Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: P6DHyNt/TDVH/91bXB83tRZpWT+2sdFxuzm6Aqgap1g=
Subject key identifier: 5E:30:6E:8C:79:61:14:D9:A5:84:3D:81:E8:F2:AD:13:FF:9A:62:B2
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019FA9754E61618AB25DBF2E7436325AC285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 0212
Signing time: Tue 28 Jul 2026 16:01:04 +0000
Manifest this update: Tue 28 Jul 2026 16:01:04 +0000
Manifest next update: Wed 29 Jul 2026 16:01:04 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: HyuqygxBzPAJ8CbJhBnpkh7uCnEW5K3DCuNyJaz5JA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:4e:61:61:8a:b2:5d:bf:2e:74:36:32:5a:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Jul 28 16:01:04 2026 GMT
Not After : Jul 29 16:01:04 2026 GMT
Subject: CN=5e306e8c796114d9a5843d81e8f2ad13ff9a62b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:18:bd:5a:df:a1:da:fa:d8:07:80:bc:05:
2f:85:95:d0:9a:0c:64:fd:c5:ed:e3:69:a4:e0:c6:
cc:4b:d2:14:e2:3a:cf:b2:26:1e:95:75:3f:b8:87:
a0:9e:0f:d2:ce:8d:12:fe:c1:78:04:42:82:cc:2b:
84:d1:a1:c2:e5:c4:a1:34:16:8c:71:64:26:a2:62:
49:66:c2:f6:1a:f5:7a:dd:6f:6a:a0:dd:76:21:2a:
53:87:2b:ca:cf:4a:f4:83:6c:9b:01:fd:3d:ed:8b:
37:a0:62:dc:b2:0d:3f:66:05:33:d5:ce:8b:2f:0c:
7c:46:a5:3d:3b:3b:67:d0:fb:51:54:00:f1:57:93:
7f:f3:05:26:5c:b4:6b:85:2b:28:2c:05:94:64:af:
cf:3d:e1:bc:e0:85:81:f2:46:88:0a:90:75:a5:a8:
92:44:da:da:ab:56:d4:f4:25:b6:66:3b:35:6f:c8:
f8:c4:50:35:c0:38:ef:9f:cf:d0:98:5f:9e:98:7c:
fe:66:68:2a:f8:40:2d:de:7d:5d:f9:e6:68:fd:1f:
58:9b:8b:ca:af:99:f8:a2:25:91:d3:16:9a:13:36:
54:e8:1a:1c:ce:69:4d:93:6a:23:bb:12:42:41:be:
59:ad:9a:a5:81:48:e1:9d:4c:e2:89:d4:6b:ab:48:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:6E:8C:79:61:14:D9:A5:84:3D:81:E8:F2:AD:13:FF:9A:62:B2
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:99:37:23:48:b3:4f:16:95:d8:20:04:a8:23:bc:34:54:84:
3e:bd:2e:c4:68:83:d4:06:ad:25:44:b2:a6:ff:d3:38:29:81:
35:59:f8:45:f6:3b:3d:d0:35:bb:63:6d:4d:8f:3a:65:80:c7:
11:fb:1d:72:e8:df:db:58:26:a5:7d:b8:83:69:59:4b:9e:3a:
39:ce:9d:54:1f:3f:8b:d2:99:96:58:39:aa:4a:6c:e3:28:ee:
12:a0:ae:8f:6f:da:54:01:ac:79:3c:2b:fc:b0:17:4c:ef:30:
34:a0:90:6b:0c:fe:b7:ac:97:d3:ab:18:95:19:b0:7f:7a:61:
e6:4c:a9:a6:70:55:cc:70:2b:5e:7b:d1:cf:d6:7a:81:04:36:
43:26:d7:1c:7c:65:1b:d9:45:b1:b5:a6:ce:e4:ac:59:4d:08:
54:2c:b0:35:16:f6:1f:39:0b:20:3a:5f:2e:f7:01:a3:cc:58:
d8:2b:26:d8:eb:aa:25:bb:b4:8e:92:4e:21:0a:9c:fa:0e:7a:
f2:32:53:ac:20:9a:33:1e:d7:2b:10:85:49:39:0c:06:8b:bd:
37:59:40:55:21:d9:19:50:27:c6:60:b2:84:a0:58:16:eb:39:
27:01:e2:70:f3:ce:1e:ed:73:6f:c2:e1:14:91:de:ca:ab:58:
d3:55:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:28 2026 by rpki-client