Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: bAP2qAiWWSNlwJkEF9ATvIz4XeHBa/H0+qzn5jTA3uQ=
Subject key identifier: 56:1F:1D:5C:03:68:C5:77:13:65:ED:11:30:EC:2E:45:8F:3A:95:90
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 019FABD1163E1F790C5F3D4B2ED5067D7BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 114C
Signing time: Wed 29 Jul 2026 03:00:34 +0000
Manifest this update: Wed 29 Jul 2026 03:00:34 +0000
Manifest next update: Thu 30 Jul 2026 03:00:34 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: QG2dxt088pYPeauJ3Ra+4OctDAJaxutGAosaVSxUXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:16:3e:1f:79:0c:5f:3d:4b:2e:d5:06:7d:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jul 29 03:00:34 2026 GMT
Not After : Jul 30 03:00:34 2026 GMT
Subject: CN=561f1d5c0368c5771365ed1130ec2e458f3a9590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:d1:8b:0b:fc:cc:3e:d8:3d:4c:17:18:43:
25:aa:78:0d:03:cf:f7:2e:0c:d8:32:a9:50:bb:e9:
8d:8f:90:d1:01:6e:8a:01:34:52:46:89:c3:c1:6a:
3f:98:da:cc:bf:9c:d7:a1:15:51:3a:01:17:48:03:
19:b3:f9:de:51:09:c0:73:de:58:ca:fb:e3:58:6b:
82:b7:0d:a7:c2:70:31:aa:b2:a0:88:10:e6:18:96:
05:fc:4b:49:7a:7c:67:43:31:48:ed:af:52:f6:8f:
eb:b9:2b:55:90:1e:2c:69:de:d6:8f:6c:f2:38:e9:
5e:fc:e7:c1:4f:43:c5:3f:d8:ca:27:7b:97:eb:79:
53:41:c2:60:7a:17:57:7c:51:38:f4:7a:43:c6:77:
4d:af:7b:82:4a:ac:e3:02:05:b8:9e:04:04:78:fc:
98:d7:e5:68:14:cc:7d:0e:bd:bf:cf:48:7d:57:7c:
41:d2:2f:00:83:fc:47:da:1c:5a:86:54:93:94:07:
4d:60:66:c3:63:a8:03:66:60:68:39:01:ed:94:de:
15:e0:81:bb:a3:9d:2c:84:ea:3f:7d:40:93:75:53:
84:08:13:6d:5f:12:d2:ea:97:d4:fc:a1:b2:e8:97:
82:fa:c2:af:80:55:c8:2f:af:4a:b5:e6:b0:4f:fc:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1F:1D:5C:03:68:C5:77:13:65:ED:11:30:EC:2E:45:8F:3A:95:90
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e5:cf:5b:aa:1e:fb:51:fd:99:b1:72:0a:f0:68:e6:eb:92:
f2:4b:cd:9e:94:49:58:13:11:10:5d:84:c8:83:26:49:4e:0e:
19:12:d0:6f:70:7f:e8:de:db:92:71:35:62:e5:13:06:68:af:
65:9f:47:4b:31:9f:85:5b:84:bd:d9:99:d7:00:68:09:58:e4:
58:8e:69:57:3e:63:5c:65:78:ef:6b:9a:33:c9:8d:39:ef:a0:
c5:0a:6f:3a:a2:47:15:7a:fe:a4:fe:3d:9b:80:c8:14:d2:4a:
bd:cb:a2:eb:94:29:fb:1a:de:31:9d:b1:e8:d4:bf:0f:7b:ee:
52:c1:fa:ba:9a:f8:77:ed:32:fb:14:7d:ed:8c:ca:b9:22:6b:
1b:b5:41:3b:e6:f6:06:fd:33:3a:38:f3:f7:97:52:be:7c:60:
b3:7f:f8:87:4a:a0:13:1f:18:3a:e3:c3:5a:fb:e2:ed:23:a8:
84:71:07:1c:de:db:2f:d4:b1:e8:a8:d3:9b:08:f5:74:69:f5:
e8:3f:ef:26:ee:93:86:ce:f8:b1:a5:33:92:70:71:79:05:fd:
60:1b:90:da:23:f1:75:0d:2c:81:cc:1d:cd:b4:5c:0e:56:97:
00:35:d9:0c:10:19:da:3e:fa:b1:f6:ce:34:95:28:a7:0f:ec:
3f:03:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:26 2026 by rpki-client