Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: Yka+wXsOtRtNYIC8spVBx86EwXrILQ8ZAlIl1J/DqVY=
Subject key identifier: 0B:A1:94:3D:24:48:13:88:AE:CC:B0:D4:56:17:12:4C:72:10:EE:70
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019E303BBFF3718947ED1FD0D94E71FBB9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 140F
Signing time: Sat 16 May 2026 10:01:22 +0000
Manifest this update: Sat 16 May 2026 10:01:22 +0000
Manifest next update: Sun 17 May 2026 10:01:22 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: GEOGbxKgQRBW/EQPvA6d0xcazOhtVoNFWD/fWsqzYp4=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:bf:f3:71:89:47:ed:1f:d0:d9:4e:71:fb:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: May 16 10:01:22 2026 GMT
Not After : May 17 10:01:22 2026 GMT
Subject: CN=0ba1943d24481388aeccb0d45617124c7210ee70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:54:95:d7:f2:91:53:53:af:2d:f0:01:f7:
4f:d3:82:e3:df:53:1f:3e:44:2e:8a:b5:18:48:2f:
f1:22:d1:34:81:d9:ff:61:9e:cb:47:5e:ea:97:6e:
f6:65:c6:86:43:92:0b:af:dd:ac:08:6d:a1:f7:7d:
5f:f7:23:63:3e:84:bc:40:94:2a:34:38:49:fd:71:
4b:78:b4:ed:08:04:b5:09:28:19:60:67:55:07:ea:
9d:79:1c:1f:5d:eb:cb:01:38:66:00:8b:9d:0c:7e:
d4:d7:72:33:70:a3:5a:55:a3:88:73:8c:90:c8:cf:
3d:d2:e0:c1:4e:38:65:e1:bb:cd:b1:4a:ad:dc:8c:
75:0c:28:2e:eb:10:d2:a5:5c:b3:7a:f1:ea:0a:d5:
13:fc:e0:e5:86:02:e9:d8:93:17:34:ff:6a:4f:2e:
9d:20:92:56:42:07:32:65:5f:2f:14:a3:ee:28:fd:
80:6b:d9:83:bc:bc:4a:2a:25:b3:06:57:da:23:73:
b2:c5:75:47:ac:43:4d:05:d1:42:92:11:e7:c7:8b:
33:52:8a:87:6d:22:90:ba:a9:4f:de:11:cb:b0:ed:
76:a0:af:ad:ba:65:13:04:d1:a4:8d:99:d4:aa:7f:
b9:1d:e5:3b:a6:fe:4d:cb:0f:ff:ca:5a:9a:cf:98:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:94:3D:24:48:13:88:AE:CC:B0:D4:56:17:12:4C:72:10:EE:70
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:1a:c1:b0:24:11:bd:90:68:81:77:d4:99:17:54:b3:20:
9f:5d:21:97:1f:eb:92:df:01:17:0b:8b:05:24:43:10:e5:14:
73:3f:38:2d:37:b8:c7:aa:7e:18:a7:1b:53:e8:39:4e:41:38:
f2:f3:95:a5:7e:60:83:d4:da:92:d7:f7:0c:47:ed:e1:a5:af:
ea:64:bb:5a:ad:20:4e:c4:57:46:43:09:33:52:40:22:d8:00:
5d:d7:d5:8f:57:40:d8:86:5b:02:f9:a9:e5:6d:29:48:25:d1:
5b:23:78:af:c9:0c:1c:1b:c0:97:29:1a:bb:fe:43:02:2d:88:
d5:49:2b:3d:5b:fc:28:ec:92:d0:df:f5:d5:a0:cb:a3:20:4f:
d8:8d:c6:58:89:61:eb:6c:04:c0:39:33:7d:eb:42:0b:ca:00:
8f:28:6f:f9:fd:6d:51:3e:64:7e:df:1f:88:6f:49:30:5e:7a:
4b:f0:e6:2c:1d:bd:79:8c:29:50:c3:a5:da:d9:bf:54:2a:84:
91:30:87:fa:f7:de:8d:14:86:23:49:dd:09:4f:85:e9:00:c3:
7c:15:61:16:d4:5d:49:6a:c2:7e:16:67:cf:02:07:e3:9b:8a:
6a:77:30:df:30:2e:30:0b:d4:94:a1:bd:cb:59:19:d8:31:05:
64:3d:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:43 2026 by rpki-client