Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: jrVDVqrVKEaDMgOIw5vE9/fVauvgzjXmZxllvQyIAb4=
Subject key identifier: B1:1D:87:73:D0:39:4C:9D:FD:54:FC:E1:61:57:03:B0:2D:5D:BC:23
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 019D2583C5F357505594A0F9184744095E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: 3H9A/o2DXYhLF2E8PJrD70Ew5XOp0bTlVPf/mhLVe9s=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c5:f3:57:50:55:94:a0:f9:18:47:44:09:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=b11d8773d0394c9dfd54fce1615703b02d5dbc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:80:b4:8a:97:b3:e3:36:3e:47:ea:5a:dd:
98:3f:65:6c:6c:8b:4f:5d:53:16:d9:60:e0:ad:3c:
06:2f:08:40:c8:47:45:21:ee:55:52:f8:07:a3:70:
6c:b4:63:30:d6:7d:14:7f:64:40:e8:b5:05:cc:a7:
42:01:ff:e8:d7:1b:4d:29:8a:91:54:a4:86:a4:df:
f0:ec:2b:7c:4a:ed:e5:37:b4:3f:36:ed:a1:c3:0a:
4a:dc:67:3f:fc:10:77:e9:3a:61:45:b5:86:fd:ef:
62:18:be:bd:68:fc:16:79:b2:6d:04:f6:a8:1b:6e:
94:90:ac:6c:38:74:cd:91:14:3c:15:92:61:93:e0:
0d:54:91:90:f6:3f:f5:e6:43:2d:9a:10:12:38:45:
41:1e:ac:e0:bc:9d:15:88:b2:1c:57:60:9f:dd:d3:
92:92:61:79:f5:2d:a5:39:9a:9b:64:27:6a:c1:a9:
38:e7:43:10:63:df:2b:92:f0:91:4d:12:f4:6f:90:
02:3f:83:ef:f9:60:92:e4:4f:bf:10:e6:fe:1b:ca:
d3:f8:31:00:1f:7d:97:67:31:25:3d:c1:68:5f:98:
26:bd:18:92:45:3b:4c:bd:a6:c6:ca:f5:7f:fe:8c:
83:da:46:0c:de:98:c2:5d:40:e5:7e:f3:8e:a1:a7:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1D:87:73:D0:39:4C:9D:FD:54:FC:E1:61:57:03:B0:2D:5D:BC:23
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d6:34:98:e5:6b:fc:7a:14:1f:6e:43:de:37:49:d5:27:4b:
b4:e6:7a:5f:61:06:58:86:80:f7:b3:da:3f:1b:2b:6d:3b:cb:
da:67:c8:c8:bb:7e:86:22:dc:76:c9:99:4a:4d:c1:ef:5b:9c:
39:a3:55:e2:3d:92:28:49:de:95:9e:61:11:c0:4c:e8:8c:45:
c7:c5:cd:4a:9b:5b:6d:ff:3f:07:9d:83:e0:36:5b:a8:5a:f0:
4f:25:2e:16:19:f6:14:c1:d1:1d:11:e7:ff:c2:96:89:cf:60:
29:29:3b:ea:db:cf:1a:34:3f:17:18:60:0e:6a:d8:3a:04:cc:
d2:17:52:13:3a:bf:fb:cc:ec:ec:14:75:54:16:04:1b:d4:f0:
82:77:6d:a2:83:db:b6:3a:56:50:af:77:2c:08:0e:ee:7e:e4:
5f:05:59:f4:70:7b:8d:06:05:bf:c4:03:67:6b:ac:e0:14:b6:
31:d6:6c:90:a7:57:f0:4b:71:69:d3:76:c9:56:f6:a2:46:e1:
d2:8f:d1:69:a5:44:6b:6f:8d:05:04:a9:21:b1:bd:e5:cd:40:
8b:be:85:f8:a0:f1:bb:fd:84:8a:05:82:f9:76:5c:1d:16:bc:
30:70:4e:3e:d5:71:cf:0e:16:d0:7e:58:8a:ea:c7:9c:dc:ed:
ba:da:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:13 2026 by rpki-client