Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: j2NP/nQYBvec98lv2PLAp5H54WQywgM/SIezBaIhOgQ=
Subject key identifier: C3:58:D0:0D:85:FC:B8:06:66:B8:3C:AA:19:B4:E8:98:C8:DE:19:4E
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 01A17D730F2C88780E3DDA7D2B977B812746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 1ACB
Signing time: Tue 27 Oct 2026 13:00:54 +0000
Manifest this update: Tue 27 Oct 2026 13:00:54 +0000
Manifest next update: Wed 28 Oct 2026 13:00:54 +0000
Files and hashes: 1: LDYOOwc3ElUwgsoAhX1VAVoDz7A.roa (hash: LnEQSIV2ZJKxc3kP1NpzkPN+GxvmT9Fs9kvIu+YHy1w=)
2: RNoONMgjC7AI9bUiPXHJnoNxdw4.roa (hash: EyX2BbVopJ5hjqPnGfS3gH2lJBH+hCeBYJzhz4A8ggc=)
3: _Kvo8y_R7krVK88kzx8nMzPfxVY.roa (hash: hJFEckwW05pWdYupq2RWtNuX2TmzieG8g1SpfTLtVnQ=)
4: tNl2UUnZ4217WSLfqRDSI0O_BWU.roa (hash: TJsFtOL6bWviF8Z8b9ypqKLo31djdrQdvLmCXkT7uLQ=)
5: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: avloniadW4uHOM+20qTccu8mWUfGAIMSeAyMiwYFzwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:0f:2c:88:78:0e:3d:da:7d:2b:97:7b:81:27:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Oct 27 13:00:54 2026 GMT
Not After : Oct 28 13:00:54 2026 GMT
Subject: CN=c358d00d85fcb80666b83caa19b4e898c8de194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:09:8b:d3:6c:77:76:19:db:b9:e1:12:8e:
a0:fb:56:1a:e9:66:aa:98:91:ab:de:e2:d1:44:5a:
7f:e6:22:e5:c8:13:0e:91:53:24:e3:ea:2c:90:17:
fa:ae:80:3d:c7:9b:5f:d0:ed:05:b2:c6:b3:8b:ca:
13:8d:57:c1:34:30:49:c2:cb:8f:5c:a6:1e:1d:d1:
32:24:5b:88:3b:50:80:a7:f9:32:94:be:69:db:5d:
30:f4:28:3c:df:ec:15:05:eb:c6:34:29:b3:ca:05:
a2:72:15:74:65:de:dc:23:03:42:8a:cb:4c:b5:de:
32:56:61:3b:18:12:9c:ba:24:db:e9:41:c9:33:5d:
2c:92:32:6c:0c:d5:bc:ec:60:ba:ac:f1:87:85:83:
a3:3e:e0:16:fb:b7:f3:8f:3f:2d:cd:bd:87:e5:9c:
a7:7e:26:74:53:44:6a:22:f2:71:20:83:b0:59:bc:
8a:73:f4:d1:66:fc:c0:d2:77:62:7f:23:6f:74:93:
b6:82:11:dc:c8:d8:15:d4:ad:9c:cd:c6:83:17:00:
6e:e4:fb:0d:2b:6c:c6:30:e9:af:4d:0e:b0:f0:68:
6d:d0:79:48:67:3b:80:0d:10:30:9f:d0:67:3c:d0:
c2:08:5e:6c:51:c8:da:0d:01:0e:64:07:cb:12:85:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:D0:0D:85:FC:B8:06:66:B8:3C:AA:19:B4:E8:98:C8:DE:19:4E
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:25:8c:11:b2:cb:ea:7e:37:a7:92:07:b2:98:39:a6:0a:
a9:d4:e7:ba:74:c7:a9:9e:5d:67:8a:d5:2f:60:5f:b5:1d:45:
af:40:63:b3:c1:91:2d:b3:6a:d0:ae:8d:00:c4:66:5d:21:be:
5d:cd:8c:50:b5:46:f7:e8:f9:c4:cb:4c:3b:c4:fc:17:55:96:
22:72:f8:76:c9:2d:4e:24:96:27:06:77:12:a7:a6:5a:b7:93:
a6:52:b6:8e:c9:c2:df:01:49:53:15:01:95:34:f8:82:84:69:
a6:6f:b6:17:5a:0b:25:6f:e2:9a:ec:c3:7f:eb:07:f7:64:3d:
85:2e:73:bd:ce:e4:c0:c4:a9:23:10:41:d6:04:6a:04:07:1c:
9b:c8:5b:c2:70:4f:52:1c:59:9f:b8:c1:9b:32:e8:88:fb:58:
4b:bf:60:c6:e8:15:1a:64:62:64:10:b7:3f:59:97:f2:08:59:
b1:af:81:82:f6:3f:a7:95:76:77:c5:22:0e:3b:ef:af:2e:26:
89:ad:54:71:5e:59:9d:32:bb:c9:a3:79:20:ea:fc:07:02:d7:
a4:bb:86:c1:c9:2e:5c:bd:79:81:fa:74:06:fd:18:e8:53:a5:
b4:d9:fe:b2:47:54:07:a0:dc:34:ed:1a:98:7f:07:a6:9b:66:
3f:19:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:42:10 2026 by rpki-client