Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: ONFjayUgGBV0r2ZLDv7OzFBWDKxHdhaJdcmsacK4+mQ=
Subject key identifier: 7D:6A:27:C0:F0:AF:B5:1A:1E:9E:AF:5F:93:AC:DC:71:8A:8C:83:FB
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 01A0CE24026FBCC55795D3E7E30CE26251DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 12:01:01 +0000
Manifest this update: Wed 23 Sep 2026 12:01:01 +0000
Manifest next update: Thu 24 Sep 2026 12:01:01 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: Me/E7RXB0l5IkfBmkOgLaSc0yL27koYaZMAbaWizhDw=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:02:6f:bc:c5:57:95:d3:e7:e3:0c:e2:62:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Sep 23 12:01:01 2026 GMT
Not After : Sep 24 12:01:01 2026 GMT
Subject: CN=7d6a27c0f0afb51a1e9eaf5f93acdc718a8c83fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:d7:8e:5d:e3:b8:77:71:ea:96:a2:b5:db:
13:af:8d:f1:63:ea:52:98:b8:0a:e0:f1:ea:e8:66:
2d:ae:71:50:61:a1:ac:03:45:08:c5:a4:20:fb:06:
94:e3:74:c0:c0:1e:ea:86:34:15:73:61:f1:55:12:
ed:8a:ac:66:3c:6b:2b:a9:7e:27:d3:ca:dc:65:ad:
05:fe:69:db:58:09:dd:77:96:08:45:2c:27:a4:db:
92:b9:a6:a6:71:2e:8a:d3:8f:24:03:cd:a8:5e:10:
9e:32:8e:ab:57:18:fd:bb:f1:61:af:a4:d3:0e:01:
7a:22:a2:30:c6:2e:ae:e3:9c:9c:23:1d:3d:ef:78:
c7:2d:e1:0b:8b:8c:9a:b5:d4:d5:c3:4b:ac:3d:73:
2e:c5:2a:41:de:4f:ad:ef:cb:75:20:e7:93:86:88:
79:49:85:8f:40:c6:6e:14:9a:86:0a:94:eb:22:55:
41:ea:ec:31:7e:67:d2:f3:41:41:24:a9:44:4e:48:
a5:7d:dc:76:d8:1d:59:a8:e7:7c:74:45:e6:24:a9:
f0:0f:92:13:b8:a9:94:86:82:b1:66:f2:c3:7f:8a:
3c:d8:fb:a8:0d:da:00:5a:8c:af:f8:62:e2:fc:fb:
bc:2e:2f:5e:4e:dc:48:27:bf:5d:5f:8b:e4:51:63:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:27:C0:F0:AF:B5:1A:1E:9E:AF:5F:93:AC:DC:71:8A:8C:83:FB
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:78:0e:72:2d:09:03:a4:ee:59:69:44:d3:a0:ea:52:d6:
d1:da:b6:f8:31:70:e1:da:42:2a:d0:32:69:66:66:d6:cf:92:
7f:11:8d:d7:ba:a3:97:46:9d:e4:f6:24:4c:7e:33:3c:35:4c:
9d:be:8e:d8:aa:9b:f3:0e:e0:b9:40:6e:bd:2a:27:b6:bc:7e:
9c:d2:2f:1b:47:51:ac:1b:bb:3e:aa:1b:38:1e:35:7c:b0:9b:
6f:fa:72:0a:45:6f:53:86:52:e4:8a:a5:13:ca:95:e1:b7:b1:
8d:e3:14:2b:a7:bd:1d:3f:01:ee:6f:82:7b:41:68:b7:a2:1a:
a0:d5:92:66:eb:44:4a:a7:69:a5:22:f8:57:5a:e9:2f:e3:6e:
4b:77:92:76:9a:d4:87:6f:c8:32:ba:2e:48:6f:ab:0c:26:17:
6d:69:ab:5a:ae:58:74:2d:8a:1e:bc:62:6d:24:46:99:6c:e9:
f3:b1:c7:0d:36:6e:21:d5:73:bf:57:cc:8d:fd:8a:6f:ba:c2:
63:3d:6a:fe:a2:6b:9c:06:e4:98:33:d3:05:9e:57:51:e0:7a:
0a:6a:d8:6d:68:4b:61:13:95:43:46:7b:2b:48:03:b1:f4:64:
d0:92:fc:a4:74:78:99:3a:1d:c6:1e:12:5b:1d:cb:35:ae:15:
31:9c:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:51:11 2026 by rpki-client