Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: kMSUjmaa/GsfqLANcHLmTXDaSNncv8/jDylLSLtRizI=
Subject key identifier: 80:D3:4F:0C:52:FC:20:1C:5C:4B:B5:5D:16:E3:28:EE:AE:59:33:87
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019D382E4FB74516D05CD2F05C8694FBE399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 1007
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: cDV1567oP/WwXhuvADE+JLIpa+u+sZW57uGqXu3cVG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4f:b7:45:16:d0:5c:d2:f0:5c:86:94:fb:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=80d34f0c52fc201c5c4bb55d16e328eeae593387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:8b:ef:99:cb:bd:ae:e7:7c:c3:2c:67:00:
af:89:91:9f:4c:e6:03:b8:50:f1:dd:02:db:cb:53:
13:57:92:77:b4:4b:c4:01:52:c8:62:05:79:e2:39:
09:34:c0:c7:01:a9:95:fc:c6:db:40:13:10:a4:18:
92:72:11:1c:bb:e3:96:32:06:77:2d:c5:90:56:48:
5d:72:ff:b9:53:f8:7e:3b:b1:68:94:d6:08:f6:1d:
47:64:df:b6:45:ac:c5:b2:b0:54:c9:e0:3b:94:a6:
1a:0c:1f:d8:38:37:ab:ef:55:5c:cb:31:11:71:31:
fb:96:05:9f:49:ae:64:ab:53:9a:1a:51:6a:f6:55:
9e:44:01:5c:9a:b1:fb:ae:11:34:57:d9:53:89:05:
86:54:06:9f:fc:4b:4d:d4:75:42:6f:2a:08:8f:88:
8b:9f:de:3b:62:aa:a4:c8:d9:98:c8:86:b0:5d:aa:
7a:94:12:1d:51:a8:9a:e0:f3:ec:32:d1:8e:c4:b1:
33:ab:73:a5:14:60:c5:14:92:81:70:4b:3f:0f:ec:
22:4c:03:69:be:b0:15:20:84:b7:18:6c:4a:7b:eb:
1d:37:b6:c5:5e:cd:ae:f3:e8:17:09:10:8d:79:fc:
5c:17:94:48:fc:9c:71:49:be:94:d0:be:f0:cb:03:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:4F:0C:52:FC:20:1C:5C:4B:B5:5D:16:E3:28:EE:AE:59:33:87
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:22:1b:be:e8:2e:c7:47:b8:78:33:a0:ee:60:de:08:17:
e2:55:ba:cc:38:c1:0d:18:98:58:56:05:ba:46:b2:b2:75:7b:
bf:2a:22:72:03:ad:bb:17:54:08:5b:0b:5a:49:0b:c0:73:82:
8f:b8:40:76:cb:61:d1:b2:b6:b3:f1:ad:fd:e3:86:55:d7:3b:
3b:29:47:db:16:ad:1c:99:27:fe:8b:f3:dc:c7:d6:d0:bd:9a:
06:7c:98:d6:9a:f5:b5:81:12:e3:ae:c8:10:de:30:64:33:0a:
be:6a:20:50:6b:73:16:3e:39:a2:c0:a8:3d:bb:7c:0b:56:d3:
92:a6:ec:3d:5b:03:51:3d:ab:73:aa:4d:0c:f9:48:2f:83:c5:
3c:d4:02:ec:8f:5c:b4:b8:33:41:23:77:fc:fe:26:85:61:84:
8c:c3:9d:75:47:79:6e:8b:73:0b:8c:ac:da:72:53:93:4d:c3:
79:f4:93:59:42:d8:e7:4d:07:74:75:76:34:38:5c:8d:b9:c4:
fe:49:bb:3b:db:07:e6:8f:db:bc:d1:45:09:c4:8d:55:a5:f8:
ac:20:7d:5c:c0:66:db:52:86:85:20:14:03:d1:1d:83:76:23:
e2:21:30:c4:19:f1:3a:a5:08:06:cf:d0:b5:b2:4c:99:a7:2c:
1c:c0:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:20 2026 by rpki-client