Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: +2p6lsztEHT5x+3A04E/fPfvNZGuHMZ4GXjBdqhjrAA=
Subject key identifier: 54:8B:1A:16:2C:94:2D:1B:48:9F:CD:A0:43:56:9F:F3:5C:35:5C:8A
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 01A08AFA66E0327435E2466D880C4F1BD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 13D3
Signing time: Thu 10 Sep 2026 11:01:01 +0000
Manifest this update: Thu 10 Sep 2026 11:01:01 +0000
Manifest next update: Fri 11 Sep 2026 11:01:01 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: RQKWKAnp3jHxU4WO857qYWqN+mI7R3AoHkLCDO1J9qI=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:66:e0:32:74:35:e2:46:6d:88:0c:4f:1b:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Sep 10 11:01:01 2026 GMT
Not After : Sep 11 11:01:01 2026 GMT
Subject: CN=548b1a162c942d1b489fcda043569ff35c355c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:c7:8c:b9:29:be:50:94:6c:28:78:5f:dc:
93:ff:6c:27:fa:97:4f:45:65:9a:f7:21:95:a6:f6:
65:60:35:4d:e5:20:3f:ab:cb:ad:68:b5:4c:8b:4a:
d4:77:3e:32:af:ef:cf:3c:b9:e2:8d:9c:0b:d5:64:
ff:68:0d:bf:f8:0c:ae:62:e2:7f:05:7b:e1:23:2b:
68:2d:76:79:cf:85:14:6d:98:9b:41:3e:66:19:68:
79:b2:31:b2:06:69:1d:ee:4c:10:83:1e:b8:3f:e1:
27:fb:16:a0:27:ab:e1:95:fb:4d:d9:fe:d3:ef:b6:
e9:be:c0:56:bf:06:78:0f:d9:24:de:3d:f8:fa:a2:
68:61:7a:00:a7:6a:78:8d:fe:e4:9d:4e:0c:4e:6f:
0c:b4:5e:e8:ac:8d:06:00:3b:be:3f:9c:63:62:1b:
a9:a5:1e:60:dc:d5:8e:f8:b7:30:98:1a:aa:23:65:
6f:13:e1:02:b6:64:c4:af:58:35:cb:9e:d3:70:cb:
6f:0e:78:a5:b3:09:d7:28:bf:26:c7:84:78:59:25:
c0:8e:54:21:bc:de:f9:dd:9c:08:6c:37:86:8b:0f:
20:8d:0d:43:81:51:39:4c:82:09:49:fd:ec:c4:ec:
e2:c7:95:82:64:88:b1:37:81:a5:08:53:16:e7:a1:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:1A:16:2C:94:2D:1B:48:9F:CD:A0:43:56:9F:F3:5C:35:5C:8A
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:0c:f9:d2:ac:02:2d:86:c8:d0:ab:dd:56:4d:f3:be:31:
ba:03:47:7a:49:d6:8f:f5:60:18:c9:9a:0a:61:ba:f8:f6:78:
de:55:4e:2f:88:02:c5:8a:cb:0b:86:22:46:27:97:8a:ce:fb:
d8:4f:03:29:89:25:d4:e4:4c:3c:79:0a:6c:50:3f:9e:6f:65:
da:98:80:70:84:29:5a:09:a3:4c:15:3e:bf:74:cf:10:42:94:
b2:61:19:f5:5c:d2:d3:ff:a8:db:34:d8:e1:f8:0d:d2:6b:d1:
8e:5e:ec:ac:96:12:f3:e5:a6:9b:c6:28:08:87:31:4e:6d:9a:
f1:ab:11:97:eb:02:df:f7:43:17:0d:67:89:47:55:dc:e4:46:
fe:ca:3c:82:d8:1b:77:af:94:a8:80:e4:fd:6e:bc:88:de:e2:
7e:ef:ec:9f:69:df:c1:8e:5e:33:69:d5:95:de:2f:55:4a:6f:
d9:04:65:ad:5b:55:2f:be:29:fd:22:ca:1a:76:e7:bc:df:de:
da:28:55:50:da:35:ac:ea:d1:bc:88:4c:9b:d2:16:48:97:94:
25:1e:1d:e4:c0:8c:69:ef:99:8d:5f:73:2b:62:2b:7f:89:fd:
89:fd:4f:89:93:75:ce:8f:99:bb:ad:f1:a7:90:2f:f2:5b:ab:
5e:bd:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:37 2026 by rpki-client