Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: kKb3yntRGgLl6hhDqzO9EoHXtDrF58yRDejhzcRPh2M=
Subject key identifier: 9C:A1:69:7A:54:F8:CE:64:1F:DF:5D:84:A7:77:CD:90:29:4F:26:3A
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019FA8CFD62B094DAA9086EE0889D3CE50F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 14D2
Signing time: Tue 28 Jul 2026 13:00:20 +0000
Manifest this update: Tue 28 Jul 2026 13:00:20 +0000
Manifest next update: Wed 29 Jul 2026 13:00:20 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: 0zFYBv/xtSZpR+NdrpPe/MtLmSPYnwfHUXdEOsTrbCQ=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:d6:2b:09:4d:aa:90:86:ee:08:89:d3:ce:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Jul 28 13:00:20 2026 GMT
Not After : Jul 29 13:00:20 2026 GMT
Subject: CN=9ca1697a54f8ce641fdf5d84a777cd90294f263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:c6:1e:48:86:07:de:9c:03:98:e7:12:f8:
e0:49:77:3d:22:0c:a2:e3:99:61:ce:e8:9f:68:2c:
6d:6b:5b:09:af:61:ef:0b:d5:15:35:69:97:97:d9:
53:bf:b7:3e:30:a7:c7:8b:c6:23:eb:68:30:f1:7c:
93:01:7d:4e:33:db:56:5a:41:70:16:f9:8f:80:7b:
bc:2d:22:f6:b6:dc:82:9b:d7:0a:7d:18:bd:bf:3d:
ea:dd:ab:8b:5b:9e:d6:71:02:cc:7e:ae:d2:18:41:
59:6f:54:d3:3e:47:cf:e9:1c:b7:22:5f:98:88:0c:
51:b0:1c:9e:5b:c2:2b:81:9a:34:d4:90:48:27:bd:
75:fa:1d:8c:83:21:fd:9c:75:c3:27:fb:bb:55:ba:
f6:e4:8b:12:50:0b:ac:ac:db:fe:92:cb:03:d6:96:
fe:a3:e6:17:87:1e:f5:ee:f1:ec:95:10:22:ca:e8:
4c:b8:1d:28:36:27:ce:cf:1c:c1:60:06:05:a9:2f:
dd:0a:ab:cb:5e:bb:21:70:9b:a7:f4:5b:7c:29:7f:
29:99:6e:e1:9d:56:af:eb:5d:99:a6:de:ca:8a:27:
da:df:85:3e:a0:24:bd:72:ac:a1:c3:a2:f0:bd:ba:
fa:cf:d3:7b:24:fe:23:0a:c8:5c:8e:bb:4d:00:ee:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A1:69:7A:54:F8:CE:64:1F:DF:5D:84:A7:77:CD:90:29:4F:26:3A
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:17:79:ae:16:d6:fe:b8:f5:47:3b:94:8a:a3:0e:66:cf:
ce:5f:1e:e9:3c:39:8f:95:a8:4d:ca:31:72:91:3f:23:7d:d7:
2f:7f:32:bf:df:70:4a:f4:db:d7:01:06:c0:da:19:9d:15:dd:
e6:2c:59:e5:c6:65:e5:40:e9:b9:cb:22:5e:fa:ea:1a:b5:b7:
d2:40:4e:bf:37:17:03:0f:b1:6d:be:07:03:1a:b0:7a:cb:e4:
da:08:94:2e:d2:fe:7a:d5:64:cf:6f:f9:6e:1e:a5:91:a8:d7:
d7:fe:1f:d0:fa:37:ec:70:c6:16:06:90:a2:bf:a3:e8:ed:c9:
27:07:04:b5:9e:26:c0:f6:d9:b7:f2:0c:6d:e8:26:e5:c0:5a:
be:56:25:25:e2:46:bd:20:45:41:50:83:74:65:25:4f:16:a9:
2a:59:b3:f1:f3:4e:69:cb:45:2d:e7:51:ef:87:31:c2:73:5a:
e8:86:4c:b0:4b:2e:5b:ff:17:33:70:a0:a8:78:0f:26:34:36:
ec:52:26:53:15:93:f5:10:bd:ef:4d:6c:e0:51:7f:b6:58:d2:
83:43:51:69:33:d3:7d:94:e8:ae:9e:6b:3f:51:f6:5b:80:de:
9a:18:eb:96:56:a9:fa:72:22:c3:25:9d:99:04:4f:45:92:eb:
e4:e9:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:08 2026 by rpki-client