Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: RzKWQcCGZb60JWFq1ffXl0F65dxlOJcx/Ba5q1i/zFo=
Subject key identifier: AA:54:2D:EE:8C:BC:F1:51:50:F0:5F:FB:28:80:CF:2A:DC:74:C2:A2
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019EC0DB35D85719EAFD9A7CE20C35008269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 12:00:51 +0000
Manifest this update: Sat 13 Jun 2026 12:00:51 +0000
Manifest next update: Sun 14 Jun 2026 12:00:51 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: gL434ma/TDmiamlOlvN5AjNSybmQqISOoZuQyAwpKZk=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:35:d8:57:19:ea:fd:9a:7c:e2:0c:35:00:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jun 13 12:00:51 2026 GMT
Not After : Jun 14 12:00:51 2026 GMT
Subject: CN=aa542dee8cbcf15150f05ffb2880cf2adc74c2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:7a:19:27:49:83:3e:77:ab:1a:b3:d2:99:
05:63:73:23:47:98:04:f2:3b:83:9f:9c:d3:eb:3f:
7e:1d:36:3b:73:2d:1d:76:e7:7f:fc:a4:b8:36:c7:
ce:21:b3:21:48:6b:51:ad:c7:34:f4:49:c7:9a:5d:
93:25:9e:f9:d8:19:47:c6:b2:ec:18:76:1d:3b:88:
c9:50:f1:b0:40:72:b4:f5:d5:cd:9f:8a:84:a0:b6:
8d:28:ab:53:90:e9:fc:04:c1:de:ce:e1:ce:62:c1:
72:72:4e:f7:af:e7:50:e7:18:ce:bc:70:6f:0d:41:
ee:d1:c4:1f:35:63:22:c4:6c:3a:f1:db:ef:4c:0f:
e7:ee:78:e3:58:a8:c8:07:42:8f:15:5d:98:54:14:
83:1a:80:f1:d7:49:8e:dc:54:08:21:a2:8f:e8:e4:
46:09:26:e0:1e:75:57:ab:86:20:b6:54:40:64:f0:
62:98:ea:3f:60:98:30:fd:a4:91:3c:e8:9c:83:72:
e3:5e:1c:10:d2:31:8d:bd:40:b3:3a:2d:ac:d6:9f:
a4:43:61:53:12:a3:ce:dc:0b:4a:b3:33:09:9f:d2:
17:43:25:84:fa:c9:69:4b:de:f1:6d:f8:3e:2b:98:
45:ad:3d:a8:2d:e1:5f:5e:fe:b1:df:b4:cb:53:7e:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:2D:EE:8C:BC:F1:51:50:F0:5F:FB:28:80:CF:2A:DC:74:C2:A2
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1a:7a:7b:0b:e7:16:de:5c:cb:6d:50:b7:ca:07:e4:60:d2:
91:62:d9:69:b0:13:85:76:c8:5b:b2:e2:11:9e:a9:63:3c:29:
1a:8b:6d:70:18:ad:05:f6:fa:71:4b:10:8b:3c:5e:01:22:17:
1b:fb:b6:b0:c4:3b:4c:06:2b:13:0e:47:9b:86:d6:79:90:e3:
4e:a9:cc:de:cb:69:2c:60:2b:55:19:c2:63:81:44:40:40:cb:
67:60:5c:d1:99:ac:f6:95:1a:1f:d3:6f:cb:0d:23:6e:b2:3d:
ef:31:f5:84:5c:ff:59:e2:1f:a4:9b:e8:d7:7f:1d:fc:50:f5:
47:17:38:88:3d:1d:7b:a7:5a:bd:93:3e:4c:d9:63:d8:2d:3f:
ad:93:76:b0:b7:0d:48:33:04:34:fb:59:d0:0b:b7:c3:79:87:
76:37:40:f4:35:7d:9d:1f:49:cf:a9:fe:5e:d4:61:48:a1:2e:
5e:7e:0d:b8:f5:96:5a:fb:bc:53:73:ae:1c:bc:49:98:e6:a8:
65:c1:bb:55:cd:e1:98:5b:bc:12:87:1d:b0:90:ac:7c:9d:71:
0c:2b:3a:76:2b:34:9e:9b:84:4e:9d:be:d7:73:7a:04:3f:be:
fe:b0:af:96:cb:50:59:63:de:03:bb:7f:76:01:68:2f:b8:42:
d6:02:d8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2zXYVxnq/Zp84gw1AIJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjYwNjEzMTIwMDUxWhcNMjYwNjE0MTIwMDUxWjAzMTEwLwYDVQQD
EyhhYTU0MmRlZThjYmNmMTUxNTBmMDVmZmIyODgwY2YyYWRjNzRjMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvx6GSdJgz53qxqz0pkFY3MjR5gE
8juDn5zT6z9+HTY7cy0ddud//KS4NsfOIbMhSGtRrcc09EnHml2TJZ752BlHxrLs
GHYdO4jJUPGwQHK09dXNn4qEoLaNKKtTkOn8BMHezuHOYsFyck73r+dQ5xjOvHBv
DUHu0cQfNWMixGw68dvvTA/n7njjWKjIB0KPFV2YVBSDGoDx10mO3FQIIaKP6ORG
CSbgHnVXq4YgtlRAZPBimOo/YJgw/aSRPOicg3LjXhwQ0jGNvUCzOi2s1p+kQ2FT
EqPO3AtKszMJn9IXQyWE+slpS97xbfg+K5hFrT2oLeFfXv6x37TLU37gLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpULe6MvPFRUPBf+yiAzyrcdMKiMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBp6ewvn
Ft5cy21Qt8oH5GDSkWLZabAThXbIW7LiEZ6pYzwpGottcBitBfb6cUsQizxeASIX
G/u2sMQ7TAYrEw5Hm4bWeZDjTqnM3stpLGArVRnCY4FEQEDLZ2Bc0Zms9pUaH9Nv
yw0jbrI97zH1hFz/WeIfpJvo138d/FD1Rxc4iD0de6davZM+TNlj2C0/rZN2sLcN
SDMENPtZ0Au3w3mHdjdA9DV9nR9Jz6n+XtRhSKEuXn4NuPWWWvu8U3OuHLxJmOao
ZcG7Vc3hmFu8EocdsJCsfJ1xDCs6dis0npuETp2+13N6BD++/rCvlstQWWPeA7t/
dgFoL7hC1gLYUw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:30 2026 by rpki-client