Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: t+RuAEn8TTOXjztKdHblIrP5f8/AcjbfJCBt71ahla0=
Subject key identifier: 0C:03:68:61:51:72:01:32:39:4B:9D:F4:4A:83:D8:C8:22:CA:34:EB
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 019FA9AB95403F1E13429A59601B32047354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 16AC
Signing time: Tue 28 Jul 2026 17:00:21 +0000
Manifest this update: Tue 28 Jul 2026 17:00:21 +0000
Manifest next update: Wed 29 Jul 2026 17:00:21 +0000
Files and hashes: 1: luzq3QatRtvsM_tav41tExaw3UU.asa (hash: CgV/sZKmh8DSn/OeHmUQ5q5ffkhFJN41kTfbg8horZ0=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: nRdR2eDCm8jtXV2ljQtWxW9dMPjhTeCF/HALpWTF9/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:95:40:3f:1e:13:42:9a:59:60:1b:32:04:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Jul 28 17:00:21 2026 GMT
Not After : Jul 29 17:00:21 2026 GMT
Subject: CN=0c03686151720132394b9df44a83d8c822ca34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:1d:40:2b:34:0f:75:21:24:2a:e7:8e:b6:
5d:85:3f:8d:50:db:96:4d:17:e9:90:0a:3d:5c:56:
ce:10:0c:a0:c0:71:6f:c7:07:19:97:b4:2a:b2:f5:
3e:1c:38:0e:a8:01:e1:1e:a4:94:40:db:34:b8:16:
a0:97:4a:77:e5:1d:48:31:a3:e5:7e:1c:86:f7:c0:
ea:84:20:67:21:b8:35:34:11:9b:fe:56:0b:b4:7e:
03:08:6b:b6:16:0c:86:47:6e:0a:87:fa:46:97:f4:
7f:52:94:8f:6f:97:9e:ef:da:da:f1:09:73:4a:d6:
4b:a4:3e:00:1c:a0:e7:51:da:c7:bf:de:04:e8:0e:
65:b1:b1:45:7c:31:4d:23:a4:d9:5c:70:d6:f6:00:
75:bf:d0:d3:83:e0:12:f9:9e:2e:9a:14:e6:3b:14:
ae:d8:79:bd:b2:55:43:33:06:c6:79:ea:0f:14:16:
aa:51:85:9d:27:27:8d:cd:23:1f:a3:80:f3:4a:3b:
a3:46:75:d6:0e:3f:80:ca:98:7c:85:31:f6:2f:b0:
a6:43:3d:6d:aa:bd:be:35:37:6f:4f:16:d3:47:1f:
ab:d7:21:aa:77:22:7f:a0:40:85:a8:de:b2:ba:62:
40:c9:d1:8d:85:ab:27:50:d4:b7:2d:35:38:00:35:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:68:61:51:72:01:32:39:4B:9D:F4:4A:83:D8:C8:22:CA:34:EB
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ed:00:c6:2b:51:f4:12:49:ac:b3:07:c7:1a:ef:40:57:6d:
74:4a:79:f4:c8:fb:10:d6:4b:60:42:10:83:3f:72:9c:d2:0e:
91:3f:7f:cf:d8:89:82:44:a3:31:5e:21:57:4a:c7:66:d2:4c:
18:9a:30:1e:1e:04:ff:ac:f1:af:20:2d:58:a4:b7:6b:69:ab:
4a:60:53:6c:b6:9d:ab:56:79:b8:0a:1b:37:3a:24:2d:b0:ae:
d7:08:ee:be:7b:76:b2:48:1d:50:75:3e:6f:50:43:a6:9f:f5:
e9:36:02:95:b1:c6:fc:28:c8:3d:6a:cf:33:5e:33:2e:c7:1e:
9b:c1:10:48:ef:b6:b4:6c:f2:0a:56:94:81:9a:df:ea:dd:e8:
4f:80:9e:c4:08:f7:7c:89:94:3a:e5:23:bf:82:7b:e5:6c:53:
a6:45:04:1d:61:9c:ed:53:7b:26:dc:8c:36:bf:da:39:9a:11:
89:be:05:e8:08:e3:6b:b8:40:b0:e6:18:b1:b4:54:99:dd:fe:
62:da:0f:02:3b:46:ca:a6:4d:3e:8e:b0:64:97:e6:63:b5:89:
b0:42:af:7a:a5:4a:23:19:15:47:fb:fa:7e:4f:6d:7a:a4:32:
05:ef:f3:6c:a6:0c:37:cb:ab:29:f0:05:71:79:66:8d:a3:d8:
44:a3:5a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq5VAPx4TQppZYBsyBHNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl
ZTM5YjUwHhcNMjYwNzI4MTcwMDIxWhcNMjYwNzI5MTcwMDIxWjAzMTEwLwYDVQQD
EygwYzAzNjg2MTUxNzIwMTMyMzk0YjlkZjQ0YTgzZDhjODIyY2EzNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+0dQCs0D3UhJCrnjrZdhT+NUNuW
TRfpkAo9XFbOEAygwHFvxwcZl7QqsvU+HDgOqAHhHqSUQNs0uBagl0p35R1IMaPl
fhyG98DqhCBnIbg1NBGb/lYLtH4DCGu2FgyGR24Kh/pGl/R/UpSPb5ee79ra8Qlz
StZLpD4AHKDnUdrHv94E6A5lsbFFfDFNI6TZXHDW9gB1v9DTg+AS+Z4umhTmOxSu
2Hm9slVDMwbGeeoPFBaqUYWdJyeNzSMfo4DzSjujRnXWDj+Ayph8hTH2L7CmQz1t
qr2+NTdvTxbTRx+r1yGqdyJ/oECFqN6yumJAydGNhasnUNS3LTU4ADWO4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwDaGFRcgEyOUud9EqD2MgiyjTrMB8GA1UdIwQY
MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt
ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl
LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO0AxitR
9BJJrLMHxxrvQFdtdEp59Mj7ENZLYEIQgz9ynNIOkT9/z9iJgkSjMV4hV0rHZtJM
GJowHh4E/6zxryAtWKS3a2mrSmBTbLadq1Z5uAobNzokLbCu1wjuvnt2skgdUHU+
b1BDpp/16TYClbHG/CjIPWrPM14zLscem8EQSO+2tGzyClaUgZrf6t3oT4CexAj3
fImUOuUjv4J75WxTpkUEHWGc7VN7JtyMNr/aOZoRib4F6Ajja7hAsOYYsbRUmd3+
YtoPAjtGyqZNPo6wZJfmY7WJsEKveqVKIxkVR/v6fk9teqQyBe/zbKYMN8urKfAF
cXlmjaPYRKNaVw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:43 2026 by rpki-client