Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: USkvYTz5oKCY2nIWpkYIGZsng8OFwha+WZc3FDQXzTc=
Subject key identifier: 49:93:5C:76:6B:B7:26:15:1E:5A:A8:48:C6:64:1B:5C:6A:7E:E9:B1
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019CAA589F45E767B8866301CBE0C7A3373E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 11D1
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: QIEJyLMZNR1UPJc66UPCvdEQhlYRYb7ExwZXgbF+tqE=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9f:45:e7:67:b8:86:63:01:cb:e0:c7:a3:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=49935c766bb726151e5aa848c6641b5c6a7ee9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:7d:d8:8d:41:38:2e:cf:ae:39:98:3f:35:
7b:eb:99:c1:f1:6b:9a:a4:69:3b:b4:a6:ba:da:ad:
86:c3:5c:09:72:02:08:24:10:7e:f5:ae:f7:ae:9f:
0d:27:4e:25:b1:e9:c0:e2:b0:0a:f4:1c:78:a1:19:
2b:f2:2e:9e:1a:c0:b9:5c:ec:ab:cd:85:bc:eb:34:
66:3f:d8:12:6d:20:5d:29:80:b9:bb:c5:74:73:4b:
e5:e7:07:52:a7:31:bf:2e:82:68:79:4d:ac:01:3e:
df:60:e0:f8:5f:43:b3:f5:dc:d3:49:29:0b:bc:a7:
de:da:58:65:b5:f2:92:d1:e6:c8:48:64:dc:cf:5f:
52:d3:35:ba:0a:21:cf:87:8e:5e:d7:ca:ae:3c:9c:
d0:df:5a:04:e5:9b:93:21:21:52:13:5c:30:2f:99:
08:d0:e2:29:7d:49:a0:19:64:a3:58:89:19:8c:51:
0c:5a:05:3f:3b:01:3b:34:dc:12:ac:e4:e8:3e:16:
7d:c3:60:f7:87:44:fa:c5:2f:30:88:b8:6a:53:6c:
64:a6:b7:f2:70:ee:a6:27:d6:53:51:95:b5:82:cb:
57:9a:02:75:6b:ad:11:5c:bf:1e:d7:cd:8d:89:80:
ef:43:fc:f2:f7:f5:33:b0:65:4d:fe:ae:f7:0e:b5:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:5C:76:6B:B7:26:15:1E:5A:A8:48:C6:64:1B:5C:6A:7E:E9:B1
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:a2:9f:f7:23:23:fc:8a:0e:53:06:a1:e3:92:33:32:b9:
4a:1d:4b:55:e2:3b:13:c1:4e:0c:8b:fd:c2:73:eb:f8:0d:50:
2b:e9:f7:a1:95:17:6f:66:17:b7:9a:12:96:13:0e:58:bf:f6:
da:d3:aa:c9:31:29:ff:cc:3c:c5:8e:49:ee:7a:0c:5a:3e:3b:
b5:fc:a1:4c:52:2e:d7:9e:2d:e6:35:9b:0c:32:22:b2:52:9a:
5d:3c:28:5b:ac:df:da:10:45:1f:59:c2:9a:c7:d9:ff:c0:30:
bc:b5:28:11:d0:24:16:46:0d:ef:f6:1c:57:11:e0:fb:73:76:
2a:b9:1f:a4:21:c3:08:c4:af:64:22:63:33:ed:e8:c3:bc:eb:
3c:89:6a:3b:c1:aa:4c:ff:21:78:37:1a:2d:0c:0f:23:6c:ca:
64:58:d7:9a:9e:46:0a:14:64:2e:f8:ef:d6:da:cf:ee:7a:38:
54:96:ce:71:db:cd:f6:e1:81:59:57:65:ea:ce:70:13:a8:b3:
5e:66:45:81:a4:e4:b0:97:19:7c:11:43:a3:ce:6e:11:c8:3a:
e0:ad:bc:5f:06:f9:92:53:68:ed:f3:d7:ed:57:15:ce:79:82:
5c:dc:82:92:45:b7:25:75:c1:46:64:06:6f:18:dc:2a:ba:7b:
64:78:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:30 2026 by rpki-client