16:e6:1e:56:7f:6a:c4:4e:68:
cf:55:c4:75:42:09:ac:77:92:4c:ee:64:de:32:83:
26:14:7b:37:b9:dd:73:b0:af:db:39:0d:ed:50:81:
3c:ec:c2:70:dc:c2:0d:c1:ec:38:d8:29:ee:8a:88:
ec:26:8e:49:e7:61:d0:8e:37:de:ab:21:30:38:9c:
d3:81:94:20:b8:ef:b5:83:75:47:fd:d6:58:45:3f:
fe:e9:e3:d6:23:e4:55:44:78:26:2b:a4:d0:ac:4e:
3c:2e:4e:68:f1:40:a0:76:50:08:20:90:21:eb:8e:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:99:13:A1:E8:98:A7:5C:C2:0C:1C:29:9C:9C:CA:92:FA:36:21
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:14:48:13:cf:d6:e0:d2:0c:b0:75:6f:a4:c6:c0:60:6e:
8a:33:3f:2a:93:e2:ef:cc:d3:8f:82:9f:d0:7e:f4:ad:71:29:
5f:59:9a:72:8c:4d:f4:c8:92:3d:00:a9:25:f3:fc:5e:d6:aa:
ce:25:6e:21:be:53:79:d1:ac:15:16:0c:20:ca:2d:96:0a:ab:
0b:cb:7e:5e:f1:06:f1:f9:b0:21:f7:9e:2b:8a:b4:10:bd:df:
29:c9:cf:ad:1e:0e:4d:3c:cf:98:22:be:9a:95:01:d5:9d:73:
c0:11:f2:a3:8f:8c:b9:0a:d9:5d:4f:c3:60:27:60:db:74:f1:
c3:85:85:da:2c:c5:9a:aa:63:6f:64:69:26:4e:b6:d9:65:d8:
b7:87:de:b9:9d:2b:46:87:64:1f:66:a9:82:9c:33:b6:bc:3f:
76:c1:dc:b0:15:e6:80:c1:d0:30:18:7c:cb:4e:c5:ea:52:0e:
55:be:e0:2f:9f:56:aa:76:9d:1e:da:ff:51:7a:d4:ca:a8:fb:
a8:42:05:4c:66:e3:2e:0b:22:d7:dd:b1:36:e6:b5:21:73:31:
e8:b1:51:00:71:a2:ae:67:ae:fe:50:13:04:66:67:85:c7:ef:
f8:31:33:42:e4:54:3c:ca:a0:9f:5c:72:85:f3:25:c1:27:c7:
22:25:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:56:51 2026 by rpki-client