Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: 3JDD8R023IdDsqt4TCGJRqPiGx1Cfl3hx9seeP1QWcQ=
Subject key identifier: 2D:59:54:C7:CB:EA:4E:70:FB:7E:58:83:6F:9F:28:2B:C3:40:A6:94
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019E9C29667F09D33154A3C0BBD3A6411DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 09:00:19 +0000
Manifest this update: Sat 06 Jun 2026 09:00:19 +0000
Manifest next update: Sun 07 Jun 2026 09:00:19 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: 9zRIxRsds1T7oJBG7NmWQBxZ1YLnbNJbrwa0ib1EkEI=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:66:7f:09:d3:31:54:a3:c0:bb:d3:a6:41:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jun 6 09:00:19 2026 GMT
Not After : Jun 7 09:00:19 2026 GMT
Subject: CN=2d5954c7cbea4e70fb7e58836f9f282bc340a694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:c1:a3:0b:db:36:d2:0f:f0:8e:67:74:71:
e3:6a:d7:31:c1:1f:26:4d:e9:1b:22:3f:8a:5b:1a:
2e:78:ad:84:67:ae:3a:ca:3c:e5:b0:d7:ee:f1:bc:
28:a6:ca:97:fe:89:46:18:43:84:97:cc:e1:f5:3e:
8d:96:4d:6a:3e:4d:b0:24:fc:0c:1f:7b:68:f6:ee:
53:e2:4d:b4:85:1d:4d:32:6a:80:4f:ba:49:2c:54:
48:ed:05:c2:c4:c1:db:c2:53:94:60:98:c0:44:72:
c8:24:95:78:06:03:fb:45:de:a1:58:57:23:2e:ba:
ac:91:b3:b1:f4:57:9a:26:5d:2f:49:05:1b:60:07:
c0:d7:f7:29:47:70:11:fa:db:8e:bc:c5:ab:a5:7d:
fa:bf:08:75:37:e4:99:3f:21:4c:51:10:0c:5a:fe:
64:a3:68:2d:62:d3:c2:ab:42:b8:e2:85:11:a4:39:
89:4f:43:7d:cb:ab:40:94:89:19:62:54:a1:67:1e:
b8:34:f2:f1:27:8f:bc:1c:48:8d:86:fc:21:12:e3:
88:ff:cc:0d:4f:3c:00:c9:20:fc:10:13:e2:32:6a:
b1:63:af:26:1f:79:8f:97:96:53:dc:a3:aa:22:7e:
f2:83:bf:5b:d3:69:23:65:72:c0:a5:63:34:d3:ab:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:54:C7:CB:EA:4E:70:FB:7E:58:83:6F:9F:28:2B:C3:40:A6:94
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:04:46:37:3f:18:65:bb:fc:8b:4a:d0:7e:a9:4e:ab:2a:44:
0d:01:67:ba:b6:82:08:12:3c:56:d5:f6:9c:1d:d3:26:d4:35:
46:7d:a4:d3:96:03:31:e9:a1:ac:e5:07:ae:b9:88:90:7c:8b:
4a:70:0d:21:fd:bf:24:a9:05:d9:60:48:79:58:96:f4:d4:11:
65:76:3e:3f:64:99:0e:aa:1a:c0:59:60:ff:95:06:d6:c2:95:
f1:e4:e0:e5:6c:37:01:b4:67:9b:b8:01:57:8a:93:8b:41:73:
90:64:b3:7c:01:d3:98:69:1e:f6:de:8f:34:59:70:eb:8b:f1:
9f:67:41:1c:d8:e6:88:eb:2e:0c:f4:68:aa:3c:33:42:5f:84:
1d:03:9b:ee:ab:e8:da:a9:ca:0f:f2:ec:17:2f:a8:25:88:e4:
75:1d:31:3f:0e:70:17:f9:59:c5:fe:1e:c7:57:98:3e:c4:0c:
38:a6:99:5e:3c:37:12:52:9b:1a:ff:5f:c5:74:d9:3f:30:77:
11:07:d8:4d:d4:1e:5f:bc:50:17:e0:2e:e9:97:cb:fa:62:08:
db:55:63:ea:ea:49:89:65:b1:b5:82:29:2e:07:c3:9c:e6:cd:
61:45:19:a7:ea:f0:5e:a0:65:97:11:2d:50:d8:4d:06:46:9c:
ee:39:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:08 2026 by rpki-client