Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: aEnZ9/uUQdCw/RaDxzRjkH/zyINzq6DD0Pqc0Snq6i4=
Subject key identifier: 88:1B:90:4E:08:D0:62:A9:EA:EC:3F:5D:84:1F:49:DE:BB:B7:7C:E3
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 01A1724B426D1C832A3742A8584798FAD54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1ABF
Signing time: Sun 25 Oct 2026 09:01:37 +0000
Manifest this update: Sun 25 Oct 2026 09:01:37 +0000
Manifest next update: Mon 26 Oct 2026 09:01:37 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: yAi7CSYN2A7MKOXY+GheP6AlsFn9iX6Zmfaw28YNclw=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:42:6d:1c:83:2a:37:42:a8:58:47:98:fa:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Oct 25 09:01:37 2026 GMT
Not After : Oct 26 09:01:37 2026 GMT
Subject: CN=881b904e08d062a9eaec3f5d841f49debbb77ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0b:6e:97:da:c2:d4:43:68:4a:8e:e4:3b:dd:
fb:05:28:33:d1:14:36:38:5f:95:ed:62:86:cf:41:
75:c9:42:28:f9:0d:17:68:c3:fb:5d:3d:64:65:46:
ca:5f:ac:0b:a8:24:26:06:90:94:59:d0:38:46:fa:
9c:e9:49:ef:95:8d:72:12:7d:7e:c6:4f:81:6e:69:
17:95:83:c8:eb:37:be:d9:b9:d2:d8:a3:7f:dd:9d:
c5:49:59:31:e8:3c:14:61:9b:64:f9:9f:1e:e3:85:
63:7b:46:03:e5:8d:3e:6e:b3:71:ee:72:a6:68:6c:
44:30:01:65:c4:f0:fa:30:e1:e9:e1:02:e2:d9:2c:
2a:39:fa:df:eb:89:a5:50:6d:ce:d3:7c:2d:91:1f:
21:15:d6:9b:34:b5:ca:6d:f8:ad:aa:b2:5a:0e:7f:
04:32:8f:dc:f6:f7:c8:d8:3e:14:13:e7:33:21:c9:
02:fd:c6:28:1e:b3:1c:df:6e:4d:00:90:df:ba:60:
fb:18:f4:92:3a:36:e7:90:6c:2c:49:d8:74:2f:9c:
61:e8:41:d4:e6:c2:a5:a7:ac:c8:07:98:e1:8d:49:
13:55:b3:52:1e:ff:72:ec:05:1e:12:5b:41:02:ae:
11:7b:ea:a3:a5:46:62:68:05:35:f4:f7:e5:e9:c4:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:90:4E:08:D0:62:A9:EA:EC:3F:5D:84:1F:49:DE:BB:B7:7C:E3
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:eb:aa:2b:18:b4:7c:e3:48:cd:2e:07:25:43:c7:14:8b:
37:80:63:7f:9c:5e:7b:e0:47:cd:80:26:d3:0b:a7:e3:5a:7b:
af:4c:77:6b:b9:61:4a:ae:24:26:b0:f4:6d:c8:9d:8d:64:3e:
05:e1:a7:f8:a2:d4:2e:c4:c0:9d:5f:8e:71:fc:31:16:9b:ba:
72:08:1f:fd:9e:28:28:ee:b7:f4:d5:d1:5e:44:44:b2:16:99:
78:cc:2b:b9:d6:9f:50:7b:7b:86:3e:1a:b1:63:71:b7:59:cd:
2d:70:60:8d:26:fa:30:1d:22:3a:a5:1c:d0:20:7e:31:1a:11:
ca:76:f6:2b:59:10:c2:46:65:c7:b3:38:89:08:04:2b:f9:4c:
8b:5e:cc:64:ed:02:4c:06:04:1d:95:3d:fd:6e:0e:af:8c:c8:
a8:e0:72:16:4c:de:8f:e6:2d:57:1b:5f:70:33:1c:f0:a9:db:
fa:55:d5:06:62:02:8a:4e:cc:cc:93:ee:a0:a4:55:08:7e:be:
9d:41:c2:d5:aa:2f:80:2d:f9:e3:17:6b:d2:3b:8f:5f:da:18:
62:e5:6f:d4:44:c7:ec:15:fc:89:9d:97:38:8a:ad:85:b5:ef:
b6:8b:00:3d:e0:a8:95:5c:b8:b2:2c:79:ad:d1:8d:5a:c9:6e:
bd:77:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:14 2026 by rpki-client