Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: 1r7q1w74iRaY+F0yPseuz2ZxaUJ8ZqTPqPy7uZFgSWg=
Subject key identifier: 2F:57:36:28:87:0E:59:D2:20:8E:25:14:44:E9:50:34:41:A3:EA:3C
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 01A0EA0914ACB20D32C80E6A3F2E7F1ED3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: 02B8
Signing time: Mon 28 Sep 2026 22:00:58 +0000
Manifest this update: Mon 28 Sep 2026 22:00:58 +0000
Manifest next update: Tue 29 Sep 2026 22:00:58 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: PK9YHA1BCvDQ5+WV3RNUvPq5zjK6Qyjl5X9Uumc6yWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:14:ac:b2:0d:32:c8:0e:6a:3f:2e:7f:1e:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Sep 28 22:00:58 2026 GMT
Not After : Sep 29 22:00:58 2026 GMT
Subject: CN=2f573628870e59d2208e251444e9503441a3ea3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:d2:c1:60:d0:60:4f:d5:20:b8:55:f3:e5:
ab:a2:08:1e:ff:b1:f7:8d:1e:b2:5e:c4:b0:6f:4b:
2c:d3:39:56:5c:06:7b:0b:37:e3:ae:11:95:73:27:
d1:1a:56:e4:67:d6:9b:05:1d:7c:ef:4c:ed:4f:13:
99:b4:93:fd:f3:2c:12:a2:66:60:f4:f4:cf:6e:ac:
04:34:76:7e:3c:08:84:77:c6:26:97:74:61:ba:4a:
2e:88:17:4f:97:03:f9:7a:ce:41:a4:ce:0c:55:5d:
c8:62:85:02:f6:34:a8:68:2b:f6:18:f1:91:0d:af:
85:ac:e8:34:93:87:2f:db:9b:e0:95:8e:76:73:65:
25:5d:26:4a:fc:dd:7a:1e:47:3a:f7:8c:1d:3a:2b:
2f:91:16:f4:bb:f7:e6:b3:4d:b1:26:16:43:46:d2:
90:a2:04:b6:de:65:cf:57:f2:be:ae:12:cb:a9:b4:
dc:8f:f8:76:f9:25:10:c8:9b:0c:13:81:73:f8:2b:
60:44:b9:02:a8:a0:1a:7a:5b:f1:e3:dd:be:6c:4c:
78:b2:bd:0d:29:eb:b7:53:1b:4f:14:fd:ab:09:d9:
0b:94:00:ad:92:af:4c:96:39:79:ce:f2:05:f2:4a:
2e:15:6d:9a:1f:3d:68:89:91:53:8c:84:5a:31:cc:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:36:28:87:0E:59:D2:20:8E:25:14:44:E9:50:34:41:A3:EA:3C
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:70:5c:71:8f:57:f6:a9:ac:9a:c4:65:53:93:52:19:06:
e8:0f:0d:9b:9d:c3:41:2a:fc:70:15:c3:87:03:5a:e0:a7:b7:
17:3f:ec:04:d0:30:70:c0:6c:44:98:29:87:6f:82:07:ca:da:
50:b1:2a:44:50:2e:da:d7:22:83:87:b4:52:96:d4:16:45:33:
ce:4b:39:22:6f:3a:33:bf:b6:26:7f:87:fe:76:d8:4f:1a:dc:
b9:d0:27:db:53:b4:0e:c5:20:7e:65:65:b8:69:43:43:06:95:
d8:4a:62:04:e2:6c:67:83:21:aa:f4:f0:f6:18:a6:32:2d:ba:
6d:20:2c:2a:72:45:96:3f:46:a0:74:e5:37:ba:07:72:9a:f1:
03:a2:f1:5b:9f:66:52:d3:d9:25:76:f5:26:17:d3:17:7c:84:
52:59:3f:3c:a0:21:20:3d:4f:19:5c:93:dd:d3:b0:46:e9:88:
44:ac:9a:42:bc:c4:1e:bf:e0:05:06:bf:e7:83:ec:0b:35:06:
41:82:4f:57:57:ff:c0:c2:1b:51:75:cb:88:5f:91:52:8b:11:
54:fe:1c:bf:ed:05:8a:07:b6:55:88:55:0a:a7:ec:11:46:3b:
6b:53:2e:21:64:8e:dd:b3:f7:f1:b5:43:62:a3:d6:af:20:11:
20:7a:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:48:04 2026 by rpki-client