Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: mEW/dGFzR7GamkxssE7MQw9rXTkZPPJw6Qbre1mYLqk=
Subject key identifier: 66:94:F7:CC:47:F1:9E:5A:11:E8:7E:D1:42:98:25:A5:61:10:94:84
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019CABD91F17DCCE491A374432CA827FF8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:00:59 +0000
Manifest this update: Mon 02 Mar 2026 00:00:59 +0000
Manifest next update: Tue 03 Mar 2026 00:00:59 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: xIKhBLnHTlmRYG3CORRu/Zip/j1Zr5qA4wN+OhnzxCg=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1f:17:dc:ce:49:1a:37:44:32:ca:82:7f:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Mar 2 00:00:59 2026 GMT
Not After : Mar 3 00:00:59 2026 GMT
Subject: CN=6694f7cc47f19e5a11e87ed1429825a561109484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:4b:0e:e2:d6:47:a1:8a:03:90:1d:4c:e4:
76:d1:6b:3e:04:dc:35:7d:3a:5a:4c:56:6a:91:e8:
69:59:a1:c7:9c:05:d9:90:d3:94:cc:53:ea:81:f2:
c9:ec:9d:92:1f:a9:67:86:7e:cc:1f:61:62:e6:4a:
c6:8a:80:14:ef:31:09:c5:be:b0:9a:53:ca:4a:99:
62:95:71:08:ce:d5:20:fc:c2:34:83:86:fa:75:5e:
5d:8b:2c:e8:5c:f4:1e:1d:16:a8:58:0c:7d:65:84:
b3:18:e3:54:8c:84:8c:70:86:5b:07:1e:de:73:15:
a1:78:06:1b:01:13:23:63:b8:5d:a4:33:c2:bf:6c:
03:be:2f:d7:dd:66:1d:cc:72:cb:aa:ee:2a:d6:34:
24:1e:79:ed:72:63:56:ea:5e:03:77:cb:fc:91:22:
5c:55:94:bb:15:b2:51:5a:48:60:56:f5:fc:a9:77:
dd:cd:0a:ac:08:ab:f8:f4:1e:53:8a:07:40:ad:64:
21:d4:0b:8b:99:c7:b1:33:f1:b6:ee:9a:2e:f9:ec:
a4:73:57:b1:e2:3e:c5:28:c6:cf:ee:a6:e5:f7:99:
ef:da:cb:9d:a1:6d:f4:90:e8:8d:96:1a:fc:4e:b4:
f1:db:97:d2:e2:68:92:7c:a4:b5:a7:58:1b:8c:07:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:94:F7:CC:47:F1:9E:5A:11:E8:7E:D1:42:98:25:A5:61:10:94:84
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:58:06:96:95:29:93:37:23:7a:74:76:4a:74:d8:4b:c1:6b:
1f:fd:a4:02:3b:07:97:06:a6:aa:75:ab:f4:c1:67:f0:e9:b5:
72:35:e4:74:9a:f9:fa:d5:c1:a1:3a:f0:bc:2d:ed:25:77:23:
0a:d1:62:e5:2c:b8:ef:0b:73:55:d1:da:19:a2:e5:e8:9e:b5:
7e:fe:dd:e7:1d:a3:25:cb:91:a0:40:fa:1a:19:2c:d6:0c:23:
15:01:ab:94:50:6c:5f:36:15:af:3f:49:9c:e2:83:7d:d3:1f:
8f:07:e0:51:cc:92:41:cb:b5:5b:a1:e0:c2:6f:b6:83:57:73:
00:d7:9b:ad:68:1d:20:27:eb:35:c0:07:89:19:40:e9:21:9c:
8c:7b:1e:ce:64:7a:b0:00:aa:56:e6:b9:0b:01:b9:c5:cd:52:
48:7d:ba:f1:45:3c:ed:af:f1:b7:08:00:e5:9f:62:89:dc:30:
50:87:3b:ff:32:d8:c5:ca:62:ab:65:f6:e1:8c:ff:22:a6:ac:
87:22:c2:b1:e9:96:6c:b3:e5:57:ce:5d:6e:8c:f5:a1:6a:e3:
7a:6b:8c:9a:4b:34:48:58:ec:41:af:af:ed:f1:f9:58:a2:64:
1f:d8:55:97:67:5b:c4:6c:7e:ca:06:4d:0a:99:cd:28:87:6c:
a7:4f:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:09 2026 by rpki-client