Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: d5TeMnp4T2M2flOnAGHJKiUgS+BVtrCu2MtcXbSgbf4=
Subject key identifier: B5:74:DC:E8:E9:28:34:E5:70:5B:9D:6B:07:B7:C1:2E:77:37:17:A5
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019CAC1063249F02A9E36BEE6CB7A746C60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 1747
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: LKVKqO/DXmjJ4Pn5Kox7lZo0p5G48tXp2e5i65jsfzM=)
2: sj7z-OE7wtWIbAsLlk0f8070JJA.roa (hash: fCvU62phFkPvYGJbKu7jFDsWbZSEAX8kQ2AkhH7Ekk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:63:24:9f:02:a9:e3:6b:ee:6c:b7:a7:46:c6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=b574dce8e92834e5705b9d6b07b7c12e773717a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:e5:0b:68:34:26:a8:21:4d:05:d9:d5:c7:
92:d1:c9:a3:9f:5c:c7:c2:b4:80:f7:ec:60:50:84:
1d:4a:7e:90:59:6b:6e:e5:60:2a:70:f1:ba:25:9e:
88:22:e4:4e:3c:59:90:10:48:e6:2b:b3:12:8e:97:
5e:21:3b:f7:0b:3d:66:8d:90:25:c7:75:87:a1:bc:
d4:7d:5d:e5:ee:bf:82:25:8d:a3:9c:1a:b6:ad:66:
78:91:c6:8e:67:54:b4:db:dc:e0:da:ed:f7:c6:d3:
25:aa:05:5b:5d:54:01:20:56:a6:24:4b:e9:cc:bf:
f2:3a:ef:78:47:1c:ce:33:da:85:d2:f0:c4:55:d2:
6f:95:23:17:89:6f:a7:b2:c1:a1:75:56:fa:4a:24:
8a:e5:24:2b:f3:e0:3c:33:1f:11:cf:17:dd:90:f3:
68:97:16:7b:ee:47:fe:3e:d0:c0:20:ff:49:af:8a:
de:06:5f:0d:a2:db:a1:dd:d3:7d:ea:92:0c:a4:2d:
53:14:d0:52:c4:14:94:6b:11:6c:65:1d:88:1c:36:
31:80:48:03:ae:41:bd:70:33:69:c2:fe:b2:d6:fd:
ae:48:64:4d:82:0d:86:c0:82:93:d7:de:84:b0:83:
e4:09:fa:69:65:da:d7:05:a8:30:84:16:d8:64:a5:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:DC:E8:E9:28:34:E5:70:5B:9D:6B:07:B7:C1:2E:77:37:17:A5
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:77:1b:6d:5b:c0:cf:89:df:ef:81:0c:03:b3:cb:98:9e:
5e:52:c5:64:ac:68:dd:63:fe:3a:90:fd:4a:2f:60:d1:d5:43:
80:ea:48:ca:60:be:e8:b1:12:46:fc:c8:21:3b:d7:99:77:73:
7f:83:9f:a7:d9:37:98:37:7a:6b:11:5d:bb:5f:11:74:bd:25:
b5:0a:93:1f:8c:19:05:58:1a:28:75:60:44:e3:a1:a3:cd:26:
08:c0:8d:b7:f9:34:bd:79:01:4d:a6:97:a5:dc:ec:59:7c:4e:
38:60:69:a4:f1:41:4a:83:02:7b:6e:65:f4:d9:23:ce:05:65:
46:00:3d:2d:dc:f7:4c:fb:d2:ce:94:d5:ea:fa:79:e0:6b:03:
38:c5:e4:23:74:12:74:8b:ee:2f:bf:18:87:64:a4:cc:be:b5:
4c:59:f2:11:fb:5d:8a:a6:8a:b9:56:04:61:f1:8e:6f:16:e6:
bc:03:a9:cd:5c:f1:8b:ac:25:ce:41:23:0e:6f:f0:d0:02:70:
b5:ae:cd:d4:23:39:02:25:f3:61:66:3c:62:b4:49:f0:2e:2f:
b5:94:6e:81:f0:53:5a:03:14:41:cc:6d:25:27:a7:3b:72:30:
9a:5b:04:62:f4:64:aa:15:5b:f1:23:4a:5a:bb:46:95:55:5a:
ee:a4:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:55 2026 by rpki-client