Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: obobUT8O0BurX7vQYR1u6S8wUQLSK/DEbNh92K8tbkc=
Subject key identifier: EF:C7:D0:42:31:F8:11:55:CC:8F:B7:A9:52:AE:D2:74:2F:72:80:B3
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A1415EF0E15DF940A5BDEAD10EFAA13336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 121E
Signing time: Thu 15 Oct 2026 21:01:43 +0000
Manifest this update: Thu 15 Oct 2026 21:01:43 +0000
Manifest next update: Fri 16 Oct 2026 21:01:43 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: 95CD5TF3pT7FN5W7sVNniy5ZqoaB8tgSFd65FMBesgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:f0:e1:5d:f9:40:a5:bd:ea:d1:0e:fa:a1:33:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Oct 15 21:01:43 2026 GMT
Not After : Oct 16 21:01:43 2026 GMT
Subject: CN=efc7d04231f81155cc8fb7a952aed2742f7280b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:03:1d:53:0c:d8:58:22:d8:bd:5a:98:f3:
b8:0e:c2:4c:96:f2:7e:ec:b1:3f:60:93:35:42:eb:
56:01:30:b2:56:87:09:13:44:1d:9c:00:17:4d:6c:
ef:66:af:2c:89:8d:f7:73:3a:47:e3:69:50:9e:ff:
22:ff:6c:a6:65:76:7e:dc:09:07:b9:bc:70:83:cb:
fd:d7:fe:81:77:f0:89:3c:a4:65:95:cf:0a:6c:1d:
3a:6d:b9:e4:3b:2f:dc:a6:0b:e4:af:e6:04:f7:60:
71:8c:09:01:d6:25:56:71:30:e1:7c:fa:eb:3d:34:
58:7a:45:c5:9d:fa:98:ea:f7:ed:ad:4f:c0:4b:8e:
9f:23:69:7a:a5:5a:b0:4d:83:8c:fd:9e:00:80:0e:
c6:76:67:12:36:3a:a2:0b:c8:fa:68:71:61:10:34:
e7:81:4f:21:9d:46:00:92:5b:99:92:04:fd:47:7b:
98:1a:66:03:59:4a:57:80:cc:69:7b:a6:23:83:39:
f6:01:f9:32:ee:78:65:10:c0:95:8d:18:8d:b5:74:
de:dc:d2:65:b9:f9:15:b9:3e:9e:fd:55:61:97:d0:
91:5b:45:9c:f4:ef:e7:93:8e:4b:ca:6f:4d:13:37:
fc:88:3e:d2:e3:03:6b:2a:04:c6:42:a8:f6:5e:31:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:D0:42:31:F8:11:55:CC:8F:B7:A9:52:AE:D2:74:2F:72:80:B3
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:79:a9:90:21:19:22:7b:a9:06:78:42:b2:3f:8d:fc:6a:
72:4d:2c:da:b9:c9:7b:13:1c:37:4b:1f:2c:e4:8b:e6:af:32:
e0:d5:28:e6:62:25:0d:e3:aa:4f:6f:48:44:41:da:87:e2:25:
de:ea:96:6a:72:49:0e:19:be:fb:d1:a2:66:4f:98:f3:fc:03:
b4:ff:3b:b0:84:af:cf:53:6c:8b:c0:d6:61:c5:04:a8:75:0c:
6d:d4:71:5f:f4:5c:1c:fc:5b:21:13:24:7b:8c:1c:97:0d:65:
04:b1:69:0e:8b:d1:f1:4b:3f:0a:97:5c:b0:e2:1e:a0:d0:a3:
de:12:fb:12:e8:89:a6:4e:bf:85:ea:f1:84:52:a2:16:b3:f8:
92:d4:6c:36:46:0d:08:4a:ff:f6:2b:0a:87:dc:7f:d4:4b:fd:
a2:ac:23:70:4b:80:78:3f:8e:37:30:b5:44:01:34:02:1e:56:
ae:1c:af:74:fd:b4:5e:1f:d9:4e:27:35:56:a0:3f:50:c6:60:
c4:7e:9a:0e:ae:4b:53:94:60:0e:4b:ee:ad:fb:24:07:7a:5d:
03:62:6b:b3:71:46:54:39:77:d1:ed:75:d3:17:0e:d1:6b:52:
08:3b:61:00:93:4c:77:54:2d:fd:d8:4f:a5:d5:8e:db:09:9d:
dc:dc:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:25:59 2026 by rpki-client