Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: 6ZfHs71HWC+59zM/OUxcIdTy0TvsunBDYIyy33suhRw=
Subject key identifier: 07:ED:14:2A:47:D0:13:B4:9D:E0:68:08:2B:E3:38:89:C7:09:FB:15
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019D9B879EF77E31719B62D0BC955F079715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 17C3
Signing time: Fri 17 Apr 2026 13:00:49 +0000
Manifest this update: Fri 17 Apr 2026 13:00:49 +0000
Manifest next update: Sat 18 Apr 2026 13:00:49 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: bo+jhezoUpwsdwRq9yv7gc0aiQbecUey8q2l02tdh2Q=)
2: sj7z-OE7wtWIbAsLlk0f8070JJA.roa (hash: fCvU62phFkPvYGJbKu7jFDsWbZSEAX8kQ2AkhH7Ekk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:9e:f7:7e:31:71:9b:62:d0:bc:95:5f:07:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Apr 17 13:00:49 2026 GMT
Not After : Apr 18 13:00:49 2026 GMT
Subject: CN=07ed142a47d013b49de068082be33889c709fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:82:ea:bb:8b:d1:e8:5a:5f:18:dc:d7:22:
df:5e:11:5f:32:00:1f:ed:96:84:ab:56:a1:1e:0c:
13:cc:a8:99:db:03:21:7e:38:d7:22:67:d2:28:d2:
dd:3e:7f:87:bc:4c:84:cb:15:32:00:ca:83:50:12:
03:56:9f:35:d5:cc:85:2b:e8:b8:40:77:86:ce:86:
dc:20:5a:f2:f6:c3:41:3e:63:ef:62:b2:e7:d4:bd:
05:d0:44:cf:f7:59:01:63:47:e3:15:8c:80:01:47:
7a:c3:9b:87:76:52:7d:10:a3:6c:d2:5e:2f:57:b3:
f9:18:6d:bc:4d:a6:d4:a5:ad:3a:31:11:fb:af:0d:
e8:68:35:45:61:c3:f2:e1:fe:11:16:23:1d:03:db:
26:3b:d4:df:65:21:2c:fd:d7:c6:4d:2d:9f:d7:f8:
2d:de:3b:1f:bb:d5:3a:45:4f:86:fa:d4:3b:11:3d:
ca:7f:0f:28:bf:e0:65:c0:2a:a8:53:67:2d:41:53:
2e:bf:d6:d9:01:54:b7:53:df:a9:48:d3:95:f5:01:
6f:a5:8e:c4:f9:a5:19:a9:16:c6:13:c8:96:d1:90:
b2:1f:a8:c1:70:84:41:51:7e:49:e2:77:02:84:e3:
60:2c:bb:ff:49:1b:80:66:c7:66:52:6b:b7:e3:cb:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:ED:14:2A:47:D0:13:B4:9D:E0:68:08:2B:E3:38:89:C7:09:FB:15
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:9a:cd:95:9e:db:f2:b2:07:e3:8c:5d:b0:3f:38:e9:33:
1c:19:81:0b:ba:ba:81:bb:1f:11:84:fd:ad:72:54:d2:55:ae:
a3:1b:dc:00:16:49:90:10:44:8a:35:62:6f:69:f7:8c:5a:3d:
bf:10:ed:92:3d:49:8a:96:9e:3d:f4:33:b9:2d:bd:7a:20:22:
97:89:c2:ec:c2:28:5e:63:af:47:07:59:e7:7b:30:c4:47:fb:
3f:33:3a:46:70:15:d3:47:10:ce:7c:04:22:9d:77:7b:ab:40:
ca:97:b6:9d:55:12:ef:63:c3:84:e7:59:07:8b:df:4c:1e:a4:
cf:1d:1c:b6:9a:79:3d:d5:13:82:ed:83:d6:49:65:5d:91:84:
7a:62:42:41:48:c6:61:c9:0b:36:cb:b2:32:d0:12:22:70:6d:
7d:70:76:61:da:a2:3f:78:bc:74:66:db:0f:e0:e5:a6:a4:c9:
68:da:0c:b3:9d:b2:85:3e:e3:64:a3:32:60:e5:f6:18:20:70:
10:af:44:b9:19:73:cb:9f:c9:77:cf:70:c9:83:ac:22:d0:48:
7b:74:87:2e:92:c3:27:92:5d:d9:ef:0a:8a:f1:cd:e3:ca:64:
f0:96:11:2d:10:b5:f3:33:41:8e:22:37:2c:31:b9:f7:dc:b8:
69:bd:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:50 2026 by rpki-client