Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: K1sj9+K3jo6GbYcZc6C44CBdsX1QLRwQLcEJh3XOXsc=
Subject key identifier: AC:DA:9D:79:E7:8E:B9:5E:7B:6F:0A:B1:0F:A0:0B:66:DD:38:CF:13
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A08BD6472E28833CB23EA743C45D909A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 11C0
Signing time: Thu 10 Sep 2026 15:01:10 +0000
Manifest this update: Thu 10 Sep 2026 15:01:10 +0000
Manifest next update: Fri 11 Sep 2026 15:01:10 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: n4v1PThuSJCbnlOwf/6Csy06sradZA0mNfyW2n8BNQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:47:2e:28:83:3c:b2:3e:a7:43:c4:5d:90:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Sep 10 15:01:10 2026 GMT
Not After : Sep 11 15:01:10 2026 GMT
Subject: CN=acda9d79e78eb95e7b6f0ab10fa00b66dd38cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:b3:bb:ab:9f:c3:76:9e:bc:65:9b:08:d1:
49:38:56:71:d1:93:eb:5b:fd:e4:09:ad:24:95:63:
32:d4:d4:e8:ed:53:b9:ed:d2:33:0e:d1:3d:af:8e:
2e:02:c1:72:94:35:4c:fe:d8:27:08:1a:5a:9b:c9:
9f:a3:8a:f0:81:cd:4e:ca:3b:b2:b1:85:e5:a3:88:
58:ad:f7:15:97:d5:17:bb:23:46:d9:de:57:38:d9:
c1:67:65:8e:8c:50:a5:71:80:72:d2:c7:0a:e6:bb:
27:e5:10:a7:af:ce:a7:38:25:58:d8:7d:c0:1d:8c:
08:ab:6b:89:ec:0f:7a:b6:7b:b4:69:93:e4:5f:11:
ea:e8:07:13:3f:d5:41:d6:3b:01:a6:c9:1c:42:b1:
20:df:e1:e4:c8:3e:94:86:72:2c:95:68:ee:16:47:
80:1b:76:a6:a3:8c:f1:d7:f3:39:3a:db:41:be:52:
88:81:5f:9c:0c:68:9a:3c:db:88:f5:12:2f:b7:89:
53:73:4a:e0:96:4a:c5:a3:16:6d:a2:44:7a:c5:39:
9e:3f:af:83:0b:90:26:47:02:37:1c:ed:80:0a:4b:
28:10:76:5a:43:2c:7a:60:d3:8d:c8:e8:1f:eb:b6:
74:c1:9d:cf:73:84:11:7c:6d:c9:4d:0a:f5:45:a2:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:9D:79:E7:8E:B9:5E:7B:6F:0A:B1:0F:A0:0B:66:DD:38:CF:13
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:24:d7:7a:cb:5c:61:40:47:f9:5b:6b:f2:c0:00:01:92:68:
ab:bc:2f:58:be:37:1a:27:20:e1:5e:6c:5d:13:32:9c:1e:62:
d6:7b:88:67:db:81:77:cc:58:f4:a4:5e:23:86:40:c5:ef:04:
14:16:36:61:c2:94:53:c0:81:44:4a:3b:e1:57:a0:d8:d9:bd:
a9:e2:9b:f8:e2:6c:f4:72:b0:5b:1e:95:4b:8a:92:c5:0c:ee:
9c:ae:d1:77:52:43:d1:b4:8b:6b:f5:80:23:78:32:4b:fe:ee:
96:2a:76:db:bf:07:fb:2c:0b:22:95:d7:16:e1:a4:f8:31:31:
a7:d9:69:75:46:14:a2:5d:7f:82:ae:4d:6d:a1:90:e7:e5:ab:
48:66:4f:00:6d:01:87:e9:96:9a:ad:73:fc:24:bb:b1:9b:95:
61:25:b8:91:04:ad:0c:d1:1e:70:94:33:22:46:31:f5:8e:91:
8e:05:37:84:fb:93:07:f4:82:1b:fc:d6:28:92:f1:39:c8:45:
e3:c5:ea:ca:42:0d:b0:29:c9:8a:24:d2:f2:a4:d5:c7:8e:31:
74:95:d7:4f:bf:82:e3:f4:12:bc:25:8c:fb:a1:64:c6:9f:6a:
94:cb:c7:4f:43:fd:9b:c2:61:be:a6:d9:d4:5d:0b:96:64:5a:
cf:39:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:59:59 2026 by rpki-client