Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: hq7ajmVJjl/1MmYGnnYOeTQgX2aFev0BwmqTP9rouIU=
Subject key identifier: 6E:42:B1:81:26:7A:B2:0D:D8:8D:38:56:32:73:A5:48:44:0A:0F:BF
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 019CAA591C1213B3C70001DC0FD0198F7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 151E
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: DEjIYIcRA0BD37d1ODIG9QTitpKCEbEnWiCbyHBZL/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1c:12:13:b3:c7:00:01:dc:0f:d0:19:8f:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=6e42b181267ab20dd88d38563273a548440a0fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:e1:a7:95:66:f4:26:dd:71:69:64:a5:e0:
a3:20:1a:30:38:4f:71:df:b5:55:47:cf:e1:a9:31:
73:43:f3:f5:4a:e5:b1:66:87:ad:dd:4f:0c:b2:e4:
02:1a:42:16:48:03:c4:a8:aa:0a:c3:ec:c0:f7:3d:
98:72:43:71:6d:1c:5b:ac:71:18:09:d1:6f:5b:d3:
c6:e6:98:a5:18:02:87:d6:72:38:df:94:fc:f1:15:
41:ee:a1:40:a6:f3:6b:5c:36:cb:02:87:dc:46:66:
bc:ae:67:fc:a9:43:68:81:64:68:46:c5:b1:ae:0d:
a6:8f:8a:61:66:85:ba:fd:3b:7b:fb:03:95:17:ca:
d4:f7:ef:ed:44:a6:f9:e3:a3:67:2c:68:54:99:c6:
f6:23:7b:bc:97:51:14:f9:64:63:ca:2c:7e:cd:b3:
42:2f:5f:97:66:71:6f:2b:9c:53:6d:f7:2f:e5:e2:
56:c6:25:7e:e6:f5:4b:39:0c:97:da:10:ae:b8:2a:
03:78:a1:f1:4f:0a:4d:dd:4b:bb:19:22:31:5e:58:
29:c9:c1:78:61:d9:6c:86:aa:1a:fc:72:f6:8e:23:
93:9e:05:10:76:a1:be:cf:c4:b6:15:6f:90:9c:48:
eb:fe:31:5c:25:f4:f6:29:c9:1c:7f:11:a8:dc:1b:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:42:B1:81:26:7A:B2:0D:D8:8D:38:56:32:73:A5:48:44:0A:0F:BF
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:9f:67:02:68:42:3e:76:17:81:2a:e2:8d:9f:47:74:50:
67:d9:c4:14:57:a5:ff:b1:f9:61:1f:9a:f4:fe:03:b1:35:f2:
94:b1:86:0a:50:47:84:0b:8a:cd:48:c9:85:bb:65:98:32:42:
4f:61:60:2a:7f:43:74:66:5e:54:5b:55:a2:13:a7:2a:2c:5c:
97:84:05:af:47:d6:b5:20:40:38:0a:53:c3:6d:0a:06:51:b6:
c0:17:a3:24:2c:14:03:9a:a4:8a:b5:81:0e:e5:d8:94:19:09:
87:d1:41:3b:25:c5:b8:a9:fc:fa:0f:15:f6:70:0a:d5:7f:b9:
18:6d:d4:5b:68:db:aa:bb:c0:79:aa:d6:c1:5f:2b:c0:ee:85:
ec:74:b5:9d:1a:9b:18:9b:e2:f1:57:08:22:3a:48:40:46:f5:
98:18:c1:e1:aa:9a:8b:1e:23:c1:48:92:fd:eb:6d:5e:22:84:
4d:3b:a6:2c:c4:f3:d1:db:22:df:63:84:8f:34:10:6d:3f:22:
b6:d2:a6:9b:41:6d:98:06:d8:4c:56:be:fa:57:44:1d:9a:a8:
03:de:14:30:bd:b9:d5:e6:68:80:2c:b7:1f:a6:a0:37:e5:87:
4e:4e:f7:3c:8d:d3:68:8c:f2:2f:1a:07:70:90:7c:c7:97:85:
05:f7:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:37 2026 by rpki-client