Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: ypO8SGKjq20CRWNvxTT0GI7OmBn5bm8bTQp7zrfPddI=
Subject key identifier: 37:19:5B:4D:53:DD:DD:1B:02:BC:1A:AC:6C:B8:19:68:E8:EB:9A:FD
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 01A0EA76EC47BE19245EA7539290F2D11F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 11F1
Signing time: Tue 29 Sep 2026 00:00:57 +0000
Manifest this update: Tue 29 Sep 2026 00:00:57 +0000
Manifest next update: Wed 30 Sep 2026 00:00:57 +0000
Files and hashes: 1: qnjLVFZSC8QuCgUVZZ1JmtnnXaw.roa (hash: lrJX4lxCpvRoWetP9MnMhWnZa9fTVg282FGtglUa7z4=)
2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: LvU0gRCrcOcjQynAbMbLiirEpVb8+Qco4k64adVlnWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:76:ec:47:be:19:24:5e:a7:53:92:90:f2:d1:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Sep 29 00:00:57 2026 GMT
Not After : Sep 30 00:00:57 2026 GMT
Subject: CN=37195b4d53dddd1b02bc1aac6cb81968e8eb9afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:fe:e6:0c:98:16:7e:4b:50:a5:fa:f4:5c:
18:9f:ad:f6:f7:0f:c4:80:29:b7:3c:6b:e0:a6:cb:
6f:f6:e8:b3:75:95:20:b8:24:8a:a8:de:8b:18:8c:
00:cb:57:5a:80:cf:b9:09:d5:40:7d:27:0f:4a:f1:
75:0d:57:28:17:0f:67:34:42:e7:b0:6e:68:fb:00:
1c:9a:fa:fc:a0:48:50:ed:7e:40:2b:cf:67:3f:b9:
70:df:54:9f:11:cf:4e:73:38:83:fd:d5:85:4d:89:
82:73:d3:5c:64:38:68:c6:dc:e9:20:98:ca:c8:79:
ff:a1:43:1f:c3:3a:4e:83:48:1e:37:9a:41:1f:4c:
f8:fc:92:2b:21:0a:b9:63:4f:75:a5:e8:43:03:9d:
c4:f4:66:94:01:17:dc:7c:cc:b0:59:9b:c1:fb:14:
d0:b8:ff:5a:03:af:d3:36:c4:6e:be:36:3c:fc:47:
8f:e0:b9:36:f7:fa:61:2b:7d:8c:93:e1:61:fd:90:
83:7f:89:56:2f:04:2a:43:5a:e7:40:77:38:de:25:
de:91:94:20:06:6b:3e:68:ab:34:02:48:37:a7:d8:
4f:a5:95:3f:62:8a:f6:ae:77:08:8a:31:c3:25:02:
4c:78:ea:d8:76:2f:f6:1e:c4:d9:97:a1:98:e6:e5:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:5B:4D:53:DD:DD:1B:02:BC:1A:AC:6C:B8:19:68:E8:EB:9A:FD
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:06:9e:18:86:4a:4d:f2:0c:1b:41:5d:d3:b1:bf:c4:fd:a0:
de:97:9c:4b:8d:99:37:2e:58:d6:cf:ae:87:ad:07:0f:87:f1:
13:4e:8a:6a:19:ff:eb:9a:88:b3:19:5c:dd:44:ac:5b:39:f0:
bd:78:92:7c:ec:de:b2:14:44:94:c2:5c:fa:72:d9:24:94:51:
75:fa:c4:93:c3:dd:2c:96:c8:c3:b3:a9:57:56:5e:03:3b:08:
05:46:ae:65:2f:1c:55:2f:ef:1b:f3:f3:49:79:48:9b:61:fb:
1e:42:5a:21:37:4a:5a:f0:8c:9c:c4:5e:33:f1:81:bf:37:59:
c0:38:8a:74:4a:33:f0:d0:fd:43:9b:ec:b4:69:0b:af:81:42:
2f:bd:d0:e6:8e:35:47:e7:a3:8e:b9:6e:09:9d:14:d7:b6:7e:
31:95:c4:44:32:20:d2:41:d8:6b:77:cc:30:b7:35:1f:9f:ab:
7e:9d:97:2d:11:97:23:b8:40:7d:e1:c9:6c:39:b1:57:68:ac:
8d:98:b7:ba:e2:c8:46:56:fc:d9:66:a5:0c:8d:88:8d:ca:4c:
7b:22:53:4c:7a:c0:ee:7f:12:ba:31:13:2a:79:14:b4:40:62:
f2:a1:20:d5:51:68:ef:02:4d:01:e9:be:c0:95:be:6b:5c:87:
73:9c:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:14:07 2026 by rpki-client