Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: AF5zIh7fhqwt/Sd0YeR1BVQh+lOLQZhNs+Zj8LyCBLY=
Subject key identifier: 0D:E5:7E:87:22:42:03:09:7A:40:9E:8D:B6:FB:5B:68:B7:DE:B9:34
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019F15673C74BF089795ADBD0F91E20AC957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 17DD
Signing time: Mon 29 Jun 2026 22:01:54 +0000
Manifest this update: Mon 29 Jun 2026 22:01:54 +0000
Manifest next update: Tue 30 Jun 2026 22:01:54 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: 7dy+TnPsyCcDDGYcUC2iZ9ec5wEJUnWAobOS5GqcYXo=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:67:3c:74:bf:08:97:95:ad:bd:0f:91:e2:0a:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jun 29 22:01:54 2026 GMT
Not After : Jun 30 22:01:54 2026 GMT
Subject: CN=0de57e87224203097a409e8db6fb5b68b7deb934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:01:12:ab:37:e3:f9:0c:69:eb:d2:ce:6a:
ab:0f:77:b9:6a:e4:21:82:df:89:67:38:ed:ce:b0:
8d:c4:e0:77:db:f2:d9:1c:ca:cc:ea:75:d8:8e:39:
63:47:8a:17:29:47:be:de:cd:cb:f7:8e:d6:db:07:
f4:d1:02:97:ba:34:21:fa:db:7f:99:e4:68:3e:3c:
c8:1c:3d:b1:4d:44:9d:ce:b3:8a:20:19:8e:ae:5e:
2d:23:ab:00:b7:98:46:39:5b:1f:b2:15:31:7b:10:
0c:af:1b:7b:73:36:4e:ed:3f:10:68:91:0e:b5:57:
1a:3b:2c:72:2f:28:16:af:6c:2e:1a:ef:9e:45:5e:
70:08:0b:49:4d:70:54:23:5e:88:cc:49:1c:f7:63:
0d:84:49:bf:de:e9:d3:2e:89:49:c4:f5:e3:c5:3d:
2f:90:03:33:67:92:0f:50:c7:ff:81:18:b8:ca:e2:
5f:2e:46:fe:38:77:20:0f:78:5d:05:27:e1:7c:23:
30:ed:53:ba:d5:93:92:b8:69:09:dd:24:8f:e5:31:
e7:44:6e:f7:22:ef:28:cd:35:7e:94:a0:e9:81:60:
6c:8c:fd:b1:01:f4:fa:57:96:af:0f:43:79:d4:f4:
14:82:7b:93:9f:2e:24:c6:3a:08:fa:d7:0f:8b:2f:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E5:7E:87:22:42:03:09:7A:40:9E:8D:B6:FB:5B:68:B7:DE:B9:34
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d4:62:16:30:d8:29:dd:e3:f9:1c:97:77:3d:d4:d2:2c:0d:
2a:77:9d:93:ff:90:70:87:51:60:20:ea:a6:40:b5:b9:d1:d7:
f4:38:18:c3:f9:e6:3f:73:cb:11:e4:21:d8:9f:fe:1e:59:4e:
59:0b:ae:4e:f8:10:6d:d9:0c:d5:87:ac:ae:9b:c9:ec:7a:43:
24:92:bc:b9:23:4d:2c:71:68:2c:8e:0d:57:01:88:16:cd:0a:
cb:ca:04:99:cd:74:bb:33:7e:bb:c5:7b:47:60:48:3f:89:50:
dd:da:8d:de:88:63:e1:dc:37:35:40:82:e3:aa:7d:c4:34:25:
36:fe:86:d3:68:50:c4:4e:2e:da:75:68:ae:a0:a2:2e:a8:ae:
ff:bf:fd:e4:95:3e:96:2f:0a:66:b6:08:02:a0:48:7d:ca:e9:
8b:f6:61:c5:2a:be:14:30:96:29:81:f6:bb:9e:06:dc:e2:2d:
f0:9a:15:05:0a:e3:53:6f:4a:ce:0d:cf:b4:f8:c5:94:0c:e9:
be:c4:14:ec:3b:da:88:c3:bf:ee:2a:74:60:a0:37:30:41:91:
24:e5:26:3e:06:8b:2e:ac:97:0a:66:b9:df:d1:26:bf:c6:61:
01:00:b2:8f:30:98:3a:57:16:3f:c2:c2:51:12:e3:98:ac:c8:
c3:41:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:25:51 2026 by rpki-client