Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: KRGk2dxHCFdnJ4bMOVQxNWzNNugiqetKdoWbh6kvQjY=
Subject key identifier: 3B:4B:8B:97:81:CC:8A:4B:50:D0:E0:75:55:65:23:6E:C6:52:FD:D2
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019CA8D7A85FFE722A2BBE61446C83B8A9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 84
Signing time: Sun 01 Mar 2026 10:00:31 +0000
Manifest this update: Sun 01 Mar 2026 10:00:31 +0000
Manifest next update: Mon 02 Mar 2026 10:00:31 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: 0psBTgSqwWz3MFhAeoyI+6aaYzRsA10n33fO05ppOmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:a8:5f:fe:72:2a:2b:be:61:44:6c:83:b8:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Mar 1 10:00:31 2026 GMT
Not After : Mar 2 10:00:31 2026 GMT
Subject: CN=3b4b8b9781cc8a4b50d0e0755565236ec652fdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:b3:3c:62:f7:7f:82:e0:57:94:21:2b:f4:
46:16:35:b0:76:81:99:52:3b:9b:cf:01:ec:74:f0:
29:cc:7a:e3:bd:5b:f3:47:9a:09:17:e8:56:0d:48:
61:3f:c7:51:5e:e7:02:66:5f:02:b4:58:40:06:97:
2b:d8:e7:49:a1:e8:a7:67:30:c9:8a:b0:28:95:4a:
33:2f:62:fc:d0:4d:90:96:3c:f8:9e:9a:88:13:9d:
70:31:cf:df:1e:5f:11:7b:75:10:5d:4e:cd:e2:c9:
8e:44:b6:a0:03:ae:ef:85:20:52:17:ec:88:bd:f7:
65:5d:95:db:1e:ea:80:90:82:12:b2:dd:23:1d:ab:
aa:88:63:ac:7c:4d:8e:d1:4e:39:86:8a:d3:35:8b:
97:42:50:c6:a4:f1:71:d1:e6:02:46:50:81:e4:fb:
1d:56:cd:f3:0e:d6:bf:05:34:7b:63:37:04:04:4e:
6e:9d:de:1a:2d:77:c6:d5:59:a1:f4:39:cf:80:11:
25:47:85:7f:dc:b2:df:4b:13:e6:64:d0:ec:8c:a9:
f7:47:4d:72:a7:f2:b2:06:c5:c9:7c:f7:5e:65:1b:
c9:d7:91:b1:83:8e:68:4b:ee:b6:78:65:a9:88:05:
fd:17:7d:76:50:be:09:59:83:b3:cb:c6:e4:fe:58:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:8B:97:81:CC:8A:4B:50:D0:E0:75:55:65:23:6E:C6:52:FD:D2
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:14:d8:eb:d5:e8:0e:25:e3:a2:44:8a:ff:27:ac:72:a6:11:
6a:fb:59:75:e0:41:74:61:ba:85:f8:14:f6:dd:af:50:1b:5b:
30:8c:8c:f7:d2:77:6e:af:e5:2c:ab:de:23:a0:7e:f1:5b:25:
ea:f9:03:89:48:7a:0f:81:3d:9e:db:0d:4a:87:3d:ad:d9:d1:
03:c4:e7:4c:7a:af:55:5c:28:28:de:df:d8:9d:fa:39:85:4b:
c4:ae:e3:a0:21:6a:70:c4:45:e9:56:02:f4:7f:42:dd:26:1a:
56:ba:a2:e4:34:ea:ff:b2:09:54:de:2c:a2:83:d9:e8:46:2c:
e8:c7:db:d3:da:d4:14:33:67:22:b0:f4:25:b2:de:df:c0:f2:
a5:21:ac:7f:79:a2:04:87:29:5b:b6:8b:bf:30:89:18:9f:31:
2d:60:04:09:ff:bb:79:f2:23:46:4d:a8:77:2f:c7:c6:d2:38:
64:fc:d4:f8:c7:a6:e6:95:e4:3c:0b:db:0c:90:f9:36:8a:53:
36:c3:90:4f:7d:20:f6:39:a7:ae:93:fd:7f:07:90:0a:e0:d6:
b4:17:ff:3d:ab:90:d7:79:d5:ec:73:bc:5e:cf:3f:ec:12:03:
ec:62:a6:77:26:89:15:3c:28:b8:60:b3:5f:aa:10:dc:58:16:
8d:56:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:31 2026 by rpki-client