Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: qWiadOci00XuzP4ZlOdtRptETFxXaMJjOSkBe7eG5Rs=
Subject key identifier: C3:79:29:B6:43:80:1F:AD:AD:78:75:A6:54:50:42:93:3C:BA:D8:02
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 01A13DB8883645E0D95EB7D042594129F6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 18FB
Signing time: Thu 15 Oct 2026 04:01:06 +0000
Manifest this update: Thu 15 Oct 2026 04:01:06 +0000
Manifest next update: Fri 16 Oct 2026 04:01:06 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: SpZDXsv5fnkflMnl3AB8ncPX+cPRjTHUbOviBKsG1qI=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:88:36:45:e0:d9:5e:b7:d0:42:59:41:29:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Oct 15 04:01:06 2026 GMT
Not After : Oct 16 04:01:06 2026 GMT
Subject: CN=c37929b643801fadad7875a6545042933cbad802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:58:b3:f8:ff:f2:95:c0:92:63:18:a5:4d:
50:cd:d9:21:68:96:26:b1:d4:1e:df:d3:78:05:5c:
71:f3:4f:f9:f9:b9:5b:33:c0:84:c5:75:3b:9e:50:
6e:f1:9e:a5:f2:62:16:af:29:38:b4:36:d8:55:45:
e5:f1:00:c0:c2:b3:d7:03:1e:57:02:6a:ad:0c:65:
2a:af:f2:93:44:3d:1e:39:62:0d:e3:78:8b:be:0d:
ba:cb:1b:e7:73:b9:9d:d8:d9:e2:a2:1c:89:be:77:
43:c4:68:31:58:c6:a0:ba:8f:60:63:af:b1:bc:aa:
44:19:83:20:c9:c5:17:f6:66:b8:dd:64:56:72:a8:
3d:6e:62:cb:7b:cc:96:c6:a4:db:51:dc:6f:64:05:
28:ef:a1:8d:8f:b5:88:b5:d6:5e:49:5b:06:8f:b0:
a6:9b:ae:4a:0e:83:6d:92:45:1a:a5:7d:ae:01:db:
13:e0:91:57:00:9a:34:0c:1f:d5:89:ab:5e:7e:d4:
4a:cc:21:10:53:c8:9e:18:43:8b:42:77:ad:a5:60:
65:0b:64:0c:63:33:a2:12:9d:72:39:2e:ba:22:05:
f3:f2:23:05:13:14:84:fe:a8:f0:30:e7:4c:bc:c6:
07:da:e5:af:da:03:86:84:6e:90:7e:81:2e:e8:53:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:29:B6:43:80:1F:AD:AD:78:75:A6:54:50:42:93:3C:BA:D8:02
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:58:29:d4:de:b8:c8:0b:40:a0:d9:09:4f:d9:4c:b9:c6:
bf:67:75:e5:28:38:c9:8d:98:f2:e9:96:b1:56:1f:86:b2:60:
84:5c:a6:2d:af:a6:c9:37:cf:9d:a9:e7:63:82:2a:66:5b:37:
75:8d:7c:bb:80:39:1e:6a:10:e8:98:cf:2f:36:ab:d5:da:43:
45:1c:74:84:d3:e9:fa:2f:cd:82:c7:e9:3b:78:e3:1c:ca:07:
15:53:6d:b4:de:4b:d3:4c:41:86:ba:7b:4b:49:a8:19:1c:22:
29:51:a3:1f:22:6a:c0:05:10:10:c1:ac:60:58:61:4f:e9:db:
2b:2d:b4:c2:34:43:81:20:89:6d:62:d7:9c:94:da:99:8e:aa:
b4:d0:f4:5b:0a:fb:c3:f1:90:c8:a7:66:c6:27:a6:be:6f:58:
82:57:41:bd:2a:e3:22:fd:a0:e6:6d:29:f5:d8:45:b3:44:d4:
3c:d9:43:d6:e4:0d:84:3c:f3:ec:33:a9:72:c3:ca:88:63:24:
f2:cc:ca:03:b3:57:2c:65:be:fc:d6:60:99:ad:56:e9:40:46:
53:10:7d:6e:6d:fc:fc:fa:ac:d2:f2:0b:2c:88:f6:4d:d9:ac:
f9:d9:da:c8:cc:96:25:b5:aa:a9:76:4f:f5:ef:ca:6b:23:b0:
4b:e6:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:25 2026 by rpki-client