Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: Nit4GArU1BLCBGYx7MmADmUeAuDdfgLMuMeATaR9JeE=
Subject key identifier: 73:EA:3E:0D:12:B5:B5:21:5E:C5:78:8F:19:47:60:D8:FA:56:A2:61
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01A0D5022BE2FE40D122583DAFD8F1618460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 1747
Signing time: Thu 24 Sep 2026 20:01:24 +0000
Manifest this update: Thu 24 Sep 2026 20:01:24 +0000
Manifest next update: Fri 25 Sep 2026 20:01:24 +0000
Files and hashes: 1: luzq3QatRtvsM_tav41tExaw3UU.asa (hash: CgV/sZKmh8DSn/OeHmUQ5q5ffkhFJN41kTfbg8horZ0=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: re7v2owDVdqcozRqQvvntgSPYnkpe/FM6AaJXMuzDwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:2b:e2:fe:40:d1:22:58:3d:af:d8:f1:61:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Sep 24 20:01:24 2026 GMT
Not After : Sep 25 20:01:24 2026 GMT
Subject: CN=73ea3e0d12b5b5215ec5788f194760d8fa56a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:86:82:de:b3:ba:99:9b:3b:6b:96:1f:8f:
72:d5:df:55:e3:b6:35:fc:f6:e5:2a:0e:be:4a:30:
c0:36:2a:06:8f:ef:e3:5d:37:da:ad:51:29:92:c0:
99:6a:a2:fc:95:98:8b:32:5b:da:38:d3:e9:02:ef:
55:b0:f8:bb:40:39:af:56:64:6f:23:86:d2:0a:95:
a4:d2:55:09:7d:33:d6:9b:54:69:de:58:f3:79:44:
d4:c4:16:3a:d0:61:21:b6:f2:eb:5c:84:44:10:79:
64:59:0d:eb:8a:c1:79:e0:bb:ed:84:26:58:d3:ff:
16:a7:14:e8:8d:8f:fd:ef:f6:ac:e8:7e:97:be:55:
1c:01:ce:60:01:14:7a:d2:dd:3a:91:66:fa:d6:b3:
eb:e4:4e:f6:7e:24:bc:63:08:4a:42:6e:e0:92:c3:
6e:6a:84:1a:05:6d:8d:ab:6d:dd:97:d7:ad:ff:ca:
0a:fa:f6:97:64:02:67:75:bd:b2:7d:22:81:36:7d:
13:94:9f:4f:99:5d:e2:f2:5d:54:bf:30:26:38:00:
66:5d:cd:ed:58:b4:f8:b2:de:bb:da:2a:5e:83:8a:
22:a3:f5:03:60:b9:2a:b7:2f:81:b3:63:0c:18:cb:
a8:5b:f5:65:80:a4:f9:9c:0c:ae:c6:a3:8c:b5:fd:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:3E:0D:12:B5:B5:21:5E:C5:78:8F:19:47:60:D8:FA:56:A2:61
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:25:11:f8:25:69:a9:f4:37:bc:97:94:16:3c:31:5a:6c:77:
9b:c5:fe:ad:14:97:90:0f:d8:4c:5d:c6:3f:64:0c:bc:aa:dd:
ee:4b:35:3a:a9:2a:e5:88:a7:8e:a5:5b:96:3e:08:71:88:2c:
11:f7:2a:72:9c:e2:2d:59:cc:a9:3b:34:9e:10:88:c6:ad:6e:
5c:7d:22:b3:78:03:30:c3:08:c5:72:dc:c4:cb:03:f0:25:bf:
61:3b:8a:02:49:04:fc:76:db:e7:d2:a2:f7:c3:ef:92:d2:2c:
93:09:8e:84:21:bc:38:9d:87:54:93:06:33:bd:a5:92:5c:86:
9a:5b:73:4d:88:f6:fb:7c:21:d2:d1:c1:4a:23:9d:9e:e6:2f:
45:3d:68:67:07:fc:37:32:e1:92:47:d2:8b:07:66:08:83:99:
fe:bf:e2:3b:e9:79:af:43:27:8e:cc:70:4a:99:9b:4f:a4:f6:
d7:77:7b:8f:81:f0:2e:f2:ee:3a:32:e1:51:3f:8b:0b:89:f1:
ca:50:c2:90:79:13:d8:c6:33:84:dd:0d:86:a2:04:b6:ab:ec:
76:1d:81:e0:f7:12:2b:f9:45:73:e5:fd:9b:f1:fd:e8:66:62:
08:35:9a:1f:f7:06:47:a9:a7:38:e9:bb:93:b5:97:29:dd:b2:
4f:d4:95:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAivi/kDRIlg9r9jxYYRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl
ZTM5YjUwHhcNMjYwOTI0MjAwMTI0WhcNMjYwOTI1MjAwMTI0WjAzMTEwLwYDVQQD
Eyg3M2VhM2UwZDEyYjViNTIxNWVjNTc4OGYxOTQ3NjBkOGZhNTZhMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+mGgt6zupmbO2uWH49y1d9V47Y1
/PblKg6+SjDANioGj+/jXTfarVEpksCZaqL8lZiLMlvaONPpAu9VsPi7QDmvVmRv
I4bSCpWk0lUJfTPWm1Rp3ljzeUTUxBY60GEhtvLrXIREEHlkWQ3risF54LvthCZY
0/8WpxTojY/97/as6H6XvlUcAc5gARR60t06kWb61rPr5E72fiS8YwhKQm7gksNu
aoQaBW2Nq23dl9et/8oK+vaXZAJndb2yfSKBNn0TlJ9PmV3i8l1UvzAmOABmXc3t
WLT4st672ipeg4oio/UDYLkqty+Bs2MMGMuoW/VlgKT5nAyuxqOMtf2FgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPqPg0StbUhXsV4jxlHYNj6VqJhMB8GA1UdIwQY
MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt
ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl
LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiUR+CVp
qfQ3vJeUFjwxWmx3m8X+rRSXkA/YTF3GP2QMvKrd7ks1Oqkq5YinjqVblj4IcYgs
EfcqcpziLVnMqTs0nhCIxq1uXH0is3gDMMMIxXLcxMsD8CW/YTuKAkkE/Hbb59Ki
98PvktIskwmOhCG8OJ2HVJMGM72lklyGmltzTYj2+3wh0tHBSiOdnuYvRT1oZwf8
NzLhkkfSiwdmCIOZ/r/iO+l5r0MnjsxwSpmbT6T213d7j4HwLvLuOjLhUT+LC4nx
ylDCkHkT2MYzhN0NhqIEtqvsdh2B4PcSK/lFc+X9m/H96GZiCDWaH/cGR6mnOOm7
k7WXKd2yT9SVEQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:58 2026 by rpki-client