Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
File: TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft (raw, json)
Hash identifier: nkM4cPsHnJ04FcKaIH0cvCmBevjxfL9GB0w5ZnusxO4=
Subject key identifier: 45:87:60:3B:8A:CD:DD:BF:E5:44:8A:EE:93:FA:8B:19:F8:1A:B2:BF
Authority key identifier: 4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
Certificate issuer: /CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Certificate serial: 019D322C54BBBE50FBC38466DEB43ED66538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
Manifest number: A3
Signing time: Sat 28 Mar 2026 02:00:59 +0000
Manifest this update: Sat 28 Mar 2026 02:00:59 +0000
Manifest next update: Sun 29 Mar 2026 02:00:59 +0000
Files and hashes: 1: TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl (hash: KDjHCk3IRE5fxMmoq/lD5OG+mYECBji0hzcgr+WVHk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:54:bb:be:50:fb:c3:84:66:de:b4:3e:d6:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eecc161fcae24166f45f688dd5f823320dde2fe
Validity
Not Before: Mar 28 02:00:59 2026 GMT
Not After : Mar 29 02:00:59 2026 GMT
Subject: CN=4587603b8acdddbfe5448aee93fa8b19f81ab2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:54:28:2b:b3:58:9a:3b:a5:81:0d:5b:f5:
d4:98:93:2d:29:4a:17:ec:3c:49:b6:a0:52:7a:db:
d3:64:a9:72:6e:fe:87:70:21:0f:2c:06:09:1c:c4:
85:80:79:fe:26:29:56:fe:f8:c1:5e:c4:1c:a3:1e:
5f:7c:8a:1c:2c:65:3a:4b:39:47:ff:e5:03:21:65:
9d:2e:41:04:0b:1b:54:01:f7:1e:62:6b:5d:8c:75:
9a:c8:45:57:0f:de:fb:36:17:2f:49:4b:46:09:af:
4b:f5:24:dc:08:84:54:0a:4a:4a:ac:ca:a6:13:1d:
0c:9b:c3:9f:f2:3e:dc:a8:c9:cc:c5:b0:90:85:65:
db:84:ff:1b:78:06:f8:26:4c:ae:69:be:b9:84:ec:
0a:67:b2:cb:e1:85:a0:da:c1:68:73:79:c5:b3:ab:
43:3e:2e:93:0c:4b:35:e1:fe:22:3f:2a:81:57:3d:
73:34:de:1d:53:0d:f7:a9:8f:8b:a3:eb:1b:6e:eb:
62:10:c1:cd:32:63:05:1e:41:95:9f:1e:4d:7a:71:
4e:07:4e:9d:22:8a:31:9b:4a:b7:34:83:53:a8:a7:
6e:e3:bc:ad:5d:87:65:1a:00:2c:cc:db:bf:c8:5f:
a5:08:48:d3:63:f4:38:fd:2e:d2:07:99:33:df:da:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:87:60:3B:8A:CD:DD:BF:E5:44:8A:EE:93:FA:8B:19:F8:1A:B2:BF
X509v3 Authority Key Identifier:
keyid:4E:EC:C1:61:FC:AE:24:16:6F:45:F6:88:DD:5F:82:33:20:DD:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuzBYfyuJBZvRfaI3V-CMyDd4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/078e58-f7ac-4964-9eb6-cdc0b0494b9f/1/TuzBYfyuJBZvRfaI3V-CMyDd4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:0d:4f:7d:eb:2f:86:bc:0e:8f:9c:d2:dd:20:0d:b4:6d:
ac:7f:19:c2:51:03:71:00:b7:9e:0a:86:c3:57:1c:ad:0f:6a:
b3:f6:2a:25:2f:a0:45:ea:90:1f:e8:2a:82:83:fa:77:4b:9d:
c4:d3:0b:85:fb:7b:48:41:43:4a:06:26:9b:e8:47:4f:e1:89:
e3:2e:1c:0a:f9:01:4a:76:ff:a9:29:03:6a:c3:cd:03:ff:44:
63:c5:0d:bc:43:e5:fa:32:20:5d:66:bc:b5:8b:37:cd:66:ec:
d4:8c:71:31:13:23:19:e8:fd:01:c2:64:85:9a:35:6a:24:f0:
79:3b:ef:39:68:a6:f8:d8:dc:3d:27:31:10:5c:1f:61:15:5f:
d1:a0:b4:27:17:ee:87:8b:92:25:90:ad:dc:d6:fe:5a:0c:d7:
19:f0:39:50:72:9f:27:c3:38:16:f5:88:3f:a4:a6:0f:2d:3f:
b4:4c:76:67:29:b0:56:0e:91:9f:76:14:c2:0e:44:f7:54:52:
a9:f0:56:f0:a1:ba:00:81:c3:b0:b4:eb:76:e2:1a:1e:af:b8:
fd:c6:0b:85:6f:b9:64:ff:74:ad:75:e9:84:98:ca:2c:99:51:
cd:b4:3d:d0:50:42:bf:ba:a5:7b:2a:06:02:56:23:da:f1:7b:
26:db:01:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLFS7vlD7w4Rm3rQ+1mU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWNjMTYxZmNhZTI0MTY2ZjQ1ZjY4OGRkNWY4MjMzMjBk
ZGUyZmUwHhcNMjYwMzI4MDIwMDU5WhcNMjYwMzI5MDIwMDU5WjAzMTEwLwYDVQQD
Eyg0NTg3NjAzYjhhY2RkZGJmZTU0NDhhZWU5M2ZhOGIxOWY4MWFiMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpUKCuzWJo7pYENW/XUmJMtKUoX
7DxJtqBSetvTZKlybv6HcCEPLAYJHMSFgHn+JilW/vjBXsQcox5ffIocLGU6SzlH
/+UDIWWdLkEECxtUAfceYmtdjHWayEVXD977NhcvSUtGCa9L9STcCIRUCkpKrMqm
Ex0Mm8Of8j7cqMnMxbCQhWXbhP8beAb4Jkyuab65hOwKZ7LL4YWg2sFoc3nFs6tD
Pi6TDEs14f4iPyqBVz1zNN4dUw33qY+Lo+sbbutiEMHNMmMFHkGVnx5NenFOB06d
Iooxm0q3NINTqKdu47ytXYdlGgAszNu/yF+lCEjTY/Q4/S7SB5kz39pNmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWHYDuKzd2/5USK7pP6ixn4GrK/MB8GA1UdIwQY
MBaAFE7swWH8riQWb0X2iN1fgjMg3eL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wNzhlNTgtZjdhYy00OTY0LTllYjYt
Y2RjMGIwNDk0YjlmLzEvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wNzhlNTgtZjdhYy00OTY0LTllYjYtY2RjMGIwNDk0Yjlm
LzEvVHV6QllmeXVKQlp2UmZhSTNWLUNNeURkNHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmcNT33r
L4a8Do+c0t0gDbRtrH8ZwlEDcQC3ngqGw1ccrQ9qs/YqJS+gReqQH+gqgoP6d0ud
xNMLhft7SEFDSgYmm+hHT+GJ4y4cCvkBSnb/qSkDasPNA/9EY8UNvEPl+jIgXWa8
tYs3zWbs1IxxMRMjGej9AcJkhZo1aiTweTvvOWim+NjcPScxEFwfYRVf0aC0Jxfu
h4uSJZCt3Nb+WgzXGfA5UHKfJ8M4FvWIP6SmDy0/tEx2ZymwVg6Rn3YUwg5E91RS
qfBW8KG6AIHDsLTrduIaHq+4/cYLhW+5ZP90rXXphJjKLJlRzbQ90FBCv7qleyoG
AlYj2vF7JtsBXg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:19:08 2026 by rpki-client