Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: HOeHFDJEoZMZE+rVjDtQgVq9Fz6Og2gC8DKYi0vrHlU=
Subject key identifier: 3C:9F:51:20:FB:74:51:CC:53:0B:F3:22:91:E3:CF:F0:14:50:6A:8A
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A186E3A321FECF9397A95195A68D164CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 1242
Signing time: Thu 29 Oct 2026 09:00:27 +0000
Manifest this update: Thu 29 Oct 2026 09:00:27 +0000
Manifest next update: Fri 30 Oct 2026 09:00:27 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: /wF0ax0/j04smtWrb0kZz/k1HC0H6tMxDfs8rz23hps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:a3:21:fe:cf:93:97:a9:51:95:a6:8d:16:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Oct 29 09:00:27 2026 GMT
Not After : Oct 30 09:00:27 2026 GMT
Subject: CN=3c9f5120fb7451cc530bf32291e3cff014506a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:ab:64:a3:87:f3:07:69:28:95:7b:9c:68:
d9:64:03:13:54:ca:b2:c6:4f:d5:03:44:4d:8f:e6:
47:7f:f4:2e:bb:a0:0f:86:4c:f3:d2:4d:e8:66:b9:
27:53:7f:d0:55:03:aa:dd:45:50:89:0b:19:79:25:
fd:1e:71:4c:92:90:9d:d1:5d:26:06:d3:80:59:a9:
dd:4c:88:40:73:05:5f:18:d1:b0:9d:df:53:a0:da:
7a:ac:d8:4c:79:73:64:98:da:71:6e:cd:50:64:4c:
66:0d:4d:47:05:1c:20:11:90:04:65:bd:00:9a:70:
d1:0e:9b:4d:ab:bd:64:d8:d5:d1:7e:47:ae:e6:68:
d0:e8:f6:2e:ad:c9:0e:84:3c:5b:df:28:1c:fe:9d:
6d:6b:c4:5c:04:28:54:ad:c2:23:24:a4:d1:f3:79:
54:65:39:c7:6c:dc:9e:1d:aa:23:87:b0:cb:e3:5a:
29:aa:aa:ca:b0:90:db:fb:f4:62:1d:b3:90:ef:d9:
a5:42:8b:4e:50:db:a8:1f:cb:8d:15:a9:d1:8e:ac:
77:cc:fe:0b:5b:43:d7:d4:67:64:fd:16:a2:b5:68:
c0:b2:1c:bb:25:34:b1:e1:f2:06:af:8c:c4:e4:fc:
91:b3:e7:b5:4f:d4:9a:11:41:2e:6e:ce:0d:7f:95:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:51:20:FB:74:51:CC:53:0B:F3:22:91:E3:CF:F0:14:50:6A:8A
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:48:44:be:4e:ab:fd:20:c6:99:63:74:a3:44:49:d2:56:
29:18:a4:11:d1:3d:c1:ff:bf:9c:93:f7:36:23:3d:f4:1f:6d:
b3:bf:1c:98:47:e3:ed:9e:e2:30:9c:a8:c6:dc:3a:7b:49:99:
fd:3a:8f:79:ce:6a:01:64:94:a1:33:66:6b:1e:cd:a8:9e:78:
b2:5c:d1:17:c7:c8:05:20:92:1f:93:40:4b:6d:dc:98:68:3f:
45:6c:63:4d:6d:74:0b:c4:ef:74:fb:98:c1:51:10:dd:28:2f:
cc:09:ac:15:aa:7a:17:af:05:5c:8e:c1:22:44:e3:d0:70:91:
fe:18:ae:d4:d1:ea:e5:3e:c1:dc:c3:bd:99:7e:93:da:cb:9a:
cd:7b:82:9d:1f:d8:55:cc:4c:f0:6f:4e:93:4e:a9:8b:68:a6:
4e:1d:85:95:59:55:16:5c:fd:ad:e1:e1:02:15:85:64:a5:7b:
1c:fe:b1:13:d6:8d:63:e7:07:6e:aa:ca:a0:62:bf:8f:e9:a8:
36:b0:e4:15:38:10:d1:98:38:a5:32:59:96:7c:d9:06:db:cf:
15:68:35:95:fd:5e:d1:fa:16:bc:d6:39:28:84:0c:4d:a0:4b:
d9:eb:2a:f8:f9:9b:01:42:db:6c:e2:be:d5:b0:71:00:d5:b3:
2f:6d:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:00:15 2026 by rpki-client