Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
File: Tu24VWoM8egtjnx5BY8O-1BALKY.mft (raw, json)
Hash identifier: QVICcmTk9B4uil+5e6i14SyzXh1yvNbdlderC2LsCrM=
Subject key identifier: 06:4C:0A:FA:34:CE:60:21:31:56:A7:87:88:6A:22:4E:C3:A5:C2:FA
Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Certificate serial: 019D2C2AB0823ECFF5834E98D6E359273A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
Manifest number: 0205
Signing time: Thu 26 Mar 2026 22:01:28 +0000
Manifest this update: Thu 26 Mar 2026 22:01:28 +0000
Manifest next update: Fri 27 Mar 2026 22:01:28 +0000
Files and hashes: 1: Tu24VWoM8egtjnx5BY8O-1BALKY.crl (hash: ljO61cb/zduoIXgZzF7aoIygreaHFTS1+MLaDK/C3OI=)
2: c3hVC3AMElxQ2gQM00S6h3ot4Ps.roa (hash: 6HgFrXl2jim8+KrnKQ6sq1jTwbkU8y1XtU8TNMvAGjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:b0:82:3e:cf:f5:83:4e:98:d6:e3:59:27:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6
Validity
Not Before: Mar 26 22:01:28 2026 GMT
Not After : Mar 27 22:01:28 2026 GMT
Subject: CN=064c0afa34ce60213156a787886a224ec3a5c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:04:57:4e:2e:6f:48:76:41:9f:d9:74:32:
47:b8:d8:1c:ab:e5:9c:41:38:77:d7:66:85:37:f5:
7c:ef:80:6e:28:3b:2b:6e:cc:a8:ca:ea:9c:1d:97:
c5:d0:a2:72:ea:2e:3f:53:24:b0:11:88:3c:ba:e5:
02:a4:67:bc:24:1f:af:5d:44:90:fd:58:55:ae:f2:
71:57:e4:a1:51:17:7b:ce:bd:3a:d6:36:88:1c:89:
87:34:1e:e5:8d:89:a7:0b:97:bf:65:4c:c2:b1:6d:
20:9d:fa:2d:fe:30:c1:9b:f0:7f:6b:d1:03:92:25:
a2:39:e5:64:4f:37:fd:0c:fc:42:c5:d3:57:3e:d6:
78:0f:02:06:95:af:9a:5f:ad:36:1e:22:dd:e5:a6:
1c:ba:a1:7b:f9:72:41:9b:e9:f9:06:2c:65:fe:5c:
62:f1:d8:3d:9f:7a:40:80:c0:a8:d0:c0:b8:fb:28:
13:3f:b6:0a:26:2a:ee:7d:21:11:98:2a:4c:28:12:
25:18:47:f4:88:0f:b5:a4:84:41:e8:7a:3a:c0:d5:
c3:c9:a5:eb:e3:1a:25:6f:14:de:1a:9f:ed:85:cb:
b1:84:a6:26:91:fd:15:ab:ae:94:b4:74:92:1b:41:
f5:7c:84:40:f4:67:0e:e3:27:36:47:d7:01:da:6b:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:0A:FA:34:CE:60:21:31:56:A7:87:88:6A:22:4E:C3:A5:C2:FA
X509v3 Authority Key Identifier:
keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:0f:ad:5c:5b:62:81:7c:f0:ff:d3:39:a0:34:f8:c3:13:
e8:df:c2:88:18:69:60:4e:e3:7d:6a:db:ec:38:e4:6e:60:01:
9e:c7:9a:c2:9b:1a:f5:a4:b7:06:5c:2b:8b:7c:d7:15:4a:71:
c7:54:53:b3:52:0a:0e:08:86:12:1c:9b:73:7c:00:df:cc:3b:
01:3f:28:f2:f6:93:ef:d9:16:65:a3:9f:fa:29:a7:02:24:6f:
6a:f8:6e:26:ad:24:c8:f2:1c:cf:53:c2:1d:0b:1a:05:54:9d:
67:4e:2a:ca:7a:b8:38:5b:8a:a6:90:34:bc:4d:4e:dd:f8:24:
4c:68:b6:93:40:92:81:c9:b3:03:99:46:e9:74:ba:55:87:7b:
11:6d:59:4a:e4:eb:72:78:e4:ee:2a:59:8a:8b:35:e5:75:05:
61:66:e0:1d:90:36:09:d7:cd:5e:3f:bf:d5:86:95:1c:f6:52:
2d:2b:d7:44:2e:a3:79:1f:a2:59:59:d5:61:8f:7f:1b:75:58:
f0:d8:a8:eb:09:2b:1a:88:f2:2b:d0:2f:6c:44:50:7a:bf:7c:
4c:91:4c:22:82:1c:67:ce:78:8e:f9:c6:b0:48:16:95:de:09:
51:ee:a8:ab:62:a7:83:01:e8:d0:0f:81:6a:51:f8:fc:ef:e2:
ed:37:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:02:45 2026 by rpki-client