Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
File: TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json)
Hash identifier: FRwt2G3eMy00ZLTvT/T4I9m8iFVi6cUaOQwoE12yqK0=
Subject key identifier: F2:53:8D:43:4A:2B:1F:AA:E1:69:5D:39:3D:C3:30:DC:D0:AD:76:31
Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Certificate issuer: /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Certificate serial: 019CABD9F7907657DBAF70BEBBA330EC41A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
Manifest number: 0D29
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: ogPhqF5/01adqR9JK9YH8wu2AKlIK4O7dqnb4GjZPP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f7:90:76:57:db:af:70:be:bb:a3:30:ec:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=f2538d434a2b1faae1695d393dc330dcd0ad7631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:57:99:fa:91:ad:31:5d:e3:53:d3:7a:29:
36:65:78:a3:87:9c:58:32:8f:8b:2d:65:e5:e5:19:
86:b9:b3:eb:ba:ac:a6:3b:de:d2:45:e6:e0:74:e6:
4c:91:9e:90:46:14:f8:92:da:3a:18:80:cf:d0:31:
93:b8:40:46:6f:66:9b:30:37:32:ec:63:d8:da:8f:
fe:57:d4:e3:85:94:9a:f9:8e:f3:07:a4:3a:2a:35:
2f:20:71:3a:47:d5:7b:8d:75:d0:4c:75:55:04:64:
b6:36:7c:e4:99:6f:9a:0e:21:88:bb:35:cc:58:30:
31:12:b1:82:16:23:82:6c:52:a7:ce:d1:0d:e9:f4:
b2:e1:82:27:fd:2e:f3:cc:19:18:11:3e:75:dc:71:
44:28:67:71:f3:47:36:8a:25:49:36:dc:c8:f9:34:
22:dd:20:40:50:40:6b:16:1a:3f:4b:b6:e1:dc:5e:
7b:3b:87:af:84:b9:0b:7b:0e:b3:84:77:30:cd:20:
56:9a:d5:41:bd:53:db:84:c9:db:f2:88:40:0e:99:
48:d6:4a:ec:c8:1d:c9:fc:de:c3:11:94:8b:84:8a:
15:eb:68:c7:3a:9d:e6:55:e0:e6:6c:dd:4a:f9:33:
0f:23:9b:16:40:79:6d:8a:84:23:b5:53:39:9a:33:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:8D:43:4A:2B:1F:AA:E1:69:5D:39:3D:C3:30:DC:D0:AD:76:31
X509v3 Authority Key Identifier:
keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:7e:4f:34:d5:b7:dd:a4:e3:12:2f:1c:40:67:8c:79:5d:
ba:5e:28:33:75:7d:41:8f:2c:27:4a:13:b5:4e:e2:cb:87:90:
61:3f:a7:67:5c:a2:f4:b0:fd:f4:fa:ae:5e:dd:02:46:cb:de:
eb:36:81:0b:b6:04:5b:8c:80:af:48:d7:a1:7f:d2:9c:5b:67:
f4:82:42:89:91:d0:37:0b:fb:1d:c9:86:2e:2a:94:35:7b:81:
e3:e4:d2:d5:99:ae:e7:59:f5:8d:00:de:e5:5e:53:d5:41:af:
67:f9:61:7b:31:02:96:45:43:78:b4:2c:73:90:b9:85:6d:f0:
36:7e:ff:27:71:92:e1:5c:6f:c0:40:7b:d5:a1:a0:c9:34:51:
b0:e0:b0:98:4e:25:25:d6:c5:26:e3:0a:51:b1:f1:a4:95:d1:
1e:b5:e5:6e:ef:da:92:b8:bf:9d:6f:6d:99:e5:40:7d:c0:df:
b2:46:7e:9d:d9:9f:a9:71:57:bd:1b:0e:9c:23:d1:82:c6:76:
d4:10:ef:7a:81:4b:eb:c9:7c:88:b6:ba:0d:ca:40:99:2e:f2:
0e:37:99:59:95:2a:7d:31:7b:56:25:dd:a4:ea:45:95:bc:46:
07:19:82:94:74:24:ac:40:96:22:04:cc:41:c7:b4:2d:69:ba:
62:20:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:19 2026 by rpki-client