Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json)
Hash identifier: YTINeIKERWR754OmzoYUrnkgtHicXTUTM64f4l9cmGI=
Subject key identifier: B5:D9:26:90:D4:DC:41:47:2E:E9:2D:1B:99:D6:0D:09:92:30:F4:6E
Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Certificate serial: 019D12A229BB6F0DA31099BA6DFF8CBB15F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
Manifest number: 0261
Signing time: Sat 21 Mar 2026 23:01:50 +0000
Manifest this update: Sat 21 Mar 2026 23:01:50 +0000
Manifest next update: Sun 22 Mar 2026 23:01:50 +0000
Files and hashes: 1: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: S3TnJyzHC8FpFpX4r+x3/jJ3GFM1KckBaOw3T1lgT+Y=)
2: wFdwl3GPZJGJpXxabTkhX-gww84.roa (hash: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:a2:29:bb:6f:0d:a3:10:99:ba:6d:ff:8c:bb:15:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Validity
Not Before: Mar 21 23:01:50 2026 GMT
Not After : Mar 22 23:01:50 2026 GMT
Subject: CN=b5d92690d4dc41472ee92d1b99d60d099230f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:8b:95:d9:40:ab:db:ef:8c:9a:23:4e:4d:
9e:99:b1:9e:c3:ec:de:6e:19:f0:34:c5:d7:d1:58:
73:14:3f:bb:2e:d6:01:26:dc:c3:38:fd:a0:75:b5:
8d:e8:8e:98:31:f5:9f:f0:84:8b:f4:c0:92:3c:f9:
d4:8e:79:c8:11:ab:fb:6f:14:3f:f4:6d:d6:0f:88:
51:7c:e1:43:86:79:70:61:1a:a1:b0:d5:9b:c9:1b:
e8:41:20:bc:ff:0a:ad:13:22:1c:fd:17:b0:03:b4:
0d:97:1b:3d:e0:d4:5e:65:7d:1c:25:06:57:ee:6d:
fc:fe:15:03:a2:7e:1a:3f:96:d5:88:06:dd:2f:a9:
e2:67:9c:4b:6f:8c:3f:1d:75:23:52:10:50:7f:ad:
34:d6:d2:88:da:83:a1:cf:e4:84:8a:15:04:24:6e:
fc:bc:2e:9b:4d:d1:93:48:cb:81:9d:33:a6:a1:ee:
7d:65:18:51:61:d5:a8:fb:15:65:98:a0:71:61:36:
a4:c2:d4:d5:86:16:7a:88:e6:87:31:bc:20:a3:85:
80:9f:81:80:c8:7b:c8:63:b0:e6:7f:04:e8:3d:41:
77:2c:98:4f:39:5c:94:45:2b:a4:d5:12:24:bd:0a:
74:30:17:6a:59:06:54:f4:7d:f9:df:ef:79:6e:a3:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:26:90:D4:DC:41:47:2E:E9:2D:1B:99:D6:0D:09:92:30:F4:6E
X509v3 Authority Key Identifier:
keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:d9:ea:d3:58:9e:42:39:0b:e3:d5:56:ec:6c:42:99:c5:
9f:fd:d2:b2:53:29:cf:41:53:52:b2:9c:09:52:34:84:74:c3:
f7:1f:ea:da:4d:e3:7e:99:fd:99:08:b7:fa:bd:ea:f9:9d:08:
f6:0a:ad:3e:06:48:a9:6b:71:33:75:d4:6b:9e:29:b3:d8:31:
1d:bb:c7:23:19:e6:c5:f5:ee:14:09:86:49:a2:ae:28:2a:3a:
d1:d9:df:f6:1f:c1:3c:66:ad:f4:f3:d6:1b:ff:32:3a:e6:e6:
32:aa:83:38:0f:06:be:e6:04:26:b7:95:83:a4:df:1d:11:33:
52:1b:ff:e6:e6:1d:8e:9b:9d:4f:69:e7:e5:e1:9d:4c:d7:cc:
33:26:55:c0:57:e7:a5:e8:fd:90:4b:5d:ab:dc:b4:e4:75:67:
bb:82:5f:37:69:be:d6:8f:22:b4:e1:3d:a2:ba:ad:81:1f:af:
2c:6f:59:39:ab:fe:40:43:09:a0:90:b1:c1:7e:18:ba:f8:da:
bf:a1:b8:34:3d:79:16:8d:66:93:1d:81:7a:8b:fb:ea:98:16:
a5:11:94:1b:35:23:17:64:9f:99:52:c6:bd:e0:3d:fa:06:53:
f4:9f:f0:7a:c3:94:6e:8b:ba:32:0f:1c:34:35:24:b2:1f:5d:
af:bb:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:34:50 2026 by rpki-client