Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: I3yCTGSlCe9Tkxt2+gw9D0Osp+00xLuWXIPfJFhh1Pw=
Subject key identifier: 8F:37:9D:C2:EC:13:47:7B:AA:CF:19:22:7F:9E:21:9B:F8:89:4E:C9
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019F935BC9D206439B9F2FC008260DEADE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:01:33 +0000
Manifest this update: Fri 24 Jul 2026 09:01:33 +0000
Manifest next update: Sat 25 Jul 2026 09:01:33 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: p9BXaoM7yppBXLaluR71CeRqDZvaR/wf6e/CBSd6M7w=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:c9:d2:06:43:9b:9f:2f:c0:08:26:0d:ea:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jul 24 09:01:33 2026 GMT
Not After : Jul 25 09:01:33 2026 GMT
Subject: CN=8f379dc2ec13477baacf19227f9e219bf8894ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:67:21:18:39:99:94:12:74:6c:99:6d:d0:
b1:c0:a2:bf:7a:6d:51:53:cc:35:c4:c2:8b:9e:82:
7a:b9:c4:c5:33:f8:6c:86:9b:5f:1c:ed:f1:07:73:
37:eb:f2:57:d4:31:3d:de:9a:0d:a5:fb:a4:3a:8b:
2b:b7:ef:69:3c:40:4f:0d:6c:a0:45:75:9a:d0:03:
98:64:90:0f:e3:9e:8c:8d:14:12:0d:b4:cd:3a:36:
7f:c4:5d:b3:78:d8:ed:5e:39:7d:b4:dd:de:a3:2d:
68:ae:60:53:f1:7a:69:56:0d:f4:fa:17:2b:cb:51:
64:e8:3a:32:62:b2:96:9d:02:ab:8f:f6:95:51:ce:
63:57:d2:42:80:14:84:ee:51:92:72:ac:78:c8:9d:
30:79:32:c4:da:d0:3c:ff:9b:57:15:ef:d3:25:8d:
bc:e9:bd:52:b5:19:7a:25:48:6f:2d:42:10:69:d1:
19:17:0e:4e:47:e9:d5:68:93:cb:6e:47:db:64:dc:
27:15:cb:58:e5:e2:5a:8d:11:80:4b:e8:93:3f:dc:
ef:d1:fd:7f:f5:1c:39:b1:e1:7a:32:23:b3:4a:4b:
67:f1:90:be:91:6e:6c:ee:31:12:43:24:5c:77:d7:
1a:ac:cc:12:aa:85:fe:71:04:67:97:ba:44:8a:73:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:9D:C2:EC:13:47:7B:AA:CF:19:22:7F:9E:21:9B:F8:89:4E:C9
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:59:49:ec:ab:de:80:24:3a:a6:9f:11:f7:28:71:1c:9a:
2f:2e:4d:98:3a:b5:9d:14:5f:d5:46:4e:80:79:bd:e0:97:9c:
cc:98:bc:c8:ed:9d:16:05:cd:80:ca:1a:f8:15:73:36:d3:13:
4c:e5:f8:97:8f:0e:f5:8c:15:a8:61:0c:12:f7:ec:73:90:33:
05:4c:f1:88:bc:77:c5:e3:fe:d8:9f:16:ef:e4:c9:a4:56:90:
f7:ef:ea:46:58:c8:b1:6d:0f:f4:34:b4:41:ca:89:6d:57:d6:
84:3a:38:65:4b:6e:2a:52:7b:1d:1d:41:7c:e9:fb:05:a2:df:
98:4c:96:be:8f:38:b1:b9:ee:39:f7:41:ab:8a:e0:01:44:77:
99:a0:f4:60:58:ff:43:1b:73:77:74:89:88:fd:b5:65:ab:23:
26:51:e1:ea:1b:26:58:b1:a7:46:46:ad:8b:a0:d9:29:02:b1:
40:fa:52:5e:e9:0a:f4:22:b7:67:89:6c:43:1e:7b:a0:a1:98:
a5:20:8f:be:e0:5f:e7:6d:17:74:69:fb:9f:41:81:90:21:4e:
2b:74:4a:9c:04:df:22:d3:c4:1c:1a:55:f4:cc:8b:0d:84:06:
ab:82:5c:59:60:dc:77:8e:9b:aa:7b:90:78:fc:2b:4e:04:4d:
70:63:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:59 2026 by rpki-client