Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: u/uSc1Io7HKFzGeB2g49xL9PG730wLQRJ2bbaJMOvzA=
Subject key identifier: 8C:65:2D:29:CC:82:05:DB:73:60:18:AF:9E:14:71:4B:FA:04:E0:B4
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 019E1F1135605A25C2D8AFAD1E62F5C1A1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 15DF
Signing time: Wed 13 May 2026 02:01:21 +0000
Manifest this update: Wed 13 May 2026 02:01:21 +0000
Manifest next update: Thu 14 May 2026 02:01:21 +0000
Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: 6n3Uh0MTb2HmC8Y1EawjzANpPA4BzXRL57z8Qvjh3t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:35:60:5a:25:c2:d8:af:ad:1e:62:f5:c1:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: May 13 02:01:21 2026 GMT
Not After : May 14 02:01:21 2026 GMT
Subject: CN=8c652d29cc8205db736018af9e14714bfa04e0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:75:3c:60:28:b5:d4:33:4e:4f:52:7f:90:
46:e0:0d:68:91:4f:61:45:0f:5d:63:cb:28:23:fc:
99:0e:d6:aa:54:ee:b7:2b:03:20:c4:42:19:30:b0:
aa:54:46:b0:b0:11:3a:90:aa:85:81:1f:cb:9d:40:
40:88:f6:9b:04:93:ea:7b:d5:6e:2e:7e:94:ff:d2:
a8:62:54:99:21:b7:3d:b9:d3:30:04:8d:d1:32:06:
75:10:9d:ee:d8:75:d0:ba:33:c8:5f:44:b2:9e:f6:
2d:bd:c1:9f:91:df:16:25:66:21:38:43:64:9f:80:
ad:0c:f8:b9:15:c4:d0:4f:31:6e:51:47:7a:49:1b:
f8:cc:35:c2:6b:38:3e:57:fa:c3:e9:e5:42:90:2a:
0f:75:d3:5f:55:c1:a6:97:af:9f:24:15:3a:60:d9:
d7:7e:41:5b:f4:d8:0b:f4:1b:44:0d:50:4b:1e:a2:
c6:3b:dc:64:fd:e1:40:f9:9f:08:50:be:59:83:f4:
b8:4b:39:5d:cf:f1:34:f6:aa:35:52:88:31:03:88:
fe:47:20:a6:20:27:38:bb:5e:97:6d:0c:12:a1:3f:
04:5e:19:2a:a2:1c:60:66:60:ea:6f:78:03:d9:4b:
93:48:a3:75:89:fe:17:15:4c:5b:5d:30:ad:ea:c6:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:2D:29:CC:82:05:DB:73:60:18:AF:9E:14:71:4B:FA:04:E0:B4
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:fc:66:45:e4:1d:41:e7:2f:09:40:da:db:ab:df:33:72:
7c:84:dd:f7:74:d5:b4:5a:47:a1:d0:a1:2a:a3:5b:2e:64:c7:
a7:53:6a:60:b7:6b:37:9b:7c:c9:cb:51:f5:30:86:3b:ec:7c:
3e:21:04:43:4c:74:03:21:0f:45:69:17:c6:2f:75:77:b3:4a:
97:5d:e3:a7:20:6c:5c:ae:51:91:b6:89:9e:e8:4b:ff:0f:64:
a6:47:07:b2:48:64:81:56:0e:82:d0:c4:05:02:8d:7b:e1:40:
ea:95:02:fc:2d:6e:f8:5f:b9:43:3a:3a:a6:80:92:dd:e6:94:
0b:d4:c4:67:0b:53:f1:4d:a0:a1:db:0a:9e:c2:ec:7d:11:2e:
4a:e0:6f:b6:be:d8:76:da:ae:28:1e:19:0b:4e:1e:e9:59:bd:
fd:77:e7:de:f6:aa:98:67:ea:c9:2f:12:12:38:bf:58:96:9f:
30:dc:52:a0:50:09:45:99:f4:63:5e:9f:7e:83:d6:b2:8d:a2:
8a:c7:4e:37:9d:d7:c3:41:e4:c1:8a:8b:3b:44:07:ab:a4:6b:
bb:8f:17:c5:44:63:47:57:5d:fc:8f:cf:d0:7d:ab:fc:da:6b:
fd:71:a3:41:a8:ab:65:03:3a:1b:c7:96:3a:8b:44:31:7f:f1:
01:87:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:59 2026 by rpki-client