Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: qJRs15N4C1mgE6Oz3CfnAKqNPbxTkDzMgI/9xj/Yvlc=
Subject key identifier: 4A:1C:B0:4A:61:A0:3E:BA:89:81:1E:8B:26:73:26:21:36:40:BA:54
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019D27DF9BF6403EDE990DBCEAB391E0B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 1212
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: 6K0IuJuvfxS/qq+smmHlInGzMqtvlXIwCKGtSlmdkbE=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9b:f6:40:3e:de:99:0d:bc:ea:b3:91:e0:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=4a1cb04a61a03eba89811e8b267326213640ba54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:3c:a1:08:32:cd:ac:cf:b0:99:90:75:19:
55:28:5d:36:2b:4b:92:72:ac:eb:a8:c5:53:7e:37:
10:e9:fb:ee:f9:17:c9:6c:a4:ce:46:54:7b:66:80:
c3:cc:35:98:4e:df:23:e8:76:e5:99:5e:85:c4:4d:
c1:bc:99:6e:bb:f8:1e:eb:3a:01:09:c3:8e:76:90:
39:98:31:44:d7:57:57:07:9b:d8:d6:50:97:08:fc:
89:3d:c3:da:09:7a:23:be:0f:82:fc:5a:97:2a:6f:
70:38:93:70:2f:f9:96:69:a1:30:8a:1f:86:6d:81:
6b:bd:8f:47:4d:1f:1a:a7:c8:93:df:8d:9d:2f:85:
3a:cc:e9:30:20:e2:c4:21:f1:b5:d9:9d:36:21:83:
fe:ad:36:f7:1a:7f:d1:bd:00:f1:2d:24:90:89:d8:
64:be:09:70:3a:94:72:94:17:90:d8:65:e1:bb:b7:
42:ea:85:b7:d0:97:74:25:ca:f9:2e:fc:1d:d4:ea:
0d:59:19:fc:9a:5c:00:1d:59:27:a5:31:b5:99:de:
96:64:6f:f9:47:6b:2c:ab:43:f9:7b:bd:6a:75:b2:
db:bf:60:6d:32:8c:bf:15:4c:d0:22:a3:42:26:72:
d3:26:d2:f1:48:58:8e:a7:3b:e4:03:74:18:ad:da:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:B0:4A:61:A0:3E:BA:89:81:1E:8B:26:73:26:21:36:40:BA:54
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:22:07:fa:32:0d:f0:24:90:c4:9f:0b:bb:8c:99:eb:55:87:
00:24:c0:23:e9:6f:a6:77:96:f1:7f:5d:ce:98:79:d1:7a:ef:
89:23:94:f6:f1:9c:52:34:b1:63:f7:66:e9:6c:e3:d5:69:21:
2e:f7:30:30:ff:19:48:51:51:e4:12:a3:21:b4:64:74:25:4b:
9c:84:85:ca:31:68:44:93:5b:8a:26:fd:69:66:54:b1:a1:78:
ac:ed:6a:08:aa:29:98:8c:d0:41:79:2c:ed:a4:39:aa:4d:12:
1b:ee:12:cd:15:3e:90:9a:d1:9a:fc:ed:2a:30:8c:7c:49:3d:
e1:40:47:0d:8a:e2:51:26:2e:0c:9a:f8:ba:5f:ea:28:af:fa:
f9:59:22:5a:d9:7a:47:42:85:f4:46:46:37:fb:f3:a5:fa:ef:
35:b5:e5:93:53:7c:70:b9:c7:cc:58:17:df:c9:7d:44:05:be:
6c:c0:80:4a:ef:93:4b:78:76:4b:a8:af:66:8c:0f:74:a7:d7:
e5:13:ba:f4:1d:93:f9:6f:86:7a:4e:2a:a5:91:78:92:cc:6f:
41:7e:43:ee:77:f3:1e:5b:f0:be:43:1d:33:6f:82:59:be:aa:
31:39:9a:32:93:e9:74:84:3d:56:12:17:fa:ba:f2:c9:48:dd:
f9:d4:0d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:54 2026 by rpki-client