Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: h3ZE4jU/eQBfs7kGraVO2+5JOjsVnpDXVcFqHDLQgWw=
Subject key identifier: 1B:77:F4:1C:47:CA:74:8B:8F:5F:1C:C5:3D:DB:B6:DF:8C:8C:A4:8C
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 01A1938CBD1B3B64AAE2AA428B8191D0AAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 145C
Signing time: Sat 31 Oct 2026 20:00:36 +0000
Manifest this update: Sat 31 Oct 2026 20:00:36 +0000
Manifest next update: Sun 01 Nov 2026 20:00:36 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: eQ/n+tsi8kWAzObfc4jGbthgaBO4FoIqwTjLvAtWCeA=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8c:bd:1b:3b:64:aa:e2:aa:42:8b:81:91:d0:aa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Oct 31 20:00:36 2026 GMT
Not After : Nov 1 20:00:36 2026 GMT
Subject: CN=1b77f41c47ca748b8f5f1cc53ddbb6df8c8ca48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:b7:80:7a:0b:22:a0:d3:af:99:31:6e:63:
03:d7:e3:76:4a:7e:c7:5f:0a:84:bc:31:7b:27:b5:
ca:e1:74:f7:24:c8:ab:98:fc:e5:df:3e:69:3f:28:
2c:c3:10:88:5d:be:7b:2e:7a:de:73:e7:3a:23:9e:
14:95:37:10:17:e4:99:94:bb:77:69:59:04:f7:5b:
f7:ea:14:0e:85:e4:ff:ad:91:50:ca:95:d3:6a:d9:
74:42:d6:40:d0:43:1e:f5:97:31:69:5c:e7:6c:fc:
cb:c6:9d:94:5d:18:8e:77:f9:2b:70:2e:5e:47:ea:
fc:76:4c:9d:8a:01:71:61:25:2a:3e:8d:95:6d:4b:
87:ef:12:14:7c:cf:1b:d1:e6:fa:3d:8e:8f:d6:d6:
96:22:b8:db:5d:10:2a:d8:97:fe:c7:61:12:ae:b5:
7f:0f:fa:66:1f:b9:6e:10:97:62:a5:ff:04:1e:69:
2a:e1:c9:ee:0a:c5:c6:89:1c:03:ee:f4:8c:99:d8:
d9:7a:0c:33:5f:72:c0:25:f2:1f:9c:ea:4a:b1:7e:
f5:01:85:e3:8e:ac:bf:e5:6d:46:eb:e5:75:39:39:
5d:0b:3b:02:98:02:a2:73:4a:a6:59:fa:6f:33:11:
93:2b:f4:88:93:11:da:8d:13:18:50:26:5e:87:9c:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:F4:1C:47:CA:74:8B:8F:5F:1C:C5:3D:DB:B6:DF:8C:8C:A4:8C
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:48:b9:82:eb:79:2a:85:42:de:e7:66:90:19:df:2f:92:
60:97:27:95:ee:98:7d:fc:ed:56:f6:6d:3f:c0:2d:e9:b1:a1:
b6:a1:99:62:47:e7:25:51:39:9d:2c:86:8f:88:13:c9:ad:7a:
67:ca:60:d5:70:04:9e:7b:45:2c:3e:24:29:14:3f:75:36:0c:
5c:d1:3b:60:76:5d:c6:de:88:9a:e6:f6:60:bc:32:43:13:fc:
63:28:7a:8b:bf:c5:b1:c8:ee:35:1d:76:47:18:a7:17:b1:37:
63:9e:73:6c:e3:d9:c2:ac:c6:dd:58:49:ae:1a:85:98:ee:7a:
77:98:00:22:50:24:08:87:61:1b:10:31:be:14:db:40:e2:95:
f7:7c:87:fb:be:fe:7c:e0:a0:34:ca:f0:a6:e6:cc:5c:4f:da:
2e:70:53:3a:31:bf:7e:80:c6:43:5e:f4:f4:90:5e:e0:6f:13:
43:4c:2e:36:07:f7:9f:ab:52:37:2d:1d:28:96:27:7d:cd:46:
21:0c:39:11:ab:e8:d3:3a:2a:d4:dd:de:b0:eb:f7:a3:b4:ae:
d9:68:7a:80:34:5b:30:58:2f:10:75:6b:4b:0b:b1:b8:8e:86:
22:13:b2:2b:06:4a:bc:f0:30:db:6a:0a:b1:4c:a4:e5:28:be:
e4:86:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:24 2026 by rpki-client