Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
File: TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft (raw, json)
Hash identifier: TCq8Bq65FiR8ekfb39cWpA+bhgfzCk3FEspTzIhc00k=
Subject key identifier: 99:EA:57:BB:FB:A6:7D:C2:51:49:C6:9D:54:A0:14:5A:55:25:4C:B0
Authority key identifier: 4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
Certificate issuer: /CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Certificate serial: 019D37F6F10F554DF164429E1DC3FB70DE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl (hash: +WYXLAKUsPtf0zMH+IzApuZoiBKn7VWhRA1e5RS19Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f1:0f:55:4d:f1:64:42:9e:1d:c3:fb:70:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=99ea57bbfba67dc25149c69d54a0145a55254cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:8b:23:10:11:86:93:df:da:3a:19:bf:5e:
f9:28:9e:c9:91:a9:04:e7:97:2b:66:b5:6e:bb:cf:
0d:75:a3:95:35:ed:e9:bd:9c:03:b1:e0:da:de:76:
8f:21:db:48:ce:fa:36:18:76:db:6c:44:49:48:0f:
7e:09:b6:b2:a6:d4:95:d9:6b:c9:cf:74:51:9c:05:
af:24:ff:f3:2b:09:60:71:23:6c:1e:d4:c0:ee:81:
4d:7c:d6:ec:a9:0d:98:bc:5f:7d:bd:70:dd:85:f3:
6b:dc:ee:3f:50:9b:85:fb:a4:f9:1c:dc:cd:4b:6e:
c3:dd:64:92:eb:21:7e:1c:11:85:8b:53:23:e1:17:
d3:30:b0:66:26:17:64:83:19:56:33:a1:cf:6e:2e:
9f:74:f5:fa:20:43:c2:36:65:89:0f:61:70:5b:bd:
03:c1:d3:a0:07:cb:2c:8b:8e:22:97:a7:cf:47:9e:
09:67:2b:ef:f0:a5:8b:c6:a8:72:3e:89:bf:95:48:
31:7c:b7:91:38:0a:28:6d:d2:2c:cb:e8:b6:04:c7:
44:c3:25:85:ea:59:46:08:36:24:7f:8b:42:69:db:
dc:71:e5:8c:98:9f:42:ba:3a:ca:5a:2e:6b:40:8e:
d7:e9:46:bc:00:54:80:a0:56:74:16:5d:8a:c3:b5:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:57:BB:FB:A6:7D:C2:51:49:C6:9D:54:A0:14:5A:55:25:4C:B0
X509v3 Authority Key Identifier:
keyid:4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:0b:f2:35:7d:00:6b:70:23:5a:c7:28:03:41:bf:2e:0d:02:
a1:23:43:0d:16:1d:82:b3:2d:bf:03:d6:11:26:a8:4f:9f:f1:
96:00:75:f9:74:2b:2b:31:35:9e:bb:09:43:c3:0b:da:b4:34:
5a:3a:ef:f6:4a:91:b1:27:23:58:1a:38:37:cb:a5:11:89:51:
06:f8:89:9f:91:d6:b9:0a:5a:27:ec:a4:9a:ac:d2:91:2f:84:
f9:7a:5a:33:3c:c9:bc:f7:50:0a:85:ee:5b:13:b0:04:4c:80:
10:9d:d5:5c:c8:2f:f4:4f:ff:e9:12:c5:a6:86:11:75:c3:b4:
8b:dc:b9:b2:b6:53:02:0d:99:2f:38:90:bb:f7:c4:42:42:8e:
73:b4:3d:fa:11:dc:bf:0b:77:a8:77:00:e1:b9:cf:6f:1e:c2:
01:9a:c4:12:fa:e7:40:19:04:27:02:42:77:18:fa:73:97:0a:
c5:d3:75:4a:5c:68:c6:35:6a:4a:57:8f:da:75:d6:0c:0a:5f:
f3:27:ab:d6:fa:c0:13:b4:d9:87:65:e9:69:d9:73:e7:56:76:
f3:00:46:06:ba:96:06:e6:ef:e0:97:82:a4:07:d4:f8:8a:a5:
16:d8:3a:e1:9c:51:ac:2d:6d:bc:47:6a:0a:5e:41:b6:f2:af:
0c:af:91:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vEPVU3xZEKeHcP7cN4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWNjMTYxZmNhZTI0MTY2ZjQ1ZjY4OGRkNWY4MjMzMjBk
ZGUyZmUwHhcNMjYwMzI5MDUwMDIzWhcNMjYwMzMwMDUwMDIzWjAzMTEwLwYDVQQD
Eyg5OWVhNTdiYmZiYTY3ZGMyNTE0OWM2OWQ1NGEwMTQ1YTU1MjU0Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHqLIxARhpPf2joZv175KJ7JkakE
55crZrVuu88NdaOVNe3pvZwDseDa3naPIdtIzvo2GHbbbERJSA9+CbayptSV2WvJ
z3RRnAWvJP/zKwlgcSNsHtTA7oFNfNbsqQ2YvF99vXDdhfNr3O4/UJuF+6T5HNzN
S27D3WSS6yF+HBGFi1Mj4RfTMLBmJhdkgxlWM6HPbi6fdPX6IEPCNmWJD2FwW70D
wdOgB8ssi44il6fPR54JZyvv8KWLxqhyPom/lUgxfLeROAoobdIsy+i2BMdEwyWF
6llGCDYkf4tCadvcceWMmJ9CujrKWi5rQI7X6Ua8AFSAoFZ0Fl2Kw7XzGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnqV7v7pn3CUUnGnVSgFFpVJUywMB8GA1UdIwQY
MBaAFE7swWH8riQWb0X2iN1fgjMg3eL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wNzhlNTgtZjdhYy00OTY0LTllYjYt
Y2RjMGIwNDk0YjlmLzEvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wNzhlNTgtZjdhYy00OTY0LTllYjYtY2RjMGIwNDk0Yjlm
LzEvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwvyNX0A
a3AjWscoA0G/Lg0CoSNDDRYdgrMtvwPWESaoT5/xlgB1+XQrKzE1nrsJQ8ML2rQ0
Wjrv9kqRsScjWBo4N8ulEYlRBviJn5HWuQpaJ+ykmqzSkS+E+XpaMzzJvPdQCoXu
WxOwBEyAEJ3VXMgv9E//6RLFpoYRdcO0i9y5srZTAg2ZLziQu/fEQkKOc7Q9+hHc
vwt3qHcA4bnPbx7CAZrEEvrnQBkEJwJCdxj6c5cKxdN1SlxoxjVqSleP2nXWDApf
8yer1vrAE7TZh2Xpadlz51Z28wBGBrqWBubv4JeCpAfU+IqlFtg64ZxRrC1tvEdq
Cl5BtvKvDK+RNw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:38 2026 by rpki-client