Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: EnDradawyy+WBF0KVNpDdTW+RPUmLT+KHGbi/eEXSjo=
Subject key identifier: FB:48:89:E2:DB:68:C7:82:BB:A0:E6:89:67:E1:7A:56:24:EA:0A:52
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019E32605FD5D02FF74194B86F6023DB9B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 129C
Signing time: Sat 16 May 2026 20:00:37 +0000
Manifest this update: Sat 16 May 2026 20:00:37 +0000
Manifest next update: Sun 17 May 2026 20:00:37 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: KbDRF+Tufd79qzLhDo3pspV4RBO/erbYk3roFU0fq2M=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:5f:d5:d0:2f:f7:41:94:b8:6f:60:23:db:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: May 16 20:00:37 2026 GMT
Not After : May 17 20:00:37 2026 GMT
Subject: CN=fb4889e2db68c782bba0e68967e17a5624ea0a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:19:ab:38:9a:92:d1:46:bf:9f:81:1f:0d:
84:23:3a:35:be:3a:e7:cf:db:07:69:4d:1f:c9:1b:
75:df:96:4e:17:a8:90:a2:ba:d8:57:57:53:d3:18:
b4:84:df:5d:52:e0:73:71:4e:2d:1a:b1:63:fb:aa:
28:50:87:5f:20:f6:0a:af:ca:2e:8f:50:a4:17:a6:
d1:9a:e7:fb:47:24:df:f4:79:90:23:fc:b8:0e:db:
cd:05:3c:3e:e9:95:f2:55:68:26:ee:e4:c1:85:6a:
b1:96:63:c8:e6:ad:79:54:f2:de:27:bb:57:27:2a:
70:3c:74:d9:55:f0:8e:e7:51:8d:54:bb:5c:57:6e:
80:ae:52:80:f2:70:76:f3:95:0f:41:b0:be:41:68:
ff:2d:48:ef:02:bd:56:69:ce:56:51:9d:d1:8d:cd:
50:48:93:dc:aa:19:c0:42:39:9a:20:4f:8f:33:35:
71:ad:30:e3:6b:e4:13:a3:37:ff:38:36:2b:27:7d:
66:a9:64:bd:5f:ab:90:dd:6d:25:d6:51:e6:e8:1d:
00:51:02:21:69:28:b6:1c:82:2c:ce:24:73:6e:0f:
18:8d:a8:a0:dc:a0:59:02:12:db:05:61:19:fe:52:
5c:08:27:cf:99:ef:61:21:7b:87:bc:69:c9:05:26:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:89:E2:DB:68:C7:82:BB:A0:E6:89:67:E1:7A:56:24:EA:0A:52
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4f:3e:0d:33:e9:fe:8c:5c:3f:35:15:7c:d4:89:57:15:3c:
42:4e:cc:a3:d5:c7:a7:1a:8b:e2:92:94:b8:97:4f:86:e7:ed:
01:8d:af:45:61:8c:76:c7:e5:40:2b:db:ac:a8:1e:d2:c1:1a:
e1:c5:24:f6:c3:31:d8:a6:09:fa:6e:ff:c3:90:eb:0a:46:7d:
06:f2:ca:03:d2:c7:84:da:07:14:ba:ff:25:49:bc:34:b8:59:
fc:6b:2f:49:35:73:99:c7:e3:57:6c:09:d0:2f:dc:10:3d:73:
18:b6:2a:a2:bb:7a:91:55:9a:52:44:0f:18:bf:e7:ea:86:18:
06:48:22:8d:92:a2:ac:a6:d7:0d:e7:2a:ce:36:86:76:27:05:
1b:f8:6c:d6:dc:6d:ea:30:92:3c:bc:d2:6b:c1:bf:1d:49:8e:
52:c6:20:c7:7d:ef:50:0f:8d:c4:b3:66:85:3c:25:05:87:45:
b9:3f:83:87:a1:bb:8b:15:ad:58:ec:3b:e0:1f:65:51:e2:66:
36:19:f8:c1:f1:7f:0f:5c:cb:27:70:a7:b2:86:a6:49:11:9f:
60:d8:58:5f:e5:48:02:4e:b7:d4:50:43:8b:b3:b6:cc:4e:68:
21:e5:15:6d:7a:8e:84:f7:e6:77:e4:db:a0:fa:82:75:cb:10:
7e:ed:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:30 2026 by rpki-client