Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: 6cxhv84Faaq/F0mqxPZ4KFJNNROHnedbSxG7ZZ/i+gs=
Subject key identifier: F5:05:D2:48:24:A0:EC:29:22:37:BC:F5:F0:41:4D:0D:22:CF:2A:72
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019FAA883F5E26AC9BA3A866740024465405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:01:23 +0000
Manifest this update: Tue 28 Jul 2026 21:01:23 +0000
Manifest next update: Wed 29 Jul 2026 21:01:23 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: BimAVCeyiQgUwgmBFiYbh08wwg/w+om/2tdnwov5DN0=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:3f:5e:26:ac:9b:a3:a8:66:74:00:24:46:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jul 28 21:01:23 2026 GMT
Not After : Jul 29 21:01:23 2026 GMT
Subject: CN=f505d24824a0ec292237bcf5f0414d0d22cf2a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:b7:84:49:5b:73:ce:6d:bc:6c:14:b2:f5:
c7:4a:8e:e1:99:5c:25:33:38:f5:1b:6d:93:84:4d:
61:23:3f:e3:2c:73:8b:00:fd:10:3c:e7:63:9f:7e:
a2:07:66:77:4b:f3:21:17:59:34:7f:bd:42:3b:4b:
b0:60:72:6b:ea:70:e7:28:4b:75:c5:f5:ff:11:d9:
82:bc:b9:94:78:9d:b3:74:06:59:76:83:37:d8:f1:
b4:a0:3e:d7:c1:e7:9c:2f:d6:ee:8c:e2:c0:0e:4a:
2f:99:ce:dd:3f:bf:0a:25:8d:d9:9a:93:2c:35:bd:
d0:cc:cf:c5:13:08:6c:97:12:a1:0e:42:ce:22:50:
6d:b2:7d:89:a6:c3:77:77:3f:8e:7b:be:5c:87:d2:
fa:b3:32:f8:69:8f:db:2f:78:73:4f:40:9c:87:51:
ef:d2:49:b9:21:be:45:b4:c5:0a:a2:16:24:d7:c8:
bd:71:ab:29:bf:e7:10:22:8f:f0:59:a5:ba:39:c3:
76:2f:4c:63:88:07:11:5a:86:62:0a:59:5a:f7:92:
61:80:9a:4c:f1:d5:45:2a:48:f7:72:1e:14:6a:d2:
41:ef:ce:66:ca:57:ee:09:ff:2a:4c:eb:3f:59:d6:
18:19:32:ef:d6:60:80:b0:25:04:4c:53:d1:11:cb:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:D2:48:24:A0:EC:29:22:37:BC:F5:F0:41:4D:0D:22:CF:2A:72
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:af:67:22:70:73:71:7c:70:48:ef:8f:db:a4:65:1d:62:
6b:30:c4:77:df:70:d8:2b:82:be:e1:68:71:10:b1:d8:73:c1:
66:f3:f3:50:e2:49:44:4c:23:cd:91:8f:2f:d3:88:47:26:b9:
ef:63:29:79:15:6a:4a:e5:17:e6:d8:7e:6b:59:cb:94:26:6c:
c3:c9:91:a2:4a:7b:45:e3:55:41:22:7b:fe:e2:2c:a0:3f:b3:
de:0b:f8:3b:14:92:97:bd:a6:9e:c4:a3:70:90:c5:c4:9a:f3:
c3:30:08:65:b2:58:32:df:13:f0:bd:a3:6a:1c:88:8f:a3:da:
31:ea:67:e8:60:de:fb:13:05:68:f5:fa:06:6d:d6:6a:09:1f:
2c:63:8c:a4:0f:d4:10:73:49:ad:d9:7f:db:83:aa:12:aa:73:
8d:42:2f:f0:4b:e8:7c:fe:f7:af:c2:0d:45:63:32:f1:c6:9b:
ec:75:df:86:7d:d6:71:25:d7:e7:c7:69:93:64:97:46:30:e6:
e6:de:50:d0:c9:76:37:7b:9e:43:08:b3:32:8f:17:95:f9:ca:
8c:cc:71:d4:44:6b:4e:19:b6:d2:65:0c:d5:bf:3c:21:91:2e:
15:13:8a:06:3e:e2:68:ea:74:4e:b4:3a:6f:ea:5b:1d:b2:2f:
d1:a6:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:52 2026 by rpki-client