Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: OMyHc73QuNCrXnIzv+C6ajzxtJJ8OFtUNLAGDUwsQcE=
Subject key identifier: 45:76:82:11:39:D6:78:53:41:5A:36:22:9A:E1:0B:CC:6F:10:24:55
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019F85D728A02729D8FD299214F48F36AAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 18:01:38 +0000
Manifest this update: Tue 21 Jul 2026 18:01:38 +0000
Manifest next update: Wed 22 Jul 2026 18:01:38 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: H3A7V7qCYcBB5l/xi6gw6ek+aAZRO4YWRDyoAvMpvU4=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:28:a0:27:29:d8:fd:29:92:14:f4:8f:36:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jul 21 18:01:38 2026 GMT
Not After : Jul 22 18:01:38 2026 GMT
Subject: CN=4576821139d67853415a36229ae10bcc6f102455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:43:21:8f:fb:fc:98:27:4c:a5:c5:27:35:
00:67:a0:64:c3:f7:11:3f:43:22:5f:e1:c1:e8:c9:
a1:f5:3d:3b:19:f2:d5:43:3f:82:c6:1c:74:55:1c:
33:61:e0:3b:a2:b9:4a:aa:12:0f:e9:ff:0e:b0:df:
67:ba:0f:12:b9:41:06:4f:8a:50:a3:86:1b:0e:11:
67:31:f2:7d:02:ec:80:42:9f:96:76:9e:41:73:2f:
8b:e1:d3:7c:46:3c:48:2b:2b:11:8f:ab:d8:78:2b:
41:50:6c:d9:ba:40:51:04:d8:ae:a7:40:5a:5a:e8:
77:8b:cb:ce:fd:37:27:d8:03:7e:c0:54:99:92:e7:
d5:68:fa:56:59:3b:08:e2:0b:a2:2a:ed:6e:0f:cc:
89:bb:61:14:82:be:fb:56:90:ce:04:12:dd:54:ae:
c0:cf:84:06:8c:54:39:78:53:b7:61:ff:04:0e:be:
51:5b:e7:8b:6d:98:fc:e5:76:f9:a6:56:fc:e1:34:
aa:25:3c:3c:8f:97:11:a7:c3:6a:95:3d:aa:6a:1d:
75:f7:38:18:e7:d1:d6:47:72:41:de:38:17:a7:04:
f4:76:0a:1a:f0:d2:16:b2:fc:42:b2:34:37:8f:df:
74:00:42:dc:29:ad:a4:88:1e:00:8d:6e:ba:6a:f8:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:82:11:39:D6:78:53:41:5A:36:22:9A:E1:0B:CC:6F:10:24:55
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:20:2e:e6:df:8d:67:47:6a:bc:8d:ea:a4:ab:74:1e:26:e2:
4c:61:84:28:79:0c:ae:f0:6c:d5:5e:f3:c0:fe:dc:c9:21:c6:
5e:13:3d:11:dc:1b:da:81:d3:e1:39:18:a1:3d:14:93:a5:b1:
30:48:75:19:40:2d:8d:a7:4b:94:10:e7:a3:16:32:df:94:36:
80:e6:1d:01:69:da:65:11:4f:59:04:65:12:9a:61:0f:13:cc:
00:25:38:69:ae:3b:f1:da:5b:45:02:3f:fc:dc:62:e5:fd:66:
ca:8d:d6:6c:24:6e:20:d5:5d:b6:b6:18:c6:21:48:bf:89:30:
68:4e:d3:6b:39:aa:41:67:20:a1:6c:eb:94:13:b6:8d:9a:8e:
a5:18:4a:40:9f:6d:be:e7:4b:c1:d2:75:ba:ed:58:37:ed:9b:
87:79:6a:b5:d7:79:32:eb:bc:30:dd:71:65:cd:ee:59:b7:f5:
9f:d4:d2:a3:66:8a:86:e6:69:e8:95:6a:9f:42:13:24:d8:93:
f0:18:2d:e2:60:fd:70:dc:e0:52:70:3b:81:12:13:b0:a8:dc:
5f:da:19:1e:fc:4a:e4:de:bd:55:71:82:73:01:ed:7b:7e:1c:
ad:f3:59:a2:c8:cf:73:cf:ec:4d:63:70:63:c2:5c:0b:05:19:
84:5f:4e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1yigJynY/SmSFPSPNqqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjYwNzIxMTgwMTM4WhcNMjYwNzIyMTgwMTM4WjAzMTEwLwYDVQQD
Eyg0NTc2ODIxMTM5ZDY3ODUzNDE1YTM2MjI5YWUxMGJjYzZmMTAyNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYZDIY/7/JgnTKXFJzUAZ6Bkw/cR
P0MiX+HB6Mmh9T07GfLVQz+Cxhx0VRwzYeA7orlKqhIP6f8OsN9nug8SuUEGT4pQ
o4YbDhFnMfJ9AuyAQp+Wdp5Bcy+L4dN8RjxIKysRj6vYeCtBUGzZukBRBNiup0Ba
Wuh3i8vO/Tcn2AN+wFSZkufVaPpWWTsI4guiKu1uD8yJu2EUgr77VpDOBBLdVK7A
z4QGjFQ5eFO3Yf8EDr5RW+eLbZj85Xb5plb84TSqJTw8j5cRp8NqlT2qah119zgY
59HWR3JB3jgXpwT0dgoa8NIWsvxCsjQ3j990AELcKa2kiB4AjW66avjkTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV2ghE51nhTQVo2IprhC8xvECRVMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByAu5t+N
Z0dqvI3qpKt0HibiTGGEKHkMrvBs1V7zwP7cySHGXhM9Edwb2oHT4TkYoT0Uk6Wx
MEh1GUAtjadLlBDnoxYy35Q2gOYdAWnaZRFPWQRlEpphDxPMACU4aa478dpbRQI/
/Nxi5f1myo3WbCRuINVdtrYYxiFIv4kwaE7TazmqQWcgoWzrlBO2jZqOpRhKQJ9t
vudLwdJ1uu1YN+2bh3lqtdd5Muu8MN1xZc3uWbf1n9TSo2aKhuZp6JVqn0ITJNiT
8Bgt4mD9cNzgUnA7gRITsKjcX9oZHvxK5N69VXGCcwHte34crfNZosjPc8/sTWNw
Y8JcCwUZhF9O7g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:04:58 2026 by rpki-client