Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: Nt8vHf/Vlxgf0XxErl77XnqCWAK8CYmDTCOrTK9YYgE=
Subject key identifier: 59:E2:A2:AD:A5:99:C7:8C:11:92:0B:63:48:26:7B:97:E8:3D:6B:B9
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019FA14D21307F71F3B31855F676D83F04AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 135A
Signing time: Mon 27 Jul 2026 02:00:14 +0000
Manifest this update: Mon 27 Jul 2026 02:00:14 +0000
Manifest next update: Tue 28 Jul 2026 02:00:14 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: FTCHKcfTPNTBgWvyG0JjJDEZK59xp2s+9JF96B/NWko=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:21:30:7f:71:f3:b3:18:55:f6:76:d8:3f:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jul 27 02:00:14 2026 GMT
Not After : Jul 28 02:00:14 2026 GMT
Subject: CN=59e2a2ada599c78c11920b6348267b97e83d6bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:21:be:85:3b:ab:06:cb:a5:65:23:19:60:
86:c5:3c:2b:86:3a:a0:82:c7:2d:e1:c3:63:d1:00:
12:e7:c9:1d:1d:f9:83:3c:5f:83:1d:35:7d:d6:be:
b7:3b:da:b5:ce:e9:7d:8c:d3:6f:64:b4:0c:45:97:
74:6d:4e:7f:91:fc:20:23:51:05:a2:ff:24:ed:0f:
ba:fa:06:3e:d9:53:07:43:1d:0f:b6:63:6a:7c:23:
bf:68:b1:28:0f:86:fa:33:b4:53:4b:60:95:a3:73:
be:fb:0c:d1:b4:f7:12:f6:ee:53:fb:1f:2a:09:6a:
a7:37:3f:75:f9:19:a1:b8:56:53:0b:5f:72:c5:20:
03:09:20:65:b2:5c:d2:1a:90:47:b1:ff:ae:89:6c:
bc:4e:8b:5f:05:b7:a2:6c:d7:71:f0:f6:83:aa:91:
52:c4:fd:45:ee:90:fd:2b:29:1e:94:4f:02:b1:2d:
98:5c:b6:ac:1d:8f:4d:39:b7:72:87:78:45:6f:74:
c8:09:89:4a:18:46:96:42:b7:a8:22:6d:9c:f3:ba:
29:94:2b:95:6a:3b:6b:3c:36:87:1e:bb:13:ee:12:
25:6c:1c:75:cb:ae:ad:4f:6e:57:90:01:37:14:33:
ba:27:49:e9:f7:8b:4b:90:3e:23:f4:56:51:cc:9e:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:A2:AD:A5:99:C7:8C:11:92:0B:63:48:26:7B:97:E8:3D:6B:B9
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3f:f4:eb:29:37:8a:4b:9f:72:bc:4a:7c:ed:a7:e8:bf:e5:
da:08:06:b6:ea:73:e0:b6:18:f3:80:54:49:94:9b:86:67:5a:
79:50:1c:e5:2f:26:e2:f6:30:3e:d0:67:f3:aa:36:92:3f:3e:
e6:44:00:a5:74:45:15:1d:ef:07:1c:f1:17:4f:20:92:1f:39:
56:02:2d:ac:bf:ce:9e:07:69:99:46:1b:c0:16:e5:c6:f1:2e:
e7:17:14:7b:f9:1c:35:b7:a0:d2:5b:81:48:49:03:75:42:e3:
59:e2:c9:56:ee:88:ff:11:c4:32:01:3a:c6:2a:23:d7:97:38:
7f:d2:5a:67:4a:8f:74:7f:c5:7f:d8:ff:c7:f9:df:47:7d:d1:
5e:52:47:a1:9f:21:ba:95:80:0b:f2:0c:55:73:e3:40:93:a6:
8f:ac:cb:c9:bc:c6:15:a1:64:9b:9d:92:88:0e:ad:ef:eb:72:
c8:d1:95:da:2c:d6:4c:b2:e4:be:c6:0f:9b:9f:95:60:8a:c9:
ef:48:11:48:41:fe:7a:6b:f9:7b:1f:d7:39:4e:f7:f7:05:3d:
a8:1c:f5:f1:a8:b2:9b:d6:18:0e:45:2f:6b:b3:4f:02:60:32:
c5:f5:d9:68:3f:c0:42:24:bb:5d:09:9f:0e:8b:1c:09:c5:3b:
a8:45:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:38:35 2026 by rpki-client