Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: qkgNff0yMLQ75C5ayYKBE9odgppl8e9JUvHSDn71efs=
Subject key identifier: D7:B8:E8:DD:0D:38:FC:10:B9:CD:2F:03:A7:9E:F7:58:93:CA:2C:51
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 01A138C9274DF088A83C81E99C4A7CBF7539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 142D
Signing time: Wed 14 Oct 2026 05:01:09 +0000
Manifest this update: Wed 14 Oct 2026 05:01:09 +0000
Manifest next update: Thu 15 Oct 2026 05:01:09 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: m8/ncXx5fL36ArrtNwEagSSSpmVWni/j4AD/h85g9h4=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:27:4d:f0:88:a8:3c:81:e9:9c:4a:7c:bf:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Oct 14 05:01:09 2026 GMT
Not After : Oct 15 05:01:09 2026 GMT
Subject: CN=d7b8e8dd0d38fc10b9cd2f03a79ef75893ca2c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:79:d7:1b:72:ef:09:3d:48:2d:3a:22:7e:
ba:3b:3d:4f:37:cf:b7:4f:32:1f:e0:20:f6:05:ad:
0e:91:58:30:c0:d3:63:93:a8:6d:71:c3:e4:db:15:
8e:83:d7:9d:9f:24:3e:c8:c6:63:ee:39:94:9d:6b:
7b:0a:5e:f1:6b:c2:90:ea:cc:f0:7a:ea:30:84:38:
ff:f0:fa:97:55:bb:5f:38:f1:29:6a:54:fe:76:53:
53:c9:7a:8e:b7:bb:84:c4:8d:46:67:80:08:a0:0c:
65:6f:1c:15:c6:61:df:81:b5:11:2a:39:09:6c:a8:
bb:d0:0e:c5:b3:a7:f9:85:16:28:2d:11:aa:dc:4d:
db:70:a8:f6:d8:50:5f:0b:c0:62:ce:c0:66:2b:5c:
f0:2b:b9:be:fe:ec:c8:ac:76:99:d2:9c:a0:c0:b9:
38:24:3f:51:b2:63:b4:02:ec:6d:ce:58:d8:39:07:
dd:98:3c:a8:fd:f2:a1:a4:dd:09:bb:07:0f:f0:67:
92:38:73:ec:ce:64:8c:b6:2f:ff:ed:40:43:5c:fe:
a8:00:57:56:f4:63:48:c2:25:e9:92:b6:e8:f2:0c:
21:2d:57:ea:52:fd:34:85:1d:60:d1:a7:b3:9b:0b:
a8:9c:fe:62:4f:de:30:8f:12:0b:fa:d7:2c:0f:35:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:E8:DD:0D:38:FC:10:B9:CD:2F:03:A7:9E:F7:58:93:CA:2C:51
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e7:60:57:cb:56:6e:2c:76:fa:ce:8f:7a:c9:7c:95:81:64:
91:69:ef:cf:32:7d:0a:6b:6b:52:0e:63:76:c1:2f:81:ab:99:
46:73:ba:b1:51:85:5e:76:f8:c2:e8:85:a7:c9:4e:24:b7:b0:
89:ec:7a:1c:a6:40:cc:72:ae:bf:60:de:53:02:d1:ac:15:5d:
56:4b:09:1a:55:ff:e8:c8:ba:f1:21:b7:bb:f0:1f:ba:d2:cd:
59:78:fa:8d:cd:45:b5:67:9a:8c:2d:06:1a:d4:0b:e3:cc:a8:
6e:fc:63:0c:8a:3e:60:bd:7a:4a:a1:3a:ba:f8:a0:98:af:37:
da:64:53:56:bc:b0:d7:a3:27:c7:12:8a:1b:12:ca:d8:64:f6:
08:29:2d:27:5c:ae:fe:d2:7b:84:08:bd:bf:32:5f:cb:8a:9f:
d3:18:78:55:e1:f2:9b:47:29:5a:6c:cb:ab:21:e5:f0:50:d3:
89:f7:0f:c0:d2:1a:82:b4:1a:27:71:3e:28:be:b1:ad:b3:80:
86:c9:70:3f:e0:ad:12:f0:5a:03:a7:0b:8d:fb:76:ab:55:d9:
fe:2f:a6:e1:21:0a:2f:0e:47:bc:58:59:23:41:52:50:6d:4a:
c2:22:15:75:65:62:65:62:8b:b5:dd:42:4c:09:81:4f:23:f8:
8a:d9:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:16 2026 by rpki-client