Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: 4CQbuFMYvrx4VdZh3Ul3zvJCe5WkrKIel6G6IzLaypY=
Subject key identifier: 3B:DA:EA:87:2A:FE:6A:F8:35:83:FA:FE:60:6A:A9:D7:37:08:04:7F
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01A0C96B79AE25CC3A58B3C0F7AA8CDD6DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 1741
Signing time: Tue 22 Sep 2026 14:00:58 +0000
Manifest this update: Tue 22 Sep 2026 14:00:58 +0000
Manifest next update: Wed 23 Sep 2026 14:00:58 +0000
Files and hashes: 1: luzq3QatRtvsM_tav41tExaw3UU.asa (hash: CgV/sZKmh8DSn/OeHmUQ5q5ffkhFJN41kTfbg8horZ0=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: cu2Mf7Hy5+d4qZBISvmlfB8JUqHdrmKGqv4VXPtklK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:79:ae:25:cc:3a:58:b3:c0:f7:aa:8c:dd:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Sep 22 14:00:58 2026 GMT
Not After : Sep 23 14:00:58 2026 GMT
Subject: CN=3bdaea872afe6af83583fafe606aa9d73708047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:eb:12:b1:45:05:ca:a3:56:63:17:41:f6:
f3:73:78:a4:28:6d:3a:2f:53:6e:fc:33:6b:a9:1f:
0d:f1:33:5d:d2:19:9e:af:d8:a6:10:9d:1a:6f:78:
55:de:41:27:3e:18:60:b5:60:fc:34:7a:a8:55:0f:
ea:40:3f:0c:31:8f:e0:bc:bb:80:db:af:f0:a6:56:
31:c7:bc:c7:f9:c8:0f:a1:dd:d7:cd:a3:2e:81:59:
1d:c7:3e:6a:a6:98:9f:6d:f9:86:5e:e7:74:57:5b:
0c:f8:7d:8a:74:e4:d2:a2:25:74:a5:1b:90:19:15:
2b:27:96:9a:3a:79:91:fa:11:e3:16:e6:4f:84:3d:
7d:44:9f:f2:f5:5c:cd:8c:58:f7:64:de:97:65:d7:
24:78:07:eb:3f:86:ed:60:9e:aa:f7:7d:d2:bd:1f:
43:86:0b:b0:76:ad:c9:cb:73:2a:dd:a9:6e:c0:13:
5a:3e:5c:41:82:0a:13:0d:bf:78:87:fa:d2:33:d6:
53:de:4c:93:bb:c3:fb:6c:05:13:47:88:25:f3:0e:
73:aa:ad:9f:69:5a:cb:24:17:91:6a:2a:3f:36:cd:
5b:21:e9:39:22:bb:f9:20:a6:81:18:68:5f:19:87:
66:b4:08:75:07:23:de:15:27:23:f9:c3:f2:43:eb:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:EA:87:2A:FE:6A:F8:35:83:FA:FE:60:6A:A9:D7:37:08:04:7F
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:1e:e8:93:4e:db:6a:3d:61:b2:1c:54:a1:f4:70:68:41:
89:ff:45:6a:32:cb:2a:23:b6:23:08:1d:55:7a:26:ac:31:da:
84:60:14:ae:3a:b3:61:35:00:48:a5:30:b4:3f:ea:10:2e:dd:
de:ed:5e:55:57:ff:e2:dd:b3:a4:88:d6:ad:af:bc:7a:44:4e:
0b:41:18:8c:da:0c:94:ed:68:40:ed:bb:06:ec:56:b9:85:a6:
32:9c:f3:96:9f:7c:55:5b:ac:1a:fa:7c:4b:34:39:c8:a1:08:
57:a2:25:1d:47:d3:db:92:7b:69:c4:95:33:ac:69:24:61:29:
a5:af:ae:e5:f2:8d:67:de:fb:66:bf:95:3d:18:44:de:d6:50:
b9:f3:51:55:b8:c0:85:01:2c:a6:9d:83:e8:f6:7c:cb:87:a8:
2c:34:af:71:b3:cc:08:c0:32:1a:bf:fc:bf:5e:22:67:9c:9d:
3a:25:3a:1d:9f:89:0f:4c:d3:5a:d7:5f:87:13:57:d2:7d:93:
31:7c:5b:65:19:ec:56:c6:f0:c1:8c:be:5e:9e:12:7c:af:31:
10:33:89:f3:9f:37:0a:00:d6:38:69:26:43:88:c8:b2:9e:ff:
88:c7:90:55:32:4d:d3:2d:fe:ba:bb:2b:5f:b8:2f:03:b7:56:
0e:66:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:18:29 2026 by rpki-client