Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: yxCRygcMngCYJt4kqx2qkmJ3xCWyixhecvQIrFFdFrc=
Subject key identifier: D7:65:4E:15:A6:E7:75:DD:C5:79:5A:1B:7D:BC:67:63:5F:D4:E7:61
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 01A16F12633BDDE91B087B6EED70EDEA7E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: 0138
Signing time: Sat 24 Oct 2026 18:00:38 +0000
Manifest this update: Sat 24 Oct 2026 18:00:38 +0000
Manifest next update: Sun 25 Oct 2026 18:00:38 +0000
Files and hashes: 1: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: e5iP2NYV71WVMn4OWqIH9IJoq0du0pDmnvinlpApLig=)
2: p-lwY80kWRy0amaVOuZoN-IZfZM.roa (hash: 2g7rAV/oXLUF71ogQq8F8S6iVgMgpUpdukvxc9GjOgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:12:63:3b:dd:e9:1b:08:7b:6e:ed:70:ed:ea:7e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Oct 24 18:00:38 2026 GMT
Not After : Oct 25 18:00:38 2026 GMT
Subject: CN=d7654e15a6e775ddc5795a1b7dbc67635fd4e761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:55:03:55:cc:e7:ca:97:60:e1:78:e6:b5:
b1:49:ea:35:1b:10:e6:8c:fb:19:2f:07:0e:71:b4:
bd:04:83:1c:8f:99:ec:7e:72:cf:91:f6:eb:ab:ad:
93:e7:24:a3:b1:0c:86:2c:10:f5:7a:67:cf:b1:22:
47:ea:27:14:4e:4b:0c:f9:19:49:b2:0d:b8:53:bd:
0a:ce:ef:a4:30:2b:75:0d:6f:f2:1d:7c:aa:42:30:
31:9e:3f:1a:13:1a:fa:60:e0:e9:e7:c9:d1:77:ee:
ad:ef:95:cb:dc:aa:f1:06:20:36:f8:82:7c:5c:9b:
b9:72:6c:13:5d:00:73:64:04:ba:2a:a9:93:9e:9f:
98:a1:53:b9:e5:8a:8e:44:89:1b:59:29:26:12:35:
da:df:6f:1f:43:ea:ef:ae:c0:0a:84:80:35:02:aa:
d1:e5:8f:b5:ea:b6:7d:88:ee:1d:fd:68:83:d2:19:
ce:18:b4:78:c4:50:0d:01:e9:87:f5:43:46:4a:03:
64:6f:83:ef:36:d2:c9:c6:6d:23:fc:20:a8:40:39:
19:3d:1b:a4:ae:17:07:b2:43:76:a9:49:33:07:e1:
6d:39:36:40:0c:89:39:51:10:08:61:63:a3:ee:f8:
e6:35:f7:9d:17:74:18:24:b2:93:b4:fc:06:b6:ba:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:4E:15:A6:E7:75:DD:C5:79:5A:1B:7D:BC:67:63:5F:D4:E7:61
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:0d:b6:6b:85:99:e4:9b:37:a4:32:ba:e7:60:68:96:fa:
b8:f2:ac:f0:8a:7a:c1:12:70:fc:5f:3c:ff:2a:55:eb:cd:12:
a6:56:e9:f9:e5:c7:46:68:48:eb:5c:9f:56:ed:3d:45:51:9a:
9b:9f:5d:74:32:7d:94:fe:e0:98:bf:6f:85:94:fd:d7:f9:19:
17:64:d0:19:93:c7:80:b6:b5:fb:7a:07:6c:6d:2d:aa:6c:be:
5d:7a:69:4b:1b:03:d2:1d:9b:8c:61:12:bc:61:71:9e:4d:0a:
3b:78:8e:74:f6:b1:d5:7a:87:de:1d:cb:6e:93:b4:ce:8d:74:
cd:f2:96:88:d6:26:6e:a8:70:7b:92:fd:8c:d9:f0:24:be:bb:
bd:ef:5e:83:60:7c:db:1b:24:3a:a9:92:8f:b1:fe:e9:55:c3:
3d:5d:14:41:14:df:54:9a:66:04:9c:0c:87:43:9d:02:82:4b:
e5:4c:c0:bc:56:1e:d6:92:e2:d8:4f:38:51:18:15:c3:de:23:
a6:6b:4f:6e:7f:fa:3a:02:61:89:0e:75:54:97:7f:b7:9a:12:
2d:cd:98:2f:a3:26:b1:eb:03:b5:7f:4d:5c:d7:e8:e9:32:e8:
6e:44:b9:0c:df:b8:c5:8b:8e:48:18:c4:db:f0:c1:ec:e1:f8:
03:8c:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:29:05 2026 by rpki-client