Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: AmQ8dVgN+0nsY7m287JvsiVbl2JZHyrf1zkv0hQ9IAc=
Subject key identifier: 04:D7:11:C6:D8:B3:1C:68:16:65:85:EA:52:EA:C0:CD:B4:FA:AF:78
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019D375261CF3BA1201009256DDC8936BDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 121A
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: m6rIcrqJ3wt4UYPaMyjB4Q/qNrdgjN/tYjoPy4fzszc=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:61:cf:3b:a1:20:10:09:25:6d:dc:89:36:bd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=04d711c6d8b31c68166585ea52eac0cdb4faaf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:35:29:7c:6f:93:a3:77:c7:0c:98:a5:13:
26:71:5d:6a:3c:47:a8:ea:b5:9b:d4:24:85:e7:69:
f4:29:46:b6:13:d9:7d:ed:7e:26:0d:76:9a:99:7d:
8b:91:e7:e6:97:13:ca:7c:36:4a:7b:bd:0f:2f:4d:
33:8f:02:32:86:c6:05:a3:14:db:dd:34:df:eb:06:
23:61:08:77:72:58:32:79:dc:9a:20:9b:01:76:ce:
2f:1d:bd:e1:05:1f:7d:cb:84:ac:cf:07:9d:f9:e4:
a5:53:f8:ac:bf:3f:a5:ec:64:33:9f:b1:67:31:bd:
d5:9d:11:0f:f5:d9:11:c7:49:20:81:6f:ee:fb:b0:
79:95:21:24:c0:6a:d5:0c:e9:73:37:cb:6c:84:d8:
3d:0b:99:06:d9:32:51:be:01:ba:1c:c7:5f:2a:f5:
8c:b3:b6:14:cf:32:19:19:fd:2e:f3:e7:8f:d5:4c:
0b:ae:51:c5:5e:b2:4b:86:ed:dc:fd:9b:ad:ab:52:
4a:e4:cf:45:0e:c0:37:9c:fe:13:42:49:bc:0e:60:
5a:e2:ab:04:c8:9c:a0:05:d9:ad:d0:ec:e8:cc:da:
b1:24:fd:13:ae:4e:35:eb:c3:cd:f2:a5:82:90:fb:
3b:64:dd:02:75:94:06:2b:a6:7e:59:ae:7e:20:01:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:11:C6:D8:B3:1C:68:16:65:85:EA:52:EA:C0:CD:B4:FA:AF:78
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0e:dc:33:8d:05:b7:fe:ad:f4:6e:94:b5:d7:78:c0:9c:6d:
59:7a:cd:29:7b:3d:37:be:e1:a8:56:95:cd:f4:e3:d0:92:c8:
7b:c0:ab:55:2a:f4:b1:67:9d:db:ad:dd:0f:22:60:48:e6:37:
f4:0d:11:c8:95:7f:bb:7e:00:cd:73:01:4e:00:fa:49:50:5a:
98:b4:bb:26:d2:52:20:bd:cb:f8:a5:96:5b:d7:f1:d9:b4:7a:
77:2d:7a:ba:08:72:1f:bc:89:5b:a1:f2:12:41:fe:1d:94:39:
37:85:ed:38:89:2e:2a:60:8c:30:7b:fd:5c:54:2c:ed:83:a8:
59:34:5e:a0:f1:a8:be:e2:94:15:fe:42:fb:9d:b0:24:89:72:
d6:55:28:1b:8b:15:5d:e3:86:f3:51:fd:4f:c6:f7:24:c2:cc:
7d:18:5e:32:74:e1:3d:76:b3:a2:91:43:e4:d4:87:0a:76:e7:
f1:57:67:2c:ee:68:e9:4c:91:7a:19:66:8f:22:1c:29:e6:e5:
d3:68:29:dd:8f:2c:7f:aa:fe:5b:67:15:16:f2:63:c2:92:77:
65:66:d9:55:ad:c5:a6:aa:bf:7a:76:fe:58:6a:2a:74:57:5d:
e7:1c:36:99:e8:28:1a:f7:e7:c6:73:04:cb:64:46:92:b4:57:
a4:53:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client