Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
File: TU0qfS8eqI_7WgMlnLP06o0vVfs.mft (raw, json)
Hash identifier: JUkP3h95v2OWFrGW+jz5DxRkZUcR+tZOGVHcTpiCOlM=
Subject key identifier: D2:D4:2B:05:84:EE:36:79:75:11:F7:7C:EB:99:21:01:41:16:67:61
Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB
Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb
Certificate serial: 019D37F732C161F8E2DF2437001EEB016701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
Manifest number: 013A
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: TU0qfS8eqI_7WgMlnLP06o0vVfs.crl (hash: gPkGHMrUDTU0Dym/yQd+f97PVv2Ph4HhRqQhBKjtsCg=)
2: vBvA5vR33wucy7osTOJ6Y-TO_T4.roa (hash: Hsl3thlnhp1YmvsEG/KFfQjENR51cw3zlC6FxiWsn90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:32:c1:61:f8:e2:df:24:37:00:1e:eb:01:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=d2d42b0584ee36797511f77ceb99210141166761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:14:39:50:a0:f5:d8:b7:74:78:f9:e1:d0:
29:ff:ea:ad:41:b7:14:db:cd:e2:69:08:85:76:d9:
a8:87:82:e8:26:d3:35:2a:e6:87:e8:f8:a9:d8:4e:
ca:a2:c7:28:81:0a:d3:20:de:cf:67:91:6b:c4:6d:
7d:a9:d3:fd:76:ad:ee:cb:fe:b5:f1:2d:ea:f8:b5:
f5:76:12:3b:c0:00:62:55:fb:ef:d3:58:c1:03:c3:
bc:e0:1d:33:e7:f9:be:21:a6:45:59:c4:e1:5b:15:
b6:8b:73:6a:d8:f7:4e:b8:1f:74:08:63:71:8e:a0:
3f:17:34:53:48:f1:10:12:91:83:30:b3:22:20:fb:
75:a1:2f:6e:60:fd:8e:eb:43:76:e8:b1:6d:51:34:
08:71:5a:2e:9f:e4:a9:4a:12:ab:eb:88:4b:51:03:
c7:99:89:17:a7:79:7f:e1:ad:56:81:d5:a8:72:59:
42:c0:61:94:7f:b0:a7:89:b2:83:bc:37:56:f0:dd:
7f:4b:a0:18:cc:b6:c3:c9:c0:3e:a4:58:17:4a:4d:
4e:1f:0f:31:8e:34:6c:80:0f:c5:40:83:28:85:46:
4f:05:9b:5d:56:f5:98:2e:f2:b3:51:fd:65:ce:5d:
9f:4e:13:19:74:2d:e5:23:44:c5:84:a5:aa:95:af:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:2B:05:84:EE:36:79:75:11:F7:7C:EB:99:21:01:41:16:67:61
X509v3 Authority Key Identifier:
keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:cb:19:9a:ac:0a:dc:df:e9:9a:54:95:e6:56:11:cc:5e:
ca:d2:11:05:c2:cc:54:c0:24:9a:8d:f5:be:d5:a9:f1:4b:35:
56:4b:5f:9d:81:87:5f:33:03:07:90:c6:ea:dd:9f:25:92:cd:
7d:59:41:9d:1d:7c:c3:3f:9c:8c:b7:fc:ff:79:01:8b:e0:74:
d6:02:28:1a:08:7f:72:ef:bc:ae:c8:73:d3:ad:b8:e0:44:80:
b5:49:ce:66:6b:7d:70:6b:9d:f3:b9:b0:2f:c0:f3:15:0e:c0:
12:31:d9:be:9e:c0:55:bf:aa:b9:c0:f3:2f:f2:b2:b5:e9:f8:
54:9c:40:33:dd:8f:02:4a:eb:45:2e:1f:2e:69:87:29:02:99:
7f:53:03:1b:78:c2:70:89:db:5f:76:03:74:b4:32:33:e6:0a:
d4:82:5e:cb:28:2b:7d:36:3c:63:d3:99:3f:15:5c:76:5a:0d:
b5:4b:90:92:e0:67:9d:4d:49:57:bb:0b:99:ae:94:05:a8:f2:
32:83:39:a2:dd:6d:23:5a:90:e8:12:00:a5:f5:2f:8f:2c:89:
ab:1e:d6:0f:92:72:6f:8b:63:5c:e2:44:ff:c9:c4:3f:cb:ca:
33:cb:b6:40:3e:6d:bc:38:18:59:a3:dd:fe:3c:87:b5:3d:e2:
c8:f2:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:33 2026 by rpki-client