Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: GsmWvhpf0G8HsjxghIrpT7nCsbTmiGTn7aj7Ce5aEuk=
Subject key identifier: 46:C1:1C:A7:BA:1A:4F:54:7B:0E:AF:AE:A9:44:20:62:4A:07:15:FB
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019D371B892C3DBAA9A8C484467A79675F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 138E
Signing time: Sun 29 Mar 2026 01:00:44 +0000
Manifest this update: Sun 29 Mar 2026 01:00:44 +0000
Manifest next update: Mon 30 Mar 2026 01:00:44 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: 26o9nZn2BzLys7xT9VlYQkJtCrRKUez9c2U6CrE02ug=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:89:2c:3d:ba:a9:a8:c4:84:46:7a:79:67:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Mar 29 01:00:44 2026 GMT
Not After : Mar 30 01:00:44 2026 GMT
Subject: CN=46c11ca7ba1a4f547b0eafaea94420624a0715fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:01:02:fb:71:7a:e4:f9:20:cf:5f:ee:6f:
1a:de:a5:1c:ea:2f:74:b4:1f:e1:92:c5:d2:02:c2:
87:fb:77:cf:31:a3:c6:65:71:11:5c:59:48:fa:2c:
aa:dc:f6:d4:35:78:97:63:24:11:ea:3d:81:71:2b:
30:10:ab:f2:86:fd:d7:b7:c0:c6:49:45:a6:b2:6f:
7a:ee:21:c8:87:e6:6d:ff:8a:2d:7a:d6:f8:8b:c9:
14:7f:86:f9:4c:1b:e1:23:f3:fc:ac:dd:2c:f6:f2:
23:fc:93:65:96:bc:1d:3d:7e:6d:ec:7e:cb:b6:7b:
84:c6:4f:8b:60:49:25:ac:d4:90:fd:f4:81:56:7c:
6d:16:f7:21:38:42:b7:f1:5c:be:1d:bc:2a:ac:38:
b7:51:66:24:e3:c5:32:1c:89:44:03:74:3b:30:d6:
81:25:2d:e1:b2:9a:3c:25:fe:d4:20:e5:bf:f9:ee:
73:25:3e:6f:ca:a9:83:bd:55:1a:a4:37:1e:5a:dd:
29:84:6c:22:36:8a:3c:be:ee:52:39:55:48:48:b7:
85:fc:df:28:37:6b:f6:b7:27:ea:ae:7c:45:26:ad:
78:41:38:75:fb:ce:c4:e6:84:3d:9f:24:b9:51:e2:
57:35:3d:81:da:9e:69:d8:f0:d6:cd:a0:76:09:4c:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:1C:A7:BA:1A:4F:54:7B:0E:AF:AE:A9:44:20:62:4A:07:15:FB
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:a2:69:79:66:9a:9a:f8:30:72:0f:dd:5d:e9:0c:d2:d8:
5f:dc:b0:01:53:e4:10:ec:f0:de:4b:d1:56:5e:75:a5:a0:d3:
3d:80:97:af:4a:cd:92:30:72:a5:3a:e5:31:f7:9f:5f:ef:52:
ec:a2:b4:03:7a:93:c2:7e:3b:d3:a3:ef:8f:39:49:f9:6c:af:
74:65:4f:d0:8f:b8:0f:56:8e:1d:b0:49:d3:6c:77:1d:29:c8:
09:e3:51:eb:6f:42:6d:27:40:82:84:c7:29:09:84:0a:20:2a:
32:de:54:e3:2e:1a:1d:dc:5b:47:f2:42:01:eb:4a:31:b2:3e:
24:b1:b3:f2:0b:67:f7:c8:a9:f2:dc:14:cf:74:2a:a3:e3:30:
db:3b:70:57:ec:82:27:74:03:c0:f8:4f:11:28:d9:1d:4d:19:
a6:e6:35:96:02:2b:ce:12:a3:25:ce:21:4e:c0:39:43:a4:08:
ee:ad:59:92:05:9a:0b:b8:37:c4:6e:ce:4e:b2:1a:da:b9:d3:
a0:97:92:5d:6b:a3:7d:f9:49:47:e2:1c:81:05:8e:d7:cc:4d:
db:04:bc:6b:66:c3:48:60:9c:4b:05:93:76:6b:e5:6a:02:32:
1b:b4:eb:cc:c2:94:78:13:2d:9a:a1:91:f8:31:b9:b3:03:26:
f6:7a:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:58 2026 by rpki-client