Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: NHj3Ov2vMzJfyfB4cjQVwwSkUhq0tRVRtCLSWBZTCnU=
Subject key identifier: 6C:5C:5F:59:0D:87:8D:19:D4:D8:9C:CE:54:6D:01:AC:1B:A4:C8:29
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 019D25F0F073A4FA82ED5A81E68F4C61FFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 155E
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=)
2: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (hash: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog=)
3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: oiEUT2/AMjMJMeQgQw6Jyx9vvDNSnezTzEn4RLk+tJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f0:73:a4:fa:82:ed:5a:81:e6:8f:4c:61:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=6c5c5f590d878d19d4d89cce546d01ac1ba4c829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:e5:91:8c:67:97:76:ab:59:9a:78:fd:64:
af:b4:6a:21:b9:63:8c:8d:fe:94:1a:a1:e4:8a:c7:
e0:0f:ae:86:07:09:61:2a:1b:44:2f:2e:65:fc:c1:
e3:81:2f:f2:c5:ef:00:07:0c:ef:7d:88:26:25:6f:
e8:3f:ac:33:09:87:d0:09:de:f9:dd:d9:4b:24:11:
33:d5:e8:9c:76:9e:ba:70:14:ac:7b:14:93:3c:95:
30:ca:87:bd:2a:02:75:2e:0a:f1:c1:a4:9d:f0:ad:
24:25:93:eb:4c:8d:cf:05:72:67:49:e1:c3:44:3f:
5c:ce:1b:88:60:83:b9:a3:58:7a:ae:01:d4:b1:77:
d4:98:6a:b0:35:7f:da:a2:11:7b:51:2f:e9:67:e2:
f5:6b:32:4e:93:36:96:f2:e2:4b:ba:a5:fc:aa:57:
5b:55:70:8f:d7:98:93:a0:3e:e3:84:5b:d8:4e:2d:
09:6c:99:f0:6c:94:26:0b:84:6e:2d:a7:5b:03:61:
8d:ed:7c:a7:49:24:7f:a6:38:42:56:c8:a6:57:c7:
a7:06:c7:bd:27:e4:4c:4b:31:bf:fe:ab:0b:99:53:
18:ae:f0:2c:87:3f:d2:87:96:55:7a:ee:c5:3a:ae:
06:22:83:ce:80:1e:7a:05:90:e5:c4:d0:96:b6:09:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:5F:59:0D:87:8D:19:D4:D8:9C:CE:54:6D:01:AC:1B:A4:C8:29
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:6b:46:3a:3a:bd:7c:3c:f5:74:9c:9a:bb:7a:59:ac:26:
c6:2f:b4:2b:e6:48:d7:51:b4:3d:fe:c3:8e:13:a9:50:09:1a:
8a:0a:6e:65:94:fe:6d:b3:23:75:7d:cc:90:a3:dc:ee:96:98:
e2:1d:33:25:3f:42:8d:76:d9:46:8a:ed:71:e7:7a:cb:a9:d0:
3f:7d:9d:28:76:07:60:bb:e0:b5:18:c3:94:c1:f6:19:cf:fc:
64:0f:5d:07:8b:c6:99:f2:54:2a:9f:de:36:11:95:9d:45:38:
e8:b3:de:a6:0e:fd:6b:00:87:b9:05:5d:7e:19:bb:f1:eb:69:
66:c8:49:e1:22:c6:25:f1:bd:da:65:40:7a:d1:e5:7b:76:ae:
09:f1:22:b9:bf:e5:32:cb:c9:13:10:54:1b:68:9b:f4:ce:51:
46:fe:b0:85:ef:b6:d3:f7:ac:d1:05:5d:f3:33:ef:17:0d:38:
d3:83:d7:09:89:bb:d6:d7:fd:87:98:5a:2c:0f:86:2d:ba:3e:
40:d3:a8:a4:9d:36:09:df:1b:12:3e:b9:07:5d:93:b8:a8:8c:
8e:bc:04:3c:f0:42:e9:5c:57:d2:fc:b9:80:41:59:bb:7e:58:
e8:0b:ef:d4:0a:b4:2d:f8:d3:fc:94:d4:4b:a2:0a:f7:ce:5a:
9f:4e:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:01 2026 by rpki-client