Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: G3/VpE4qWD9z5GG0s/F66WKdkkDF1FV5hv+n8dptTS4=
Subject key identifier: A9:6C:CD:EA:0B:54:93:1E:B0:D8:07:05:D6:BA:DE:00:57:84:11:7A
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019D386612E92AE3BC392DB39B6A1A7247B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 16E6
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: VdHG5xNusWY+Uife/xzCTrSoGOY0r4fdY3xa/7pj3F4=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:12:e9:2a:e3:bc:39:2d:b3:9b:6a:1a:72:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=a96ccdea0b54931eb0d80705d6bade005784117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:49:e0:5b:b9:1b:06:03:e5:f1:4b:93:03:
11:97:ef:67:d9:40:f3:fc:81:1e:1e:18:84:8e:07:
0a:bd:5e:e4:96:d3:7c:68:e6:42:3c:f5:5b:81:3b:
64:fe:e4:5c:ce:a7:c3:8a:c3:87:da:fe:45:39:da:
8e:ed:40:23:92:8b:fb:83:2c:02:f7:cf:5c:45:4b:
f7:fa:af:98:9d:68:d9:c9:ab:41:86:02:73:06:aa:
85:74:3c:3b:dd:a9:e6:18:1c:7f:15:ff:6d:40:38:
ff:69:0f:2f:5a:ab:8a:93:84:e1:3d:41:44:4a:21:
07:2d:38:83:4f:fd:15:35:63:86:d7:1f:36:8b:ab:
29:81:2c:76:9e:a6:61:5d:b4:7c:ec:a1:de:c2:30:
67:5c:82:00:d8:72:91:0c:5d:f9:68:98:10:2b:45:
41:ee:ef:62:d4:20:0d:4a:e8:99:d8:83:09:df:e6:
25:4e:95:18:eb:93:b1:75:b7:8f:70:c6:76:8a:5f:
8c:60:30:01:0d:c2:b2:65:a1:7a:07:c7:1b:e6:7e:
b3:94:e3:44:d5:36:21:e5:57:dc:4b:01:82:d6:99:
6d:b7:60:1d:0d:f6:2d:ca:a2:1f:24:81:1d:8b:06:
11:8b:af:cc:98:10:69:e3:c5:2c:9c:5c:d3:0a:81:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:CD:EA:0B:54:93:1E:B0:D8:07:05:D6:BA:DE:00:57:84:11:7A
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6a:72:da:91:56:32:cb:8f:fd:6c:7c:2e:e7:4e:ec:6f:27:
09:e4:f3:7a:ff:b1:aa:35:da:71:b9:8f:1f:47:00:be:17:bc:
73:59:e7:6d:81:29:57:d7:d3:dd:48:9f:6f:db:7f:5f:29:31:
8a:b8:bf:48:a8:27:a9:db:b5:3a:79:67:3d:39:41:b3:0c:f5:
94:08:53:d2:e5:a5:f0:3b:c4:a5:13:0f:4b:79:03:80:64:5f:
4b:31:5a:7f:df:1d:ab:87:54:ed:fe:ac:d8:92:58:0e:7a:e3:
ba:0c:ef:a0:f1:5f:de:be:a8:9b:55:af:fb:37:66:e6:79:f4:
5d:44:72:ba:52:c7:35:00:a0:4f:5c:29:44:16:e0:f4:fa:65:
ce:a1:c8:d3:dc:ab:95:ce:70:16:f5:db:c2:cc:b2:b3:b1:93:
d1:e8:88:d1:be:f9:5c:b7:e0:3d:da:bc:c2:00:ec:a1:33:10:
09:86:95:0e:13:17:fa:4a:97:f0:51:49:10:a3:07:fb:96:e8:
39:79:1a:35:21:b5:dd:00:7b:83:bb:7a:86:d9:91:c3:8c:46:
5e:cb:cf:51:c4:0b:36:95:0b:33:a9:3a:f9:30:f8:9e:a4:a0:
16:62:e4:f5:05:b6:19:29:17:82:38:a5:c7:75:ba:bf:b4:28:
c3:4f:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client