Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: ebcT1mIPoWh5mo2AE5R7GMJyrWNqmkmkgYyqXKWiPro=
Subject key identifier: F5:B4:B3:E6:DF:67:5A:FA:20:93:AF:E0:60:70:E6:5A:77:18:61:17
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 019DCF07FBA96F15F3255FB0226829B7246D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 1602
Signing time: Mon 27 Apr 2026 13:01:39 +0000
Manifest this update: Mon 27 Apr 2026 13:01:39 +0000
Manifest next update: Tue 28 Apr 2026 13:01:39 +0000
Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: zt0LoX2c7SMtoyXO7yFwZwMnDbyRBegujnkqQ+KhSt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:fb:a9:6f:15:f3:25:5f:b0:22:68:29:b7:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Apr 27 13:01:39 2026 GMT
Not After : Apr 28 13:01:39 2026 GMT
Subject: CN=f5b4b3e6df675afa2093afe06070e65a77186117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:b1:b0:4c:ec:b6:00:aa:70:6a:4f:3d:f8:
8a:84:ba:b9:82:eb:09:7c:71:17:81:f9:84:73:2e:
a5:9e:1f:32:66:df:8b:c1:2f:41:c1:c6:f0:84:2c:
fe:f6:e4:df:e0:1a:ae:fc:cd:d4:dd:5a:db:15:56:
f8:d2:bf:4d:e6:a3:38:4d:52:a6:9d:6b:24:0e:bf:
a5:43:09:ab:bc:10:3b:3d:5e:28:a2:aa:e3:59:3a:
46:47:bf:cc:0e:f0:0a:42:6a:c4:ae:0b:18:1d:ab:
7e:54:e1:ab:b8:d0:95:c2:7d:be:e0:e4:26:23:b3:
01:fe:6b:f2:90:1c:d3:4c:b9:f0:3b:c1:ee:c2:7d:
cb:f3:e3:68:0f:72:46:ef:e9:21:96:bd:4c:76:7d:
14:22:0b:67:46:9d:0b:7e:59:33:d0:1a:27:50:e1:
d5:fc:68:d5:93:bf:d8:12:d1:c6:36:59:ec:9c:72:
43:52:8e:8d:8a:62:55:22:c2:a4:53:b9:db:58:6a:
4c:3e:2e:95:df:29:81:53:d7:b0:8b:9f:f1:66:1d:
8d:e0:a4:d4:22:65:b6:1d:3e:c3:df:df:1c:56:36:
5e:2d:fc:57:06:f0:dd:3e:81:02:e6:8b:f2:59:4b:
41:c9:0a:bd:a4:33:8a:f4:b9:57:a4:7c:84:8a:99:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:B3:E6:DF:67:5A:FA:20:93:AF:E0:60:70:E6:5A:77:18:61:17
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:57:d8:8e:6b:0e:b2:e4:11:3e:04:41:94:e7:e6:4f:0e:
4b:82:b0:96:1d:ae:a8:c0:e7:4e:18:7a:65:a1:a0:44:72:da:
0c:c8:2a:fe:d4:27:a6:d8:4a:fb:15:76:05:ff:96:86:be:87:
2b:c2:f0:70:08:ce:b1:20:c9:8f:ef:77:3a:30:07:83:6e:58:
5d:f5:50:ab:6b:c7:92:1e:5e:c3:6c:cb:24:81:18:97:e1:22:
9e:8d:79:a7:71:bd:7a:18:80:0a:c3:75:05:7f:90:a5:11:44:
03:e8:ee:c9:da:3e:88:50:f4:f0:cc:b1:fc:27:6d:eb:55:a2:
ea:94:60:f4:06:29:26:8b:ce:38:f8:c0:4e:2b:5b:bb:29:8d:
10:db:ef:ee:03:c5:61:b2:f9:da:c7:ec:9c:8e:c2:96:f5:07:
36:1e:53:1d:5a:ac:c2:c4:32:1e:ad:cc:30:ac:1d:4e:87:6c:
6a:0d:97:fa:98:d1:27:9b:08:1a:a3:ee:9b:ff:16:bd:d0:3c:
18:fd:17:6e:74:56:5f:53:4a:e9:2b:ed:3d:44:96:d7:27:8d:
89:08:30:64:79:b8:b5:04:ef:09:0a:7a:a6:b2:4b:9d:be:ae:
c6:1c:87:ab:aa:68:83:e0:d0:95:d7:f6:59:91:a9:83:91:72:
55:40:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:04:34 2026 by rpki-client