Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: AkWy2GoPk7a1ZIjgErUWF7T3i3CA5bCspgwK1QPs+7w=
Subject key identifier: FF:EF:AC:8A:61:5E:EC:9A:31:07:F5:FC:DA:E2:D0:A2:C1:D7:6D:04
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 01A06D959121F066DB1EF5FCD044A62D1A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 18:01:53 +0000
Manifest this update: Fri 04 Sep 2026 18:01:53 +0000
Manifest next update: Sat 05 Sep 2026 18:01:53 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: o5SdiwvsCzR2Mrg1iuOsrCT6b/1y1I8a6pSxZW9d/VE=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:91:21:f0:66:db:1e:f5:fc:d0:44:a6:2d:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Sep 4 18:01:53 2026 GMT
Not After : Sep 5 18:01:53 2026 GMT
Subject: CN=ffefac8a615eec9a3107f5fcdae2d0a2c1d76d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:a9:18:c3:61:06:99:36:43:92:d2:48:38:
7a:a8:27:a6:15:7f:0c:7c:6a:22:46:d9:b6:b8:4f:
7e:6e:fc:12:49:03:e6:0e:d2:22:66:c2:40:40:64:
72:30:15:1f:86:80:7a:71:5b:bf:55:ea:c3:e4:61:
a8:14:06:93:2a:72:09:2f:d9:e6:a5:51:8c:87:ba:
74:00:f9:fd:aa:86:ae:1b:bb:97:e4:b2:49:e8:a6:
0d:65:6e:db:ba:94:86:14:e9:6d:66:e9:7f:e9:cf:
62:b1:cd:72:2a:12:59:92:a5:58:7f:8a:45:36:1d:
b2:bb:f2:3b:f3:95:3d:ff:8d:6a:5d:70:55:ee:0f:
e4:22:a9:14:b8:9d:70:9e:be:b7:48:74:28:f5:25:
4a:e4:e4:4e:d7:db:f1:df:c4:31:5e:7e:ab:c1:fb:
3f:24:7f:f3:77:db:31:76:8a:04:e0:de:61:5c:35:
9a:a7:cc:51:0e:c5:8e:a0:52:86:c4:e5:9d:dc:0b:
cb:9b:fd:48:42:c2:a0:d9:97:59:2d:1a:99:79:3c:
53:39:f4:02:74:da:4e:b5:07:c1:24:67:33:9e:eb:
18:e4:71:ba:ae:cd:10:aa:0f:5c:a0:89:12:4a:25:
bc:7a:d2:0e:29:27:7c:10:c4:c0:e6:79:b0:e4:81:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:AC:8A:61:5E:EC:9A:31:07:F5:FC:DA:E2:D0:A2:C1:D7:6D:04
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:fe:6b:44:29:dc:24:47:30:d0:58:d4:4e:1e:b6:4d:47:
90:46:a2:df:73:8e:64:46:6f:99:4b:ac:e3:5d:61:7d:55:5c:
e6:a1:8c:3f:ff:47:16:e6:82:13:e1:b7:d7:8d:87:ea:55:89:
6d:41:3a:cd:8f:6f:c4:6e:36:21:5c:09:25:25:e4:df:22:99:
31:cc:b4:f7:00:52:96:ac:2d:86:e6:f0:e5:56:fc:95:10:f2:
30:22:04:0a:5a:4c:f6:78:c9:f3:c2:37:44:d3:55:fb:d0:4e:
b4:03:7a:04:1e:c7:fd:d7:cc:97:aa:2f:98:b7:1b:ee:6d:47:
a0:f1:04:25:c0:b5:16:33:7c:5f:59:f1:05:3f:91:66:49:54:
ab:05:71:df:91:47:ae:38:28:32:66:94:0c:43:65:e4:56:d8:
a8:03:1a:9a:5d:d5:33:c9:06:ef:0c:84:6f:85:0e:cb:4a:b0:
1b:2b:69:b3:9e:8c:ee:f1:ae:f8:18:f5:6c:c5:24:6b:00:3e:
e9:96:14:d0:ff:2e:a0:a5:c5:d5:ac:33:1f:30:4c:25:cb:16:
27:9b:88:5c:b7:23:20:1a:27:af:c2:11:f9:c2:49:d9:77:37:
9a:93:ef:89:82:a9:55:d4:a0:ec:17:ff:a4:6e:f1:6a:eb:8e:
0b:be:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:49:58 2026 by rpki-client