Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: 7kkSGEBN6vce+C8M6eWLL5dm+MV3/sdPw5xshHKGx1A=
Subject key identifier: 90:75:D7:F4:5A:EE:6E:36:71:3A:CA:F8:95:84:DA:29:CB:62:B8:45
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019DA453973F38B7E13DE375A9910A782314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 103F
Signing time: Sun 19 Apr 2026 06:00:34 +0000
Manifest this update: Sun 19 Apr 2026 06:00:34 +0000
Manifest next update: Mon 20 Apr 2026 06:00:34 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: NJGaSDt4gFLeDLRx/J5g+Z1VQ4LR4k4LHAct6SNxMcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:97:3f:38:b7:e1:3d:e3:75:a9:91:0a:78:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Apr 19 06:00:34 2026 GMT
Not After : Apr 20 06:00:34 2026 GMT
Subject: CN=9075d7f45aee6e36713acaf89584da29cb62b845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:81:1d:70:fe:27:ef:31:7f:6b:8a:6d:6b:
77:14:45:06:35:fb:cf:5f:5f:28:28:2c:70:de:68:
bd:cc:c7:6d:4a:f3:3c:e0:34:59:7d:d8:b4:16:6e:
08:e2:e2:46:ac:63:33:82:86:ab:e7:4c:91:5b:6b:
34:78:67:8b:4b:57:25:37:6f:69:0e:25:a0:8b:a8:
ba:54:99:38:eb:13:ff:2e:5b:c9:e5:f9:b2:69:a8:
d4:d7:4e:b3:3e:58:e5:d5:bc:70:60:3e:c7:6a:e3:
20:91:8e:ae:01:c1:e4:98:08:f6:be:40:49:d7:de:
40:8f:20:f8:59:23:a4:6d:c1:6f:e7:61:51:0f:97:
98:8e:6a:8f:70:22:57:f4:6d:56:da:26:7e:fc:e0:
9b:bd:90:ec:02:6c:4f:b6:f6:45:ff:53:e7:ae:6a:
e1:71:68:63:36:03:ae:f3:e3:62:13:22:90:3e:a8:
f0:1b:f0:4e:2c:ce:63:1a:5c:6c:bb:1d:db:ae:dd:
af:c7:9e:63:66:c1:ca:25:cf:1b:a1:5c:9d:19:7b:
19:84:71:be:02:43:2f:7b:63:0f:53:14:eb:12:58:
17:7e:67:77:ff:f3:f6:57:0b:17:74:63:26:32:94:
0c:a0:41:8f:60:4c:a8:b8:cb:1c:06:22:ba:eb:95:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:D7:F4:5A:EE:6E:36:71:3A:CA:F8:95:84:DA:29:CB:62:B8:45
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:86:6e:7c:16:38:af:75:62:b4:ce:5b:9a:fc:2a:24:36:
dd:0b:9a:17:de:2f:6c:01:1f:be:3c:c7:b4:9a:d1:d3:bd:52:
cf:e2:f3:26:93:06:fe:2c:22:e1:e4:c5:05:d6:50:b5:98:56:
44:3b:1b:fa:59:76:56:18:f6:7b:04:94:ce:41:ea:27:f7:5c:
89:d1:51:bd:2c:ba:36:9d:a2:d1:aa:ce:17:c5:15:ad:b9:88:
62:a4:3c:05:f7:58:d5:5a:93:5a:3a:68:eb:96:67:e3:f1:bb:
7c:30:95:d4:c6:05:9b:ca:3e:57:f1:01:6e:01:d1:44:12:aa:
53:d0:c4:83:8b:cd:0d:10:0e:54:47:fc:b9:e8:59:a9:d2:e2:
d7:ca:40:db:5b:ac:97:65:54:51:9f:81:2a:ff:fe:1c:ac:63:
b9:a9:f3:54:08:2d:88:a6:67:3e:08:97:62:4f:3a:28:30:e5:
a4:b4:7a:f7:bd:98:77:5d:85:50:69:e2:8c:80:1d:26:4f:be:
bc:44:cc:91:e3:ff:a8:48:a6:ec:60:36:a9:4c:a7:1c:ef:50:
bd:6a:47:ef:19:2e:b1:ef:58:54:4a:1a:7b:30:cb:73:df:be:
b3:e2:2d:a1:1f:47:b3:59:95:28:47:eb:eb:61:af:e4:9a:15:
88:5e:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:51 2026 by rpki-client