Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: MUQmjL6RiLCAhJTnj84q0UFSOhBU6uRu6TclQNwNwbU=
Subject key identifier: 61:88:01:C2:A5:F7:11:1F:5B:5D:CF:9B:E8:6A:16:4B:7A:84:30:42
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A1434CBDE807CC53F44777393AB8FF081B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 121F
Signing time: Fri 16 Oct 2026 06:01:05 +0000
Manifest this update: Fri 16 Oct 2026 06:01:05 +0000
Manifest next update: Sat 17 Oct 2026 06:01:05 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: GfxEMFXzRTHCHSY8b2iK+MSCL9N2AIRPtDzUxFeC0bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:4c:bd:e8:07:cc:53:f4:47:77:39:3a:b8:ff:08:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Oct 16 06:01:05 2026 GMT
Not After : Oct 17 06:01:05 2026 GMT
Subject: CN=618801c2a5f7111f5b5dcf9be86a164b7a843042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:3d:d0:ac:67:15:19:9a:64:e4:75:a2:80:
7a:de:74:04:7c:79:5f:d4:e3:72:ae:36:bb:18:93:
f5:37:e6:8d:60:63:af:5e:98:b1:26:2e:46:0b:98:
dc:2a:75:4b:8e:b1:9d:27:30:95:33:35:04:09:e2:
20:82:30:c3:f3:e5:f0:c5:96:fe:59:25:85:a2:0f:
fb:31:f5:59:d7:12:2d:f8:b6:f6:05:da:da:f6:d0:
ac:c2:29:ec:3c:93:f0:3a:f8:44:af:9e:7a:af:3f:
26:cf:a2:43:aa:f8:d9:7a:00:d4:94:b3:57:cc:33:
09:a4:b1:99:01:ba:ae:7a:cd:63:bc:18:a6:5f:13:
a7:ca:6e:8a:98:4d:ba:39:f2:4c:b8:af:65:9b:1a:
9c:07:1e:40:d4:e9:17:a3:dd:5f:91:2d:20:33:20:
63:81:ab:64:49:2f:60:48:f6:0e:ac:10:5e:f2:46:
a5:24:e7:50:9b:ed:d2:43:e8:52:64:b2:b1:b4:fc:
a1:33:2d:16:78:22:fb:dc:63:24:b6:4d:5b:96:fd:
d1:a3:76:48:2d:83:2c:eb:97:8f:b1:ac:ab:e6:30:
2c:8f:8b:2d:ee:26:bb:75:46:0f:e2:9a:8e:60:05:
13:85:3c:2e:b3:cf:40:c4:88:54:1b:09:9b:a8:fb:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:01:C2:A5:F7:11:1F:5B:5D:CF:9B:E8:6A:16:4B:7A:84:30:42
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:d3:22:0c:d9:2d:2d:0b:37:b4:0b:cf:cf:91:ce:39:54:
c6:22:43:bf:c1:51:55:1f:b6:8c:1b:f2:99:c4:20:26:ff:f3:
af:bf:e1:9d:d3:21:03:00:49:10:5d:22:b5:c9:44:aa:5a:e6:
97:1b:9a:05:96:83:9a:93:4e:d3:9e:33:3d:2a:5b:24:17:9a:
ea:c8:67:62:e9:b9:12:bf:59:c7:67:5d:63:92:dc:d6:63:17:
05:5a:d4:e7:49:73:10:4e:8d:db:db:68:57:0f:44:24:d4:99:
87:c4:03:3b:b1:ae:8b:8f:4b:5d:a0:49:ca:26:e8:c3:ce:7d:
52:60:cf:0a:d5:3a:a5:7b:3b:12:0a:09:ee:37:4a:21:ca:84:
b5:31:7d:a6:7d:5b:51:75:10:30:1a:ae:f3:77:56:e6:d1:c4:
f3:91:98:67:0c:b1:b2:3e:16:2f:31:c6:dc:48:4d:79:40:37:
73:ad:3a:4d:b1:04:7f:74:d8:78:b2:8d:c7:d3:45:4f:36:1e:
fc:44:80:e2:b9:de:5f:30:23:e5:97:88:34:2f:8e:15:a6:44:
50:10:db:78:b2:d0:50:0a:b9:67:4e:3e:7a:d9:f3:37:ab:15:
fd:b2:61:11:fc:84:89:14:93:f6:25:05:7b:6d:e5:c5:05:e5:
9d:3e:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:26:55 2026 by rpki-client