Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json)
Hash identifier: 7FeQdh2tw/QEDgu6ur7vRvs+4VK7RGQs2DtePEMC3no=
Subject key identifier: A2:BB:F5:0B:34:DB:8A:9F:BB:92:AD:71:35:A3:1E:87:A8:3A:C3:E0
Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Certificate serial: 019D99D067697226CB87A7250DFD33A64497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
Manifest number: 02A7
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: KYHVGw5N65xg4z+m5JJ5giObfi9OwMVnCt0r8yc0jJk=)
2: wFdwl3GPZJGJpXxabTkhX-gww84.roa (hash: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:67:69:72:26:cb:87:a7:25:0d:fd:33:a6:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=a2bbf50b34db8a9fbb92ad7135a31e87a83ac3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:45:97:21:24:1e:3b:33:ad:69:d6:81:b6:
31:10:47:6f:5a:88:d4:1b:98:f8:b9:01:f1:b2:9c:
75:aa:5f:a5:5c:a9:67:3f:ee:57:75:3a:83:5a:67:
ea:3a:31:21:cd:15:a3:a9:ec:ce:32:2a:c4:fe:ee:
c6:36:ca:83:97:4e:cc:65:2b:0c:38:ac:2e:6d:22:
75:df:39:96:0e:98:7e:30:b7:62:ce:06:99:11:77:
dd:97:2e:21:55:2a:17:04:04:e1:70:8b:1f:70:13:
1a:15:96:ab:e9:51:ad:06:40:71:e5:d0:81:83:e3:
91:d3:e2:69:1b:51:a4:23:a1:91:f0:22:e9:da:88:
5c:15:97:82:06:2d:06:a0:ba:54:57:3f:3e:de:da:
32:7c:ba:cf:b7:7f:0f:d3:22:1d:52:07:45:65:80:
e3:30:8e:d6:9f:35:fd:e5:3b:64:26:c4:52:04:e6:
a2:4c:c5:9c:0b:3b:b8:82:ed:d8:5d:66:9b:07:11:
3f:1c:81:5a:04:5f:e2:d8:9f:99:da:a1:93:2c:2b:
ba:1a:71:a0:e5:c8:5c:f0:50:bb:e0:ed:8a:08:92:
31:45:9e:40:71:62:ea:63:35:63:5c:3f:06:6b:61:
71:90:72:91:38:5e:68:15:62:20:a8:eb:76:41:3b:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:F5:0B:34:DB:8A:9F:BB:92:AD:71:35:A3:1E:87:A8:3A:C3:E0
X509v3 Authority Key Identifier:
keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c4:80:0e:4c:14:b2:4b:db:7e:20:21:fa:0a:08:60:d1:85:
29:92:37:e0:2f:ed:bd:98:23:0a:3b:63:cf:9d:f8:92:ef:f0:
d2:3f:e5:a9:8b:f8:f7:34:4e:85:2c:28:00:04:cd:54:b7:ad:
65:e4:17:25:fd:8c:dc:3f:32:9d:a7:7a:47:74:c0:1b:e5:85:
df:8c:f4:3c:b2:f5:6c:5a:4b:68:ef:0f:11:71:3b:f2:57:50:
0a:e5:25:97:2b:15:54:cc:a8:06:97:54:69:86:42:c4:c2:78:
f2:ef:b0:14:a7:d2:1b:c0:5e:05:74:49:ca:28:e0:aa:e0:df:
04:fa:e7:c5:23:be:94:ad:6d:80:63:93:76:ad:80:57:a9:13:
01:5b:cc:13:43:7f:f0:ec:bb:0d:73:30:59:f6:16:82:6d:a7:
65:4c:df:3a:8f:a7:80:2c:9b:6c:7a:ff:0c:7b:ce:93:59:6c:
45:06:74:29:a6:b4:74:28:b8:b9:4f:fd:bf:eb:e6:5b:91:6d:
e2:15:bc:eb:37:85:00:a3:46:a1:44:de:19:a1:3f:dc:d5:40:
24:e7:6d:a2:73:f7:d8:25:ef:93:9b:41:a9:65:ea:df:a7:cf:
cf:e1:e1:bc:b5:de:72:4f:9e:f5:19:b2:57:aa:b8:13:70:8d:
67:a8:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:32 2026 by rpki-client