Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: atiPrv0/J01Z1Kx69XsqXvDim+4UBYKUxJiSxgUwh9E=
Subject key identifier: F7:6F:95:A9:53:E6:59:FD:DD:76:61:C9:DA:9F:1A:C5:0F:00:AB:70
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019FA03B1881640CA16007AFF66DEA8CFE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 1146
Signing time: Sun 26 Jul 2026 21:00:55 +0000
Manifest this update: Sun 26 Jul 2026 21:00:55 +0000
Manifest next update: Mon 27 Jul 2026 21:00:55 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: uXWI+v/G0H9ojlzrnB2qLUfrqghBsj948myYux7HG+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:18:81:64:0c:a1:60:07:af:f6:6d:ea:8c:fe:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jul 26 21:00:55 2026 GMT
Not After : Jul 27 21:00:55 2026 GMT
Subject: CN=f76f95a953e659fddd7661c9da9f1ac50f00ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:fc:89:c7:4c:4d:02:35:9f:f2:59:2a:3f:
2c:2c:ed:dc:c8:63:ad:eb:cb:48:c9:27:94:b1:e9:
df:86:2a:96:5f:17:ef:b7:41:3f:b1:26:c8:48:6b:
35:ad:c6:3f:30:06:27:9c:ba:f1:3c:08:16:17:8d:
33:30:a6:cd:ed:b7:cd:95:3d:9d:37:a7:1f:d4:d4:
ac:57:03:11:14:80:9f:a8:51:d7:fb:17:e1:b9:f4:
5c:e9:74:2d:7d:c0:e8:2b:fb:91:fa:0c:66:9d:df:
db:b6:cc:8e:54:77:d6:d5:bb:7d:40:fa:69:7a:cf:
7e:c0:17:69:61:43:8f:1d:73:67:d8:61:1c:79:f1:
12:af:e1:45:ea:16:c3:b4:4e:5b:83:b2:ad:95:81:
59:20:3f:fe:40:de:1d:26:61:f5:6c:f2:60:32:c1:
79:22:28:b8:21:4c:56:d2:b0:ef:4f:ac:86:9c:65:
79:a1:6a:eb:4e:4d:11:81:83:cc:9b:ea:6f:5e:97:
da:81:34:20:14:59:65:3a:55:c9:13:72:48:09:dd:
4a:dd:ce:11:3c:32:f6:5b:ec:3e:bc:5c:85:87:3f:
75:81:3f:13:4a:a3:6c:d3:57:8d:00:d9:03:0a:84:
fd:f8:a2:27:2c:0b:be:3e:c0:7e:d9:41:6d:b0:05:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:95:A9:53:E6:59:FD:DD:76:61:C9:DA:9F:1A:C5:0F:00:AB:70
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:91:d0:91:11:ec:3c:de:f9:df:41:ac:c8:13:bc:ef:a5:
8f:d4:bb:a2:85:0a:ac:90:48:21:04:2a:f4:18:3f:0d:ef:6c:
c3:a0:d4:68:29:0f:04:20:be:fd:5c:df:cf:91:ad:77:d2:f3:
d6:18:80:6d:52:93:14:26:e7:f3:ae:13:52:8a:1d:02:04:31:
55:8c:17:cb:70:4b:f6:7b:df:12:b6:e3:10:32:9d:3d:38:df:
bf:49:5a:42:dd:d3:8d:9e:c4:68:fd:f7:21:4f:b0:63:10:98:
c5:27:81:a2:55:ad:4b:2f:fc:bd:ba:8a:a4:b5:61:7b:11:69:
64:1d:02:cb:9a:ce:71:93:1f:2c:69:57:80:0c:9b:62:01:5f:
8b:15:34:61:03:0c:22:ad:7b:f3:a2:f9:6e:e2:56:3a:fa:bf:
2f:ae:e8:48:d2:54:14:32:fb:66:7a:f0:2e:54:e8:cd:d3:46:
60:9d:7e:38:6f:b6:0e:6f:31:25:47:c3:60:a3:1f:34:3f:d7:
38:bd:c0:b9:33:3c:fb:dc:c9:2d:85:62:38:e3:8f:e4:ee:ae:
45:7f:87:6a:b4:17:e9:4f:28:14:74:a7:30:68:79:84:e9:2b:
37:2a:81:1b:7d:ea:81:0f:f4:76:f3:19:f6:d1:3d:bc:3c:bd:
f7:c7:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:20 2026 by rpki-client