Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: oWJu1MqRZxSg2YeHLKJRzhgxIVJxaaMhY5xVNf13Ssc=
Subject key identifier: C6:83:0C:BC:3B:9C:05:79:BF:7D:E8:65:AE:A7:3B:5B:3C:F1:B2:EC
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 019D28BB92520E997821B84764AA87E402AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: 8-98EtSeBCLzHuY9teqeWzuL_OU.roa (hash: 8fiLqkX0Hfw0qEIsopfMgXlsC7twNkxV8E46FfFtRcU=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: H6hAbhDXUoy6MPx1GxRvnjMHkkzV5WJR9SXA0GCOnf8=)
3: tgE8jzInH6PxL3alL4l8_zSBewY.roa (hash: COcQ1Fg1VxBHECABZQ1rgFDAfEXNKxzy+WFSvFCA68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:92:52:0e:99:78:21:b8:47:64:aa:87:e4:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=c6830cbc3b9c0579bf7de865aea73b5b3cf1b2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:09:1d:31:29:af:57:d2:57:63:44:76:2d:
5c:78:58:e4:aa:d3:90:5c:0d:32:c7:a6:f7:27:e0:
3a:0e:33:1b:95:30:ab:2e:6a:78:f6:d0:da:f4:c2:
f5:be:69:7a:5c:2f:5b:e7:d9:28:b3:c4:90:78:a1:
b1:7c:bb:96:90:44:9f:a0:ce:4a:d1:31:4d:e5:a2:
27:95:bf:d2:84:66:90:b1:5c:40:b0:96:37:07:98:
f0:57:cf:58:91:17:9d:b4:e6:95:f1:b6:e7:72:98:
a5:4d:42:e7:36:0b:28:5b:4a:ec:ea:43:f7:f3:a8:
19:5a:c2:b5:1b:0c:5c:3c:77:90:64:df:f1:0d:9f:
76:95:43:cc:03:e3:b1:d9:0f:e8:03:46:60:d6:a1:
54:6d:75:d3:bf:76:e8:8d:26:01:9e:e6:2c:e4:92:
f8:68:98:14:b4:6f:d2:3e:96:87:96:cb:c0:ba:95:
b4:81:ad:cb:60:ef:71:bf:81:ca:30:ad:d4:68:9f:
ee:c8:a0:68:7e:48:9b:9f:de:ce:cb:27:f8:6a:62:
3b:bb:ba:3b:67:86:fe:9d:2d:27:12:2f:72:2d:23:
69:8b:c3:e8:3b:3b:be:6f:67:db:90:b6:d7:3a:88:
e4:d5:5c:4b:c1:83:d6:7c:a9:fd:e5:7f:53:f2:11:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:0C:BC:3B:9C:05:79:BF:7D:E8:65:AE:A7:3B:5B:3C:F1:B2:EC
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6d:83:11:3c:a4:07:d1:0f:73:df:5d:2b:46:3d:29:82:6c:
22:fa:6a:8f:e3:48:92:84:e4:88:d9:10:d3:93:e6:11:00:66:
81:8b:50:40:2f:4f:f9:7d:34:10:81:25:f7:39:8c:ea:05:3f:
3c:29:e7:a3:aa:79:d9:73:a1:b5:01:2f:35:64:72:32:c4:a1:
27:23:7b:b3:89:31:2e:24:24:43:23:9c:34:1d:5b:c7:db:09:
41:40:8b:8a:6f:6c:fd:69:7b:96:11:32:39:af:11:e8:d4:82:
e3:c3:3b:7b:4a:23:93:87:94:0c:99:44:b9:26:07:51:6f:05:
75:88:1b:32:d0:11:50:44:3c:5a:39:d2:81:96:72:2e:bb:ea:
e4:08:e5:34:47:4f:06:15:2b:4b:10:89:78:88:41:a5:f9:67:
95:5b:0d:fb:e3:d0:25:81:16:c5:0a:83:51:bb:bd:90:1e:8a:
82:b7:80:40:f7:06:8b:a1:b9:54:c2:2b:72:90:b8:24:97:f0:
c2:4d:69:3a:71:36:01:8e:4f:6b:75:c9:12:4c:54:31:96:c6:
cb:66:62:63:c2:f3:d3:9a:2a:9a:0e:12:ba:09:03:35:87:92:
64:55:20:b2:aa:12:72:63:e6:f8:2e:20:52:f2:8a:84:49:0c:
73:e3:ce:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5JSDpl4IbhHZKqH5AKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTE3MTNlMTZiNGZkOGYzMzAxODg3ZGU2YTExMTk4MDQ0
OWIyOWUwHhcNMjYwMzI2MDYwMTE0WhcNMjYwMzI3MDYwMTE0WjAzMTEwLwYDVQQD
EyhjNjgzMGNiYzNiOWMwNTc5YmY3ZGU4NjVhZWE3M2I1YjNjZjFiMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/IJHTEpr1fSV2NEdi1ceFjkqtOQ
XA0yx6b3J+A6DjMblTCrLmp49tDa9ML1vml6XC9b59kos8SQeKGxfLuWkESfoM5K
0TFN5aInlb/ShGaQsVxAsJY3B5jwV89YkRedtOaV8bbncpilTULnNgsoW0rs6kP3
86gZWsK1GwxcPHeQZN/xDZ92lUPMA+Ox2Q/oA0Zg1qFUbXXTv3bojSYBnuYs5JL4
aJgUtG/SPpaHlsvAupW0ga3LYO9xv4HKMK3UaJ/uyKBofkibn97Oyyf4amI7u7o7
Z4b+nS0nEi9yLSNpi8PoOzu+b2fbkLbXOojk1VxLwYPWfKn95X9T8hFWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaDDLw7nAV5v33oZa6nO1s88bLsMB8GA1UdIwQY
MBaAFE7hcT4WtP2PMwGIfeahEZgESbKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt
MDhlNGI3OTM4N2MwLzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw
LzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW2DETyk
B9EPc99dK0Y9KYJsIvpqj+NIkoTkiNkQ05PmEQBmgYtQQC9P+X00EIEl9zmM6gU/
PCnno6p52XOhtQEvNWRyMsShJyN7s4kxLiQkQyOcNB1bx9sJQUCLim9s/Wl7lhEy
Oa8R6NSC48M7e0ojk4eUDJlEuSYHUW8FdYgbMtARUEQ8WjnSgZZyLrvq5AjlNEdP
BhUrSxCJeIhBpflnlVsN++PQJYEWxQqDUbu9kB6KgreAQPcGi6G5VMIrcpC4JJfw
wk1pOnE2AY5Pa3XJEkxUMZbGy2ZiY8Lz05oqmg4SugkDNYeSZFUgsqoScmPm+C4g
UvKKhEkMc+POkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:38 2026 by rpki-client