Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: me8jdHP03QM82YDwUwa6nHb5m9cl2QmjF4e9TJhXdX8=
Subject key identifier: E9:CF:EF:E5:E6:04:E5:9D:55:01:C4:A2:07:1F:11:B1:B4:9D:B6:43
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019DA3783484F246956C5EA13914455A5027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 1252
Signing time: Sun 19 Apr 2026 02:00:57 +0000
Manifest this update: Sun 19 Apr 2026 02:00:57 +0000
Manifest next update: Mon 20 Apr 2026 02:00:57 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: 2Ky+GQxY22n8zhA+tIeGUdwCZJ69Cmec7enF6HBhLig=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:34:84:f2:46:95:6c:5e:a1:39:14:45:5a:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Apr 19 02:00:57 2026 GMT
Not After : Apr 20 02:00:57 2026 GMT
Subject: CN=e9cfefe5e604e59d5501c4a2071f11b1b49db643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:8b:36:39:01:56:7e:01:ee:99:6b:7a:fd:
de:eb:c9:cd:5d:63:df:3c:f6:b1:1e:47:62:98:ff:
2b:71:2b:ea:82:56:92:36:df:a0:34:25:c6:0b:2f:
a8:52:a0:fc:9c:25:cc:77:52:c1:b6:b4:1c:7d:2d:
39:44:d5:03:33:88:cc:a3:ec:a6:32:4b:c2:64:e7:
56:ea:21:00:0c:17:c6:08:1c:db:9e:31:17:f9:a8:
49:ed:68:ba:ed:a5:8c:b2:18:64:a9:f5:8e:5f:87:
61:20:2b:c8:4f:06:98:d3:36:43:cd:99:3f:31:c6:
d6:eb:04:fb:3f:0f:0d:80:51:f0:cb:b4:79:5e:b9:
53:45:83:76:05:40:bd:62:33:27:27:d4:5b:f9:70:
33:09:8a:8b:33:ad:96:f1:a7:7f:9f:29:81:28:5e:
52:f8:2c:8f:2a:ab:a6:d2:14:89:9c:1a:ec:1e:03:
b1:19:d2:86:70:9d:40:d0:f2:e2:c2:eb:84:8d:72:
de:65:4e:0e:04:2a:54:21:1b:8c:cb:ba:57:2e:a9:
c9:86:3c:36:93:f7:da:76:19:e6:c1:52:c1:88:b0:
96:0f:ad:5a:cc:c9:0d:5c:8b:b6:ea:66:3d:32:45:
b0:1b:1a:80:3c:a3:0d:59:bd:9a:d3:05:e4:ed:b0:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:EF:E5:E6:04:E5:9D:55:01:C4:A2:07:1F:11:B1:B4:9D:B6:43
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:36:63:53:db:5d:07:81:18:74:b1:7b:05:32:62:c0:0b:
4a:0b:c4:fe:32:fe:0c:48:79:fe:fd:90:5b:df:68:32:59:00:
0c:b4:da:9e:c9:cf:78:49:c2:fd:09:b5:3a:56:29:85:24:bd:
da:03:54:2f:4a:af:a1:ed:fc:07:cc:e1:0c:9c:e4:68:39:c3:
21:c4:b4:5f:8a:1b:16:af:58:1c:43:ba:36:74:2a:04:20:e9:
8f:3e:6b:51:f6:43:3b:7e:ef:55:45:0f:e9:3e:13:91:6b:7f:
bd:b2:6f:4b:6b:55:94:6b:ec:03:25:75:de:52:77:dd:b8:30:
f4:fb:1c:15:18:e6:c7:f7:fd:40:f7:d6:66:50:27:6d:00:75:
a0:5a:31:dd:8e:9e:59:d4:2d:47:10:cc:93:6a:e7:0c:79:a6:
a0:3b:0f:02:38:5a:3d:49:ac:69:19:19:db:71:84:40:af:a2:
92:7e:eb:b7:4f:8b:58:3b:81:d8:14:b4:a9:bd:8d:e1:c0:7e:
84:1c:f6:a3:85:43:53:77:ae:6b:ea:f7:2a:79:2c:1a:82:f7:
61:70:54:f8:8c:26:ed:6f:01:66:f1:bc:54:1e:66:1e:4c:19:
be:bd:0e:30:18:f3:b6:0f:9c:47:0e:da:2a:99:47:30:08:51:
f0:c8:38:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeDSE8kaVbF6hORRFWlAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2
MTcxMTUwHhcNMjYwNDE5MDIwMDU3WhcNMjYwNDIwMDIwMDU3WjAzMTEwLwYDVQQD
EyhlOWNmZWZlNWU2MDRlNTlkNTUwMWM0YTIwNzFmMTFiMWI0OWRiNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJyLNjkBVn4B7plrev3e68nNXWPf
PPaxHkdimP8rcSvqglaSNt+gNCXGCy+oUqD8nCXMd1LBtrQcfS05RNUDM4jMo+ym
MkvCZOdW6iEADBfGCBzbnjEX+ahJ7Wi67aWMshhkqfWOX4dhICvITwaY0zZDzZk/
McbW6wT7Pw8NgFHwy7R5XrlTRYN2BUC9YjMnJ9Rb+XAzCYqLM62W8ad/nymBKF5S
+CyPKqum0hSJnBrsHgOxGdKGcJ1A0PLiwuuEjXLeZU4OBCpUIRuMy7pXLqnJhjw2
k/fadhnmwVLBiLCWD61azMkNXIu26mY9MkWwGxqAPKMNWb2a0wXk7bCHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnP7+XmBOWdVQHEogcfEbG0nbZDMB8GA1UdIwQY
MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt
ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4
LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoag2Y1Pb
XQeBGHSxewUyYsALSgvE/jL+DEh5/v2QW99oMlkADLTansnPeEnC/Qm1OlYphSS9
2gNUL0qvoe38B8zhDJzkaDnDIcS0X4obFq9YHEO6NnQqBCDpjz5rUfZDO37vVUUP
6T4TkWt/vbJvS2tVlGvsAyV13lJ33bgw9PscFRjmx/f9QPfWZlAnbQB1oFox3Y6e
WdQtRxDMk2rnDHmmoDsPAjhaPUmsaRkZ23GEQK+ikn7rt0+LWDuB2BS0qb2N4cB+
hBz2o4VDU3eua+r3KnksGoL3YXBU+Iwm7W8BZvG8VB5mHkwZvr0OMBjztg+cRw7a
KplHMAhR8Mg4jw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:57 2026 by rpki-client