Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: JsrFZ1KXKkubClaYlFIoqPsF/XcrUZkPdl9Q4JzRtYA=
Subject key identifier: D4:8B:83:8B:D4:9C:13:92:58:66:D6:D5:42:0F:6A:C6:74:E1:92:D3
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 019DA378D36284451DC73766A66A45AE60F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 159F
Signing time: Sun 19 Apr 2026 02:01:37 +0000
Manifest this update: Sun 19 Apr 2026 02:01:37 +0000
Manifest next update: Mon 20 Apr 2026 02:01:37 +0000
Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: 4GJrVoy1qGVrJ9Fj/a7U9bn64GfXCPTUKiL9K1Ynnnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d3:62:84:45:1d:c7:37:66:a6:6a:45:ae:60:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Apr 19 02:01:37 2026 GMT
Not After : Apr 20 02:01:37 2026 GMT
Subject: CN=d48b838bd49c13925866d6d5420f6ac674e192d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:3d:ed:de:f6:b7:a4:23:f0:8a:55:65:0b:
fb:38:9d:85:40:02:c1:43:5d:61:7e:70:53:43:8c:
9a:85:12:b3:08:6a:ff:d0:df:e0:dc:d3:92:5b:a3:
0f:a2:d4:73:16:5d:a6:5a:8f:87:a6:a6:ef:15:81:
6d:6a:00:6b:8b:ef:49:ec:7c:5b:ca:50:82:fa:89:
bb:45:ff:f0:03:64:cf:88:a4:3e:b5:3a:33:5d:51:
94:a8:e9:19:30:1a:2b:69:8a:60:20:20:c3:e3:c1:
3d:13:77:3a:94:39:e6:b4:ff:11:e2:a7:95:fa:e9:
8d:82:d8:35:bf:bc:b6:e3:53:a6:69:79:d8:f3:24:
df:db:c2:cc:0e:dc:86:79:7f:07:49:4c:88:9a:00:
84:7b:cb:ab:48:25:bc:58:39:a1:fa:0a:b3:e8:d2:
3e:8a:16:f1:b2:f2:07:9a:83:19:c7:c2:9b:a3:3f:
27:25:42:65:a9:00:d8:f5:8a:c9:e4:30:0b:da:a6:
02:cf:18:d7:25:7e:ed:e0:93:fb:17:1a:0d:c7:04:
ae:df:0b:c6:75:21:7a:c0:cb:90:ba:67:1f:2c:9b:
02:86:97:d0:b7:26:db:79:e1:21:c1:6c:34:93:bd:
77:e0:a9:8e:e4:be:6b:34:05:9a:e9:f1:e2:f8:f8:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:83:8B:D4:9C:13:92:58:66:D6:D5:42:0F:6A:C6:74:E1:92:D3
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:9d:8c:48:41:f6:88:03:fb:42:f3:e8:d1:c2:8d:35:55:
9b:b3:9a:83:06:b4:39:58:98:c9:47:9f:91:a7:94:52:55:a7:
78:3b:01:d2:b9:d2:65:e7:2b:52:54:2e:79:54:90:d5:ab:86:
5b:f1:71:9a:bd:64:29:71:e3:fc:65:58:30:29:d4:71:ab:94:
6c:c8:77:7f:3c:ea:ad:97:a7:e5:3a:6c:86:f2:7d:9b:ba:8a:
82:a6:29:8c:12:e7:81:1b:3b:65:ba:ec:21:1c:69:ea:2e:c4:
3c:2c:fd:82:75:98:30:dd:bb:32:9a:08:1c:25:55:a2:58:cb:
66:b5:5f:e4:89:86:b0:1e:e2:e2:eb:bb:39:f9:8b:53:27:5b:
94:4d:56:0f:10:c0:86:84:a9:ad:ed:8a:8e:82:de:7c:d0:a7:
b9:ca:3f:bc:1f:d6:ed:c8:c0:48:43:07:3b:78:7d:ea:1f:a8:
52:44:69:d8:e3:38:7e:90:8d:22:b2:c9:8b:73:4c:a4:70:0f:
30:08:d0:e7:c7:ac:7d:02:47:1f:82:9d:21:eb:ce:73:d0:ca:
7e:33:4b:39:fe:cc:ee:eb:d9:98:0e:68:38:88:f2:c0:24:5c:
ec:0d:b3:91:7a:f8:af:3b:b4:7e:2b:60:17:76:20:da:f4:cb:
d5:a8:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:39 2026 by rpki-client