Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: nVEeisw7iWGfwtxxidvKfz/Et+w1ko2Xlaoj0l0ZUXQ=
Subject key identifier: DE:FD:6E:E2:3D:5C:08:45:C9:F2:CD:CC:FA:B3:D1:6E:16:14:74:61
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 019D27A8ECE6FE7C6CCE282737A9DFFADA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: vsdVAnAympnRl+FWZEuJf33x49CvUJoypRynrkhv/wc=)
2: wkBVr3VKx8cAN-J4mgwDM9fyDIw.roa (hash: pXEfo0mUUpTRtyfYgZ5QmNahxpHjcAC/DZR0RKo1OaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ec:e6:fe:7c:6c:ce:28:27:37:a9:df:fa:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=defd6ee23d5c0845c9f2cdccfab3d16e16147461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:c6:48:e3:e0:1d:bc:fc:25:54:e3:9f:b8:
ae:53:42:df:30:4c:28:a5:77:a5:ea:a0:59:44:ad:
02:92:e2:b7:f2:4a:5b:e7:65:23:00:d4:7a:80:90:
b2:76:a9:33:8a:80:27:2a:a4:c8:e2:78:6c:bd:63:
39:d8:23:2a:95:0d:d7:66:19:50:20:fa:57:4c:2f:
94:7a:14:44:96:f6:f3:62:bc:dc:e0:9e:50:3d:35:
93:62:44:2d:28:d8:55:c6:43:af:c8:a3:e5:ab:1f:
1c:77:ae:23:e3:80:be:7f:f0:49:31:04:e9:7b:0a:
f9:f8:8a:4a:45:8d:ff:8c:6c:8b:ba:5b:c7:5c:e1:
ca:58:4d:da:db:28:4b:c1:67:5e:d8:85:e1:0b:95:
3d:2e:20:13:d8:84:ec:52:f8:3b:07:73:05:8b:16:
70:61:35:48:3d:c7:b9:84:59:44:38:60:cd:ef:dc:
08:48:26:37:07:6a:8a:fa:78:57:3a:5d:50:17:64:
6f:be:2b:2c:98:cb:45:2b:66:52:2d:47:af:9d:bc:
4b:0d:93:32:c7:1a:fd:5e:6e:17:b1:14:c7:92:f5:
67:11:29:97:e8:b5:f6:3c:1c:eb:7e:8b:00:29:f2:
18:79:26:33:55:d8:f1:32:f6:dd:be:35:77:1b:38:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:6E:E2:3D:5C:08:45:C9:F2:CD:CC:FA:B3:D1:6E:16:14:74:61
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:e1:c4:c4:09:26:96:96:2f:f9:2e:9e:60:05:f8:10:10:
28:5e:91:5d:77:57:66:b1:8a:c9:f0:50:80:2b:70:32:de:8e:
51:a9:15:ae:67:08:80:3b:f6:80:e6:0d:35:8d:e2:5a:df:b3:
28:81:fe:70:bc:53:f0:d0:b9:9d:c3:e6:72:43:66:d1:eb:fc:
05:34:d3:78:d6:3d:7e:f2:a4:c2:62:05:7a:c1:ec:b0:40:44:
47:48:f1:91:8f:60:14:65:cb:9c:7f:4f:cb:95:df:d9:7e:01:
80:df:cd:fa:1d:bd:6b:3c:bc:36:18:bb:19:ed:e6:fe:d3:1f:
0d:26:99:31:67:8e:d0:86:11:b5:50:d2:04:f1:0d:8a:24:3a:
d5:ec:25:39:73:79:b2:73:66:c5:f5:71:47:cb:e9:10:fa:da:
ed:3a:00:d0:6a:61:76:9c:cd:af:92:f9:94:f9:08:57:50:1d:
e4:96:92:7a:70:11:13:5b:52:2d:28:e9:e0:a5:80:2b:e0:98:
ef:1c:37:db:13:4b:b6:df:d0:f2:27:4a:22:7e:39:da:61:36:
89:e2:fc:91:6d:f6:3c:62:48:12:7b:ee:08:93:bd:1a:2f:4b:
30:b8:38:fa:eb:a2:eb:32:e2:af:fa:0d:41:27:5c:63:b5:6e:
60:2b:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:31 2026 by rpki-client