Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: higVnm/NMaGG5rolXeF/Vj6HUJdg6280WhxcTnnnqMU=
Subject key identifier: 88:B6:16:08:98:96:67:27:ED:F1:07:95:4C:FA:4D:E2:53:7F:E8:DA
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019EC336F0C3A6A3B2F8C132C13647CCAEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 12E7
Signing time: Sat 13 Jun 2026 23:00:18 +0000
Manifest this update: Sat 13 Jun 2026 23:00:18 +0000
Manifest next update: Sun 14 Jun 2026 23:00:18 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: worWnhiA1X1V6sfoIuBPV/rivvHMwCBSjSk3Ju6djjI=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:f0:c3:a6:a3:b2:f8:c1:32:c1:36:47:cc:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jun 13 23:00:18 2026 GMT
Not After : Jun 14 23:00:18 2026 GMT
Subject: CN=88b6160898966727edf107954cfa4de2537fe8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:2b:86:19:a2:7d:1b:a8:27:81:55:c9:22:
7e:87:bc:12:4a:44:3b:a6:97:40:e9:8e:b5:24:2a:
ae:3a:d5:51:16:d7:0c:de:fc:8e:9b:d9:eb:71:45:
77:98:21:c3:1e:69:6b:a6:21:2e:0b:a3:d8:57:f0:
cf:21:8c:73:d7:bb:f0:3f:4e:34:22:5e:92:a1:02:
1d:d8:fb:3d:58:6d:12:a1:45:47:6e:49:e2:01:ad:
a0:5d:81:48:bd:0e:35:91:1f:32:cd:3e:49:f6:52:
55:95:a9:e4:17:7b:a7:61:7a:3f:96:9b:5d:51:a5:
61:15:4c:19:dd:44:75:78:87:69:55:72:86:86:b8:
46:7a:e5:73:c8:d6:c7:35:59:6d:7d:62:7e:12:6d:
d9:8f:2a:8d:c0:77:da:6b:9b:fc:b2:e2:12:5f:92:
68:c6:8e:d0:40:c0:9d:bf:62:aa:12:0c:2e:b5:16:
83:4c:e0:36:09:84:02:06:f8:cf:fe:a9:c4:79:a0:
61:ac:de:2f:d2:15:b1:c6:19:08:b3:ca:cf:ab:3a:
0a:e2:5c:f7:25:4d:a9:eb:73:58:00:cc:9b:36:a9:
83:1f:de:30:05:4a:35:93:79:5b:99:51:4d:78:b0:
70:b6:17:e5:97:de:d7:46:03:d6:5f:5f:9e:73:2e:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:16:08:98:96:67:27:ED:F1:07:95:4C:FA:4D:E2:53:7F:E8:DA
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9a:27:8c:ae:10:3a:76:cb:09:b7:c8:6b:6d:dd:8a:4a:e6:
29:f8:1c:8f:82:e6:d5:e3:47:55:b4:4f:9f:6e:40:27:fa:31:
62:73:25:a0:cd:19:46:a1:45:a2:12:2b:e4:47:de:86:99:0a:
3b:63:84:2c:ef:55:61:68:e6:6d:0a:29:a7:94:83:3d:bd:18:
b4:55:08:9e:49:4f:7b:3b:2c:10:c2:0c:7c:98:e5:57:3c:4d:
a4:c4:db:c4:e9:df:d3:24:61:9f:3d:56:f1:c8:1c:f2:52:1d:
8d:81:9f:2d:50:2b:ba:f2:b7:c1:70:2a:e5:76:de:10:97:00:
0a:14:f4:cf:dd:db:36:a8:07:73:c3:5d:62:9d:bb:bf:e7:f4:
25:f9:d4:c7:c9:e9:3a:43:2b:29:12:dc:f0:9b:03:86:fe:ae:
1a:ac:5a:e7:61:a9:ae:4b:ec:5e:e4:ac:b8:8e:c5:74:cb:9c:
3e:d1:b6:90:4c:03:6b:e8:8c:10:0a:4d:f6:43:a2:f6:31:63:
22:15:eb:82:6e:50:42:09:23:ca:0f:c0:83:60:f7:57:c0:16:
a2:e3:59:6a:77:fa:f6:5a:26:c5:58:bc:fa:99:5b:37:1f:ab:
90:ba:24:fc:8d:8f:f8:2b:b5:20:97:44:92:37:31:0d:a7:a6:
ac:39:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:52 2026 by rpki-client