Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: ZxdaQRFpjuOMDx4vHe1YToyXGcIVqC9wyKG4n1nL7wU=
Subject key identifier: CA:34:F1:F8:C5:41:C8:D4:A0:59:16:BC:7F:DF:A6:D3:6E:3C:84:80
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 01A17D72F9FDE1D29D40B2EBEC24DE95E93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 17EA
Signing time: Tue 27 Oct 2026 13:00:49 +0000
Manifest this update: Tue 27 Oct 2026 13:00:49 +0000
Manifest next update: Wed 28 Oct 2026 13:00:49 +0000
Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: ty35qdrB5IBpdd9bVRg+nmO6LmxAnR1lz85ngSsob9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:72:f9:fd:e1:d2:9d:40:b2:eb:ec:24:de:95:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Oct 27 13:00:49 2026 GMT
Not After : Oct 28 13:00:49 2026 GMT
Subject: CN=ca34f1f8c541c8d4a05916bc7fdfa6d36e3c8480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:90:be:34:d7:61:08:38:95:03:4b:d2:76:
69:16:08:2e:c1:f2:27:21:2a:7b:cf:a6:4a:c9:41:
fc:67:d7:46:cf:0c:e8:ae:5e:47:03:91:50:92:33:
43:3d:31:be:d8:e6:34:ad:14:24:f5:7f:0d:ff:a9:
f9:d7:92:bc:9c:f9:3a:af:90:52:e3:41:1e:81:29:
43:9d:65:61:8a:df:de:3a:ab:ec:ad:3b:60:5d:1d:
cd:33:02:4c:f3:18:e1:ea:f5:5b:a5:45:29:93:ae:
06:3b:6d:75:70:82:56:2a:3e:44:17:58:57:4a:1a:
18:e4:02:ad:ed:3d:c4:0c:b8:fa:67:29:3f:f6:df:
06:2a:99:7e:ef:1d:5a:c3:cc:2a:d6:89:83:6f:2d:
c3:b3:af:bd:da:3e:d2:29:06:dd:fd:75:f8:bf:58:
32:f0:24:e0:60:f7:7a:c7:b5:ff:50:1c:9d:49:6e:
55:b1:04:14:ef:ce:59:4c:3f:d2:42:af:14:12:bb:
4a:ea:46:77:ec:8a:cd:fd:ef:a3:fe:4c:90:df:2b:
b4:d3:15:19:d8:88:d4:8d:82:13:d7:9f:49:f6:39:
a5:64:44:2f:00:bf:57:c6:d7:7b:c5:10:cf:61:3c:
93:1d:45:dc:a8:71:a6:c8:27:24:e8:22:7b:ad:6c:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:F1:F8:C5:41:C8:D4:A0:59:16:BC:7F:DF:A6:D3:6E:3C:84:80
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:46:b2:12:43:35:b1:9a:10:a3:93:24:b2:2b:d7:62:3e:
4f:42:2c:ee:fd:7c:71:91:da:5c:1e:9b:de:19:ca:2a:8c:b2:
4a:b6:31:71:6f:be:91:f4:fd:11:ad:22:36:ef:86:ff:ed:74:
d6:9e:f1:a0:2d:0f:c5:22:02:b4:da:46:90:55:8a:66:73:fc:
e9:8b:01:69:53:7a:2a:d7:6d:c0:cd:63:20:14:cd:d1:41:0f:
70:a2:b8:bb:4d:c2:e7:48:96:4d:23:c2:ef:27:8e:97:20:d1:
ac:13:00:6a:9b:26:1a:37:c8:52:5b:14:ac:90:b6:a8:c0:26:
54:72:45:dd:4b:0c:86:49:99:bb:b0:71:31:fd:13:fd:3c:c7:
3c:66:f6:d2:f0:52:d3:2e:6c:09:ed:9a:10:84:2f:7d:e6:f7:
32:1d:0c:fe:5e:28:f9:cf:6a:19:6e:af:b4:25:11:6e:9a:2c:
16:d7:ea:cd:ec:08:40:6e:d0:dc:6a:70:f8:34:46:46:ab:c1:
0f:5d:86:42:66:9e:2b:e3:51:f7:89:eb:55:0e:72:46:08:de:
07:6b:9e:61:bd:9a:17:e1:20:d3:f4:cb:f5:8d:e5:74:c6:b5:
ac:8a:e4:33:d0:5e:c7:36:b2:80:58:0d:e4:52:4f:c9:c6:c0:
46:52:d9:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9cvn94dKdQLLr7CTelek8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5
Y2ZkMWMwHhcNMjYxMDI3MTMwMDQ5WhcNMjYxMDI4MTMwMDQ5WjAzMTEwLwYDVQQD
EyhjYTM0ZjFmOGM1NDFjOGQ0YTA1OTE2YmM3ZmRmYTZkMzZlM2M4NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2SQvjTXYQg4lQNL0nZpFgguwfIn
ISp7z6ZKyUH8Z9dGzwzorl5HA5FQkjNDPTG+2OY0rRQk9X8N/6n515K8nPk6r5BS
40EegSlDnWVhit/eOqvsrTtgXR3NMwJM8xjh6vVbpUUpk64GO211cIJWKj5EF1hX
ShoY5AKt7T3EDLj6Zyk/9t8GKpl+7x1aw8wq1omDby3Ds6+92j7SKQbd/XX4v1gy
8CTgYPd6x7X/UBydSW5VsQQU785ZTD/SQq8UErtK6kZ37IrN/e+j/kyQ3yu00xUZ
2IjUjYIT159J9jmlZEQvAL9Xxtd7xRDPYTyTHUXcqHGmyCck6CJ7rWxwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMo08fjFQcjUoFkWvH/fptNuPISAMB8GA1UdIwQY
MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt
Mzg2ZWVhOGQ4ZGQ2LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2
LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5VGshJD
NbGaEKOTJLIr12I+T0Is7v18cZHaXB6b3hnKKoyySrYxcW++kfT9Ea0iNu+G/+10
1p7xoC0PxSICtNpGkFWKZnP86YsBaVN6KtdtwM1jIBTN0UEPcKK4u03C50iWTSPC
7yeOlyDRrBMAapsmGjfIUlsUrJC2qMAmVHJF3UsMhkmZu7BxMf0T/TzHPGb20vBS
0y5sCe2aEIQvfeb3Mh0M/l4o+c9qGW6vtCURbposFtfqzewIQG7Q3Gpw+DRGRqvB
D12GQmaeK+NR94nrVQ5yRgjeB2ueYb2aF+Eg0/TL9Y3ldMa1rIrkM9BexzaygFgN
5FJPycbARlLZKQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:28:31 2026 by rpki-client