Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: MhOdFK/Qc85R928JKjoAb4byeb1GwimWDC85I1D7xHA=
Subject key identifier: 6E:B1:0F:78:A8:F1:64:AD:40:51:E0:63:B8:A8:30:30:74:D1:A1:E8
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A18307815DC76C90CEEE433A4717F4A037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 1240
Signing time: Wed 28 Oct 2026 15:01:09 +0000
Manifest this update: Wed 28 Oct 2026 15:01:09 +0000
Manifest next update: Thu 29 Oct 2026 15:01:09 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: vm+Wzv1RJ84dFYgovWGxSET0f3bbq5n+lOark5XJlDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:81:5d:c7:6c:90:ce:ee:43:3a:47:17:f4:a0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Oct 28 15:01:09 2026 GMT
Not After : Oct 29 15:01:09 2026 GMT
Subject: CN=6eb10f78a8f164ad4051e063b8a8303074d1a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:24:45:a4:4c:e5:f5:15:5b:c6:c2:11:aa:
79:f1:80:c0:73:11:c1:ad:42:d2:6d:12:85:f4:5b:
9c:d5:e9:d6:ae:05:52:38:c4:f1:1d:7c:47:14:a7:
0a:04:28:6c:74:1d:04:a9:1b:fc:c9:13:01:68:c7:
77:e1:b5:a9:32:bb:f5:1a:80:4d:14:9c:7f:a6:20:
49:f9:ac:c1:63:eb:be:96:36:1d:50:16:ac:ab:d2:
5c:75:5b:89:fc:46:62:2e:3f:28:0b:ca:86:d8:30:
1a:fa:06:f0:d4:18:18:44:01:b9:74:86:4c:25:c1:
06:ea:9f:54:7b:a8:1a:31:51:87:fd:f5:2b:41:3e:
30:5a:8f:94:bd:23:80:8c:f1:c5:ee:a6:55:17:b7:
aa:64:46:01:b0:9c:bc:c1:17:2f:e9:df:c1:06:46:
ba:61:17:e5:68:16:88:1b:97:f2:76:b6:ef:d6:6f:
41:e7:99:1b:3b:6d:f5:67:41:8b:e2:8f:57:3b:90:
b6:67:94:ee:d5:7a:48:f1:d9:fa:ae:68:fa:22:42:
e7:e5:90:18:f1:fc:26:e1:a4:ad:bf:3c:53:c6:ad:
ab:f8:ea:83:9e:29:e7:41:c1:73:0d:cf:de:4b:7b:
0d:b8:3f:0d:da:4e:0d:ea:0f:88:58:da:37:ea:c5:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:0F:78:A8:F1:64:AD:40:51:E0:63:B8:A8:30:30:74:D1:A1:E8
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:74:3c:fc:b3:00:b5:a6:66:f8:df:d2:cf:d1:cf:9a:73:
c5:96:f2:1b:a3:e6:a1:b3:a6:47:39:e9:d2:10:4c:a5:a9:b2:
a3:99:28:95:fb:0c:75:28:f3:df:73:4c:a1:f6:00:f8:81:e6:
c0:eb:3e:0c:3b:6b:be:ac:2d:d3:66:24:a2:ec:d6:cb:4c:a3:
d4:04:39:d1:ac:f2:23:4f:1a:db:bb:fc:29:e7:0a:8a:6a:ac:
8e:5e:72:98:e2:67:c0:ef:9a:f1:49:2c:b8:cf:f6:56:ca:9b:
6e:40:2b:d9:13:5a:be:2f:c0:5f:c0:53:ac:84:cb:95:1f:f7:
d0:07:e8:85:87:f2:b8:1f:c1:8b:8c:d1:c4:3e:1d:70:8e:0e:
15:65:d7:22:0c:e7:42:50:05:1d:95:cf:e7:79:eb:17:4d:5f:
35:0f:08:b5:5b:3f:c6:bf:fc:42:8c:9a:ec:fb:46:fa:da:c4:
42:da:0d:4c:0e:35:b1:fa:7b:bb:8a:48:c6:33:c6:7d:d3:94:
fb:36:e7:c5:20:77:37:fd:80:5d:bb:33:18:d7:fa:ac:40:6e:
cf:1c:a1:ea:07:23:c4:7f:0e:d9:b3:34:8f:73:37:e3:da:65:
fa:38:aa:fa:c5:cf:ec:c5:36:4b:07:35:1f:17:28:22:5c:77:
78:1a:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:07 2026 by rpki-client