Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: LffZrkNIt6lA0mPDFLaiYuAmY8L6X2Bi1/3sh4emQX8=
Subject key identifier: 37:97:3D:91:AA:CA:59:4D:E2:CF:02:7E:0D:B0:AD:4B:B7:73:87:B5
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01A0F1F996100F32A1D39ACB23F39664AF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 1756
Signing time: Wed 30 Sep 2026 11:01:00 +0000
Manifest this update: Wed 30 Sep 2026 11:01:00 +0000
Manifest next update: Thu 01 Oct 2026 11:01:00 +0000
Files and hashes: 1: luzq3QatRtvsM_tav41tExaw3UU.asa (hash: CgV/sZKmh8DSn/OeHmUQ5q5ffkhFJN41kTfbg8horZ0=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: 4IrAh31MyIx0Fc9mjW8jv2JHV4Wdiarf4xdLQEtm0v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:f9:96:10:0f:32:a1:d3:9a:cb:23:f3:96:64:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Sep 30 11:01:00 2026 GMT
Not After : Oct 1 11:01:00 2026 GMT
Subject: CN=37973d91aaca594de2cf027e0db0ad4bb77387b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:68:4b:8a:5b:0e:52:c2:65:8a:c5:51:45:
c2:9b:f1:3c:5c:0c:2a:3a:48:71:29:73:b7:f1:b5:
8c:51:8c:d1:bf:dc:de:67:76:25:b4:43:66:3c:ee:
9c:08:83:ad:1e:3f:9c:ae:9f:9e:b4:10:53:97:0f:
46:ce:a5:52:0c:52:95:41:bb:47:aa:b7:82:f3:fa:
8b:c6:ff:fb:72:a6:44:45:82:f0:cc:3a:4e:47:25:
3d:38:61:4b:ed:cd:3f:ad:60:f0:79:54:f1:2c:30:
23:f4:4d:f2:fa:ff:fc:29:a8:93:1d:59:7b:af:22:
11:f2:9e:24:8c:4c:e0:e4:2f:b2:d7:69:aa:66:cc:
0c:eb:4d:43:c2:94:6e:27:dc:be:af:fd:59:06:13:
33:1a:48:ff:47:43:93:c6:4a:43:92:62:aa:1e:f5:
8c:87:e2:80:34:c7:f1:a5:4d:7f:5e:42:a2:c3:12:
64:24:ee:67:76:98:37:f8:94:ce:f6:9f:9c:f7:9a:
7e:29:7d:d4:f5:c3:cf:1f:8d:bc:fb:d6:a3:84:f0:
23:66:d9:ae:3d:2c:fd:24:2b:c2:16:9f:ba:64:27:
70:0f:f7:f6:11:81:97:80:bd:b9:64:46:c9:99:0e:
1c:41:29:f2:61:dc:5b:98:d8:d5:74:fe:02:c3:04:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:3D:91:AA:CA:59:4D:E2:CF:02:7E:0D:B0:AD:4B:B7:73:87:B5
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:44:b3:96:a2:de:74:bd:2f:13:56:f4:d0:8c:4a:4d:fc:
00:8c:f6:61:7e:6f:d3:19:24:a0:d3:84:83:50:14:e4:fc:d9:
ab:42:8e:1d:c1:bf:df:27:8d:73:61:a0:29:f8:27:dd:ca:52:
94:ca:31:ff:c7:95:5d:ff:25:b1:66:6a:b3:06:1a:f5:85:42:
b5:9d:bc:64:fb:4c:3c:30:e9:52:f5:4a:40:a8:10:68:13:46:
52:43:9e:77:6a:cb:44:cc:6c:72:7c:0c:ff:c0:dd:08:b2:e7:
4a:08:0a:3f:68:06:ec:4e:3c:7b:92:93:40:20:7b:8e:68:07:
ca:6b:18:e2:d6:0f:8e:3c:22:8b:3b:16:35:d7:b7:f9:20:71:
db:41:bc:71:d8:ab:cd:9b:53:0b:42:1a:c6:d4:f8:06:e6:37:
ec:eb:e5:75:ee:00:02:b9:07:c0:0b:c0:43:5a:c1:80:38:ec:
10:72:fe:85:c5:61:38:c9:83:a4:49:57:3b:d8:57:6e:0b:31:
84:fe:c6:2a:3b:de:15:82:6e:e7:fc:e9:9b:3b:0b:88:6e:be:
f7:ad:1e:45:1f:bb:44:4e:29:99:c3:3d:f5:15:98:ef:93:c2:
4a:c0:70:87:cc:94:92:d1:a8:80:81:44:93:dd:22:46:c0:a1:
32:0c:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:08:45 2026 by rpki-client