Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: DCG4vg9gjapHTbbAXNmh1QZnqDZoBuCbVNOumA870cM=
Subject key identifier: 2D:BD:E1:57:D7:87:2A:7E:69:5D:C9:7D:09:0C:48:8F:38:33:C0:D3
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 01A10E4CA895AD5965839F8730736833A411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 1417
Signing time: Mon 05 Oct 2026 23:01:07 +0000
Manifest this update: Mon 05 Oct 2026 23:01:07 +0000
Manifest next update: Tue 06 Oct 2026 23:01:07 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: eAvkmeQlwtUPXf/NQj8pPoRWEqkFdka2quUXofISGQ8=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:a8:95:ad:59:65:83:9f:87:30:73:68:33:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Oct 5 23:01:07 2026 GMT
Not After : Oct 6 23:01:07 2026 GMT
Subject: CN=2dbde157d7872a7e695dc97d090c488f3833c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:35:99:d8:01:18:11:06:d5:d8:b5:85:a8:
71:c7:03:86:94:2f:d8:4c:0c:26:ea:f9:6f:fb:80:
d0:ec:35:dc:9a:b7:5d:a7:aa:c6:6e:42:b9:63:ab:
3e:08:53:9e:f2:79:f6:ba:d0:85:54:78:88:c3:e2:
91:8a:71:63:f4:7f:e3:59:b6:23:13:5b:b9:17:4a:
e3:60:74:a7:2f:dd:9b:c7:80:79:22:7b:0f:ca:3c:
fa:97:56:03:04:70:c4:12:78:3a:01:1e:39:ce:12:
77:be:af:24:e3:75:bc:9d:cc:81:06:4c:90:dc:96:
19:b9:78:5b:37:bd:2a:df:97:3a:28:db:c9:35:32:
02:e1:f0:82:a1:fe:ad:40:5b:4e:4b:42:6c:61:cc:
9d:c9:b9:5d:81:7a:cf:70:7a:5f:96:ae:21:82:e4:
ac:12:a2:47:9e:ef:ac:7e:39:83:cf:72:39:c1:1c:
cb:b8:5e:c3:51:dc:ef:13:3e:87:63:17:50:40:04:
2e:ab:f5:ab:25:ed:70:f8:ea:c0:2d:ec:49:89:04:
98:56:b6:aa:f0:20:a3:67:f0:04:04:5f:30:7f:b6:
f6:50:57:7e:4f:96:2e:e4:17:4a:03:17:b4:8b:22:
cd:c3:33:f3:0c:dc:ac:d4:41:60:ff:8f:c0:03:7e:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:E1:57:D7:87:2A:7E:69:5D:C9:7D:09:0C:48:8F:38:33:C0:D3
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:4d:86:a4:f9:b3:1b:70:34:50:27:38:89:9a:31:6e:a7:
88:01:64:24:69:cd:89:76:ea:79:3b:75:c7:9f:49:10:b4:52:
82:51:2d:56:8c:16:f6:f4:35:fe:aa:61:53:e0:a4:d5:95:be:
dc:ef:d9:6f:df:5c:2c:b3:ed:d6:7c:c2:2a:43:e9:e9:cc:42:
ee:5f:ef:bf:f3:11:e3:13:15:ad:d3:67:7f:3c:55:86:2d:d6:
70:af:85:59:a5:19:04:08:58:cd:32:e8:5d:ec:c9:50:f4:f7:
4c:fa:bf:e3:9d:5e:bf:8e:df:8e:c9:17:90:30:fd:50:64:5c:
a3:10:24:e4:c0:7f:82:75:4e:e6:c8:bc:8d:71:fe:83:8d:90:
55:a5:2b:39:9f:bb:f6:4d:d0:a2:43:21:ef:e0:a1:a0:ee:11:
66:8c:e2:b4:98:8f:6f:7b:36:0e:78:ef:78:5e:1d:a3:94:53:
aa:45:71:0c:85:d1:16:8b:17:51:09:38:b5:22:3f:44:b8:d7:
26:84:55:5c:ac:32:8e:a9:21:52:0c:73:fb:d4:12:8c:73:35:
ad:7a:1a:c1:f7:65:dc:9a:a9:62:6c:c7:3f:f6:f1:9f:ae:31:
67:d2:6b:d5:8d:b6:cf:1f:ce:ef:bb:5f:4c:ee:29:6c:91:f7:
e5:20:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:58:04 2026 by rpki-client