Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: XNUwnLyZZs4PVmzmaRiC8Lz1FIq0ewQAlDgoTUZbwLQ=
Subject key identifier: 0D:73:23:1F:73:E7:C1:ED:70:0D:64:9A:47:01:72:0F:D7:1D:A6:A1
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 01A0F0E71412F66C7A8D52785D62001F222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1A7C
Signing time: Wed 30 Sep 2026 06:01:10 +0000
Manifest this update: Wed 30 Sep 2026 06:01:10 +0000
Manifest next update: Thu 01 Oct 2026 06:01:10 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: //uv+vSBvzrnP6UprRtLmAtFTXr8wSDig1XMa3fwbxg=)
2: Zo68EoQ7mCgSR1Ac-I_gzPgJ-7g.roa (hash: NtmGEmLHAQTVlb8f9+yZ21VR4Q8gT9lhmPzhrly9Ars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:14:12:f6:6c:7a:8d:52:78:5d:62:00:1f:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Sep 30 06:01:10 2026 GMT
Not After : Oct 1 06:01:10 2026 GMT
Subject: CN=0d73231f73e7c1ed700d649a4701720fd71da6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:34:50:70:45:27:59:37:3a:66:e6:06:38:
12:d3:31:73:0d:8a:9a:95:72:2f:c0:30:47:3b:03:
78:1f:ec:59:4c:10:80:7f:72:dc:43:5d:e3:6b:f6:
e4:5b:b3:1c:08:60:7b:53:a4:91:69:56:68:9b:c2:
9a:64:14:06:5d:55:e2:5e:bb:71:1c:ef:45:2c:91:
ab:1c:76:5d:e8:7f:f3:9d:b3:26:52:b9:23:42:c4:
bb:53:f7:f7:e1:b9:2a:05:ca:06:5b:6e:12:7f:b1:
37:e9:d9:c9:f0:70:66:23:80:ef:3c:ab:ae:d8:16:
d2:04:ea:0a:22:58:01:b1:6f:ac:ff:be:20:f1:9e:
de:32:12:d4:2e:09:7e:1c:1a:9c:e9:5c:96:23:a1:
ab:da:30:6f:85:2a:b2:50:1f:08:62:21:2c:8c:37:
cc:06:42:b2:16:07:c3:11:d8:3b:d8:87:5c:61:0a:
a8:5c:d7:ca:69:04:fa:21:f4:10:b5:62:b8:bd:55:
03:6d:af:71:4f:bb:19:92:b0:42:f0:a1:0a:5a:25:
27:6a:45:f9:e1:e4:05:1b:7a:9c:58:6c:56:a2:44:
c9:0e:51:b9:8f:52:dd:28:ff:34:12:da:ee:3f:ed:
13:4a:73:f6:8a:03:fd:fb:59:77:8e:34:f8:94:e3:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:23:1F:73:E7:C1:ED:70:0D:64:9A:47:01:72:0F:D7:1D:A6:A1
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a6:7b:e0:34:c4:e6:03:ee:42:19:a7:47:17:df:33:a3:62:
88:86:1a:ce:a2:a1:d1:fd:ae:c7:a0:c4:38:ad:54:e6:84:ed:
19:dc:0f:de:d3:21:56:61:67:02:6a:98:07:16:f2:3c:06:3a:
6d:82:0b:95:48:22:c5:06:ad:a7:a3:04:3e:33:eb:4a:58:ab:
b6:2b:e1:90:15:d6:d3:13:6b:42:6a:66:92:9f:c9:03:ee:9f:
e1:ee:e4:ef:34:92:04:d0:9e:65:5c:91:47:3b:eb:4e:49:9c:
5a:e5:d3:ce:63:0b:16:49:23:77:c9:f3:4e:ab:68:9d:6d:3a:
70:84:96:c8:79:7a:5b:05:65:f6:f9:e9:91:74:85:b1:4c:e5:
7d:10:a7:0e:1a:2f:55:d1:93:f7:d4:ac:3f:be:64:20:7a:ea:
df:34:fc:a8:4f:27:d8:ba:a3:4a:5c:fa:ad:1d:25:e5:48:ac:
61:b0:a6:89:f5:19:10:5a:ae:a9:83:61:25:60:d6:d7:92:bc:
b5:d5:72:7f:97:77:4c:bf:e4:e9:6f:7e:6c:bd:a8:b8:1f:e6:
7e:4d:b1:09:09:fd:28:fb:12:e3:6f:5d:18:13:d8:47:46:c6:
6e:f1:2b:b0:0d:8f:78:82:ab:3f:0b:64:6f:74:52:a0:77:e9:
6b:c7:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:05:36 2026 by rpki-client