Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: rnODWWlUwnnSyf+OdjUoHNdVKaGEQ6tAthiMt1gT6YE=
Subject key identifier: E8:94:A3:50:F1:75:84:DB:99:3B:9D:BE:7E:14:11:ED:DB:F2:3F:13
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019EB68EAE170AB2CDC5CB6F53E60C6E5AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 10CD
Signing time: Thu 11 Jun 2026 12:01:04 +0000
Manifest this update: Thu 11 Jun 2026 12:01:04 +0000
Manifest next update: Fri 12 Jun 2026 12:01:04 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: ClJHFYfd7px6NL7Z1xtGOIVaHH7Ph7HVspssvXH1cHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:ae:17:0a:b2:cd:c5:cb:6f:53:e6:0c:6e:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jun 11 12:01:04 2026 GMT
Not After : Jun 12 12:01:04 2026 GMT
Subject: CN=e894a350f17584db993b9dbe7e1411eddbf23f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:b6:7c:e6:5e:cd:b1:98:a2:28:bc:d8:c4:
3b:9b:fd:10:40:36:04:4c:e4:a1:f3:c8:70:b3:12:
cf:a3:a9:5e:a3:73:60:71:08:99:7b:a0:32:25:ac:
3a:98:27:87:a5:84:ee:d4:53:9a:d6:77:4c:4d:11:
e4:1d:76:91:64:9b:13:fd:fb:b3:35:18:0b:99:8c:
9d:22:56:fa:f1:10:53:46:86:f8:37:7c:57:49:f2:
bc:7f:00:d5:e6:2e:50:7f:e7:5b:fe:d3:19:51:9c:
9b:4a:63:b3:69:56:b7:d9:e5:f6:10:ae:35:35:92:
b1:f3:5f:47:1b:31:d1:b6:be:c3:66:de:2f:ff:5e:
73:3d:98:c8:df:cb:11:a4:bd:89:cf:d4:eb:7e:d5:
bc:e4:e5:5f:a5:f8:ee:35:ee:9a:ce:b7:7e:be:a9:
5d:54:0e:9c:ce:2f:77:a4:1e:5c:65:8c:1f:87:65:
77:6a:c8:ac:d6:98:70:f0:64:b1:6f:f6:1a:b8:63:
b7:54:06:9e:c7:98:f4:66:c1:39:4f:b8:9b:51:ad:
03:1b:67:cd:87:70:ec:bc:38:63:ce:94:df:48:d6:
18:84:7d:73:7f:d8:2b:56:34:51:da:1e:da:cb:20:
b3:0b:82:cf:78:a6:d6:b2:4a:8c:de:83:b9:39:a1:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:A3:50:F1:75:84:DB:99:3B:9D:BE:7E:14:11:ED:DB:F2:3F:13
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ee:67:fb:d2:f9:44:89:b5:41:2a:ec:c7:cb:81:c6:cc:62:
6f:24:ba:3f:78:bb:df:b9:cd:b6:e0:b8:76:88:7f:d3:45:18:
98:7e:b1:76:69:30:6b:f7:cb:f5:ce:54:7e:b5:c8:1e:ce:6b:
22:b2:e9:4c:49:fc:af:55:00:d6:51:e9:82:b3:92:14:e0:45:
ff:77:a7:a6:02:9f:ae:1a:5f:49:27:3e:df:e6:9f:88:ca:d3:
cc:6b:9f:b1:04:e4:29:46:f9:41:8c:f7:68:c5:94:02:ab:9b:
b4:5c:f9:af:1d:6b:5d:cf:db:76:08:3f:c5:b6:7f:e9:26:b9:
b3:08:00:ea:bb:b4:ce:d3:a1:af:8e:d1:c9:05:39:6d:57:fa:
ed:3b:70:65:43:af:70:60:8a:c3:6c:4b:44:78:6a:5b:c9:13:
c4:3b:be:21:0b:e0:cd:10:ac:a6:62:00:74:07:90:75:fe:3a:
7a:d7:f1:d6:a4:34:7c:f7:ab:16:bf:43:de:87:0e:2c:9c:fc:
23:50:84:0d:e7:03:f2:c2:0a:d9:80:b0:ed:67:99:87:92:7e:
ed:5a:81:b7:47:f4:60:e0:75:1f:ef:4c:b0:c1:d4:8b:53:ac:
a1:bc:55:86:07:be:c2:c9:86:15:4b:ac:ca:bb:33:16:a3:d6:
fd:c5:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:41 2026 by rpki-client