Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier: 1JKGPA4clY32FrhTItLwfzZutTWNN0KtfkJG6NH5hv0=
Subject key identifier: 65:D8:AC:B7:10:72:A4:DC:46:6A:FB:FB:AB:13:9A:8A:FD:85:22:FB
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 019F95B75FFD4149968D0A8A60F587F3CA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number: 1354
Signing time: Fri 24 Jul 2026 20:00:50 +0000
Manifest this update: Fri 24 Jul 2026 20:00:50 +0000
Manifest next update: Sat 25 Jul 2026 20:00:50 +0000
Files and hashes: 1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: J1/vPTh+nZYWZ6XmxeOLRK3RWvh/8e5694Owl4zBSU0=)
3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:5f:fd:41:49:96:8d:0a:8a:60:f5:87:f3:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jul 24 20:00:50 2026 GMT
Not After : Jul 25 20:00:50 2026 GMT
Subject: CN=65d8acb71072a4dc466afbfbab139a8afd8522fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:cc:a9:92:4f:24:a4:20:a6:2f:1c:50:f0:
06:54:8f:e4:a1:bc:66:16:2d:0d:15:e3:d4:42:7d:
57:f5:5d:dc:c2:10:cd:22:a1:4b:2f:99:3e:af:b3:
04:0e:6e:45:c0:29:45:dc:bd:ce:90:c6:eb:01:32:
85:a0:45:90:28:c9:c1:d7:12:be:9f:4c:3a:2d:19:
c6:0e:03:28:e6:db:2d:e8:fb:09:b6:9e:a8:80:89:
dc:62:94:a1:be:7c:60:8f:99:10:15:23:5b:6f:07:
59:ef:ba:e4:c7:2b:c0:fc:91:a8:66:f3:56:74:f9:
64:a8:32:a9:4f:58:70:af:0f:8a:3d:42:e5:46:18:
fd:bc:20:c5:89:13:10:0d:2a:58:77:ad:3f:14:30:
34:6e:09:fa:0d:6b:cc:5c:cd:19:72:6b:98:8b:0c:
83:01:54:75:c2:f2:a7:0c:9f:42:f8:0a:0a:e0:5e:
5a:70:e9:a2:36:7b:4a:90:7d:20:e7:2a:67:43:05:
fb:33:b8:3b:93:03:b2:12:27:63:f2:49:d6:a4:b1:
f2:41:87:a4:a4:6f:1e:16:71:bf:f2:1c:c7:ad:00:
79:ed:ac:5f:f0:07:35:28:31:da:91:ab:91:68:ec:
83:d8:1c:67:8a:87:06:31:35:b5:8f:08:18:ee:33:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:AC:B7:10:72:A4:DC:46:6A:FB:FB:AB:13:9A:8A:FD:85:22:FB
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2e:4f:c4:38:c6:63:89:db:6a:ba:b2:c4:b6:ee:c6:ff:98:
d1:27:66:62:a2:73:85:f2:d8:9c:dd:1c:24:a1:c7:a5:ce:ac:
1d:86:df:dd:c0:d0:5d:eb:49:d8:e2:dc:22:7c:91:b1:0a:64:
46:70:c1:c5:0d:a7:ab:ec:43:d0:8a:0a:42:e0:6e:e9:f2:57:
a8:d2:d5:7e:93:7b:c7:70:4c:37:4f:00:7f:68:e8:f6:4c:81:
9d:d8:56:f4:57:82:c6:54:a4:ee:e2:e2:d6:58:e4:7e:7c:09:
57:b8:f1:46:ff:93:56:1f:0f:19:e9:a3:f8:f0:cc:b8:60:21:
c4:c7:83:eb:0a:a7:1a:c8:b6:b4:06:77:f2:4e:bf:32:db:7b:
71:15:64:d2:bc:e9:4c:61:b1:dd:3f:c2:15:1c:ea:98:74:80:
da:56:8d:87:a5:57:23:a0:6c:d8:49:ce:2b:b4:fc:eb:c9:f7:
57:12:75:8e:3a:48:2e:a0:4e:b1:69:de:f3:1b:2f:86:ee:e4:
f5:c5:8c:c5:9f:01:b3:8b:38:58:ba:5f:bb:8b:a4:04:51:ee:
7d:64:5b:a6:94:3c:26:aa:17:bb:17:98:92:91:eb:86:3e:a9:
36:25:98:a9:0e:81:f8:74:92:08:93:1b:73:5a:39:d9:eb:d7:
aa:0f:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:31 2026 by rpki-client