
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: NsgCo8FdPqDcJNzuAy99Ob/whfnimMcx/TvLBtFgJ6k=
Subject key identifier: E3:E7:89:0E:04:21:36:6D:CF:D7:C0:7F:DD:8C:5B:13:25:1D:4C:10
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 019D28F230AA0C0DE7A6ED753B2D10B5872C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 15AC
Signing time: Thu 26 Mar 2026 07:00:53 +0000
Manifest this update: Thu 26 Mar 2026 07:00:53 +0000
Manifest next update: Fri 27 Mar 2026 07:00:53 +0000
Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: 0iUm2msnlIXvsmfvoZMBcQOuueYXrwQrvJJvlfiOqm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:30:aa:0c:0d:e7:a6:ed:75:3b:2d:10:b5:87:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Mar 26 07:00:53 2026 GMT
Not After : Mar 27 07:00:53 2026 GMT
Subject: CN=e3e7890e0421366dcfd7c07fdd8c5b13251d4c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:5e:dd:f7:81:9c:84:ce:52:00:de:f3:53:
a0:00:9f:5e:0f:bb:a4:5d:ca:47:86:32:07:7f:21:
2b:d1:18:e6:51:37:b6:f2:3a:26:91:6f:3b:d3:96:
7b:be:b5:a5:44:56:78:31:d8:0c:3a:0b:f6:4b:bd:
a7:c4:95:ae:13:d7:0a:14:4d:74:12:a1:0c:89:fd:
11:d9:7c:c9:cc:7b:ed:04:fb:f4:be:c4:a0:38:9d:
76:2e:4b:ca:d0:55:2d:63:66:20:62:a4:73:b5:79:
6a:b3:78:15:0c:97:5d:59:b9:ea:5c:df:08:1d:67:
c1:4b:ed:c6:20:34:eb:61:84:15:82:bd:4e:00:e0:
ce:b6:cc:57:2c:b5:ba:1d:01:e2:45:ff:60:dd:04:
aa:3d:fd:97:2a:39:37:40:0e:89:0f:f3:15:f1:4c:
c1:e6:f1:04:86:af:f4:05:af:2c:46:c5:9b:18:fe:
e7:9d:eb:36:9a:b9:25:fc:44:59:48:97:0a:b0:49:
a0:21:f0:ea:4d:1d:62:93:cc:c4:d0:ab:ec:7b:4c:
da:23:43:59:a3:80:78:9c:9b:0c:1b:43:2d:54:9f:
06:cd:f6:47:b4:0e:dc:a4:f4:ac:f1:d0:7b:4d:f0:
53:8e:66:23:38:85:88:5b:70:76:50:77:ad:39:23:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:89:0E:04:21:36:6D:CF:D7:C0:7F:DD:8C:5B:13:25:1D:4C:10
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:38:f5:82:e2:c8:d9:df:95:d8:3a:5c:4a:f2:6a:0f:8c:08:
36:f0:d5:e1:e7:0c:c2:ae:b2:fe:66:95:7f:23:d6:e0:c3:69:
52:52:62:b7:e0:35:f3:97:6c:bb:61:46:12:4b:35:de:db:c9:
4f:42:88:57:3e:55:16:ae:d1:09:ae:cb:2c:6e:6f:8d:d1:a5:
6e:f1:51:46:8a:4e:e7:8a:bb:f6:e6:e2:78:35:51:d1:a0:71:
41:b0:0e:7c:1f:ab:3a:9a:59:22:24:56:35:12:bb:d6:0f:e8:
fe:13:63:05:c5:fc:27:d4:3f:53:c1:fe:08:3e:8e:d9:ef:f1:
08:bc:81:26:58:3a:07:6b:cb:5f:a7:9d:6d:51:73:9f:7f:00:
38:4c:50:5d:77:8d:0b:30:d0:cb:33:33:8e:e9:0a:d7:b2:1d:
49:f9:14:fd:45:a8:78:a9:4e:80:b7:b1:55:75:06:ad:76:29:
fc:ac:12:fa:bd:07:19:cf:e0:ae:dc:79:5a:7a:11:b5:d8:74:
ab:16:d6:04:86:7e:64:f3:80:07:2a:9a:ab:da:a6:6c:20:59:
3d:6b:ea:fb:9b:be:61:5b:32:f1:4f:e8:92:1b:f6:7c:62:3e:
20:e2:18:6c:8f:7f:45:8a:31:38:13:1d:fc:58:6b:d1:f9:e2:
3e:d9:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:57 2026 by rpki-client