Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: tH6FCl1IXgeE9z8mVQap4gSXE9hogr/p90fTwb7a/Dc=
Subject key identifier: B7:BE:4F:9C:12:0C:26:81:CF:85:15:A6:D5:6B:F0:48:B6:0C:2F:BF
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019D390A0413CB07A02ADF4A158F1FB42166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 1790
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: F5kVaS9YOf/o9ugep2FSv1u4JOCQh5TGky0BTWrhabE=)
2: sj7z-OE7wtWIbAsLlk0f8070JJA.roa (hash: fCvU62phFkPvYGJbKu7jFDsWbZSEAX8kQ2AkhH7Ekk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:04:13:cb:07:a0:2a:df:4a:15:8f:1f:b4:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=b7be4f9c120c2681cf8515a6d56bf048b60c2fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:51:09:44:ba:44:bb:5c:cc:b0:6e:3a:98:
11:8a:8d:e6:db:ae:f1:7c:5f:78:67:84:bd:61:7a:
1c:f6:d1:78:8d:88:2d:34:71:5d:50:35:72:f8:ec:
61:c9:6e:71:e8:05:c1:5e:ea:93:f1:02:ef:82:9a:
1c:0b:84:d3:a1:18:b0:21:c2:c5:09:9f:4a:43:54:
72:fc:74:93:dc:3c:95:64:87:b8:1d:f8:c0:b7:6b:
7d:28:54:0c:71:ef:ef:70:b2:fc:7f:78:29:8d:6d:
14:44:1e:d5:9e:6f:fc:b8:6b:2a:19:a0:46:5d:19:
e9:a5:d2:3f:13:13:a5:a0:3c:f9:e8:d8:eb:5a:6a:
1e:96:f6:49:7c:2f:4f:3e:d7:be:ea:88:a2:21:64:
a4:6c:97:4c:5c:0a:bf:c9:60:2c:f2:87:10:4d:74:
ac:99:79:a6:88:44:51:a8:d9:bc:99:fe:1e:cd:a9:
2c:3e:f3:3f:5d:e5:77:8a:c6:dc:6d:54:36:73:a9:
f7:cc:74:b1:08:b6:a1:2a:38:9e:cf:bf:56:32:22:
46:ae:a4:aa:7f:ad:18:ea:43:f5:b2:37:3c:6e:ab:
30:cf:a1:71:6d:d4:5b:20:4f:ce:47:7e:b9:ea:b3:
c2:58:2b:14:ab:2a:94:09:cb:f4:cf:24:8f:6a:0d:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:4F:9C:12:0C:26:81:CF:85:15:A6:D5:6B:F0:48:B6:0C:2F:BF
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:82:a5:1e:53:42:fc:fa:ed:44:bc:db:3d:9d:4e:a4:96:68:
3a:86:1a:fd:55:17:a1:7b:3b:58:c1:c7:d6:04:f8:d7:82:ff:
5d:59:a7:29:2d:34:8e:91:ac:37:09:db:f6:c9:44:6c:d2:c4:
37:bc:c6:38:9f:f9:5b:9b:27:60:b7:37:04:b5:7e:8c:1e:ea:
cb:7d:ee:fc:9f:7f:3a:8a:90:9a:be:fa:78:ad:15:7f:e9:0c:
39:5c:5a:50:0d:16:31:0b:1f:36:74:85:3c:ef:04:80:e2:63:
d0:4a:13:e3:ed:27:65:dd:01:e0:7d:a3:fb:e2:5e:9d:eb:a1:
c4:ff:35:87:07:7f:ec:1c:a5:1f:e9:86:74:5c:b4:ba:f3:4c:
01:2a:5b:be:bd:d8:85:54:9c:ca:70:e1:4d:16:fc:23:df:df:
68:a0:ea:b4:e8:d0:2d:07:f1:74:6e:8a:42:fb:32:e9:bc:8a:
e3:2b:3d:e7:07:49:8a:b3:55:24:65:9b:a7:eb:18:7d:b2:fd:
22:be:ab:6e:b1:57:d0:56:34:9d:68:f7:b0:de:48:c7:54:70:
3f:4f:da:34:84:99:c2:a2:69:6f:a1:85:29:46:13:32:89:e9:
92:49:3a:22:ec:46:32:20:a2:ea:54:55:31:c5:b9:81:94:89:
c8:ee:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:07 2026 by rpki-client