Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: NCXlsukPuur/l8qkflrRodn6tvrLZzRV+HVzqrDh54E=
Subject key identifier: B0:8A:92:71:2B:A5:D0:E1:25:7E:D3:BB:AC:65:95:09:0A:78:57:D9
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 01A0D383E2EEDAAE29A9AAB48468620AF29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 1792
Signing time: Thu 24 Sep 2026 13:03:50 +0000
Manifest this update: Thu 24 Sep 2026 13:03:50 +0000
Manifest next update: Fri 25 Sep 2026 13:03:50 +0000
Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: /piDLAuBvva1zmZzSazL910pOGj+F2BqgM7QibYddJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:e2:ee:da:ae:29:a9:aa:b4:84:68:62:0a:f2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Sep 24 13:03:50 2026 GMT
Not After : Sep 25 13:03:50 2026 GMT
Subject: CN=b08a92712ba5d0e1257ed3bbac6595090a7857d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:84:ef:d4:7c:a0:9c:8f:34:fc:fb:74:e8:
bc:53:b9:9a:97:85:a0:a0:7f:44:a6:d7:c2:ba:1f:
64:79:b7:84:84:20:88:54:86:9e:ad:e0:76:d0:19:
1b:18:72:30:ab:b6:43:3a:16:8b:6c:cd:fa:ca:06:
13:f0:6a:09:ee:63:ec:ec:36:b4:21:11:e3:39:40:
11:33:94:40:60:12:8b:13:e0:c0:1f:37:d1:e1:cc:
3b:dc:57:90:1f:be:28:cd:7c:f6:d9:11:07:06:bd:
0f:0f:4b:47:95:17:58:88:1f:aa:b0:ad:00:63:ac:
23:8f:a3:03:80:4c:00:5e:67:34:02:03:9c:bc:6d:
49:60:42:5a:d0:3f:c3:65:78:0e:b9:de:9d:78:03:
da:4b:1f:d9:bb:20:89:ff:1d:5c:f0:ff:b3:9b:de:
d9:08:c8:5b:74:e0:93:8c:00:ab:9a:7d:ae:cc:a0:
31:14:4e:04:02:e4:3e:88:3a:48:39:91:62:f1:49:
59:ff:25:f9:c2:70:a5:36:2d:20:40:0b:68:83:45:
76:c1:4a:3f:d9:8d:a6:1b:aa:f2:51:7d:89:7f:76:
16:e8:74:c6:88:02:a3:bc:a9:c3:c1:bd:00:0f:e3:
93:cf:a3:df:13:81:6a:6a:37:3d:ae:11:38:a5:b3:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:92:71:2B:A5:D0:E1:25:7E:D3:BB:AC:65:95:09:0A:78:57:D9
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:19:70:1f:d7:59:c2:89:11:fc:38:67:2d:e0:1f:43:2f:82:
fd:ec:73:90:ab:d7:98:c3:2a:f6:4c:4f:72:2d:d0:7b:9f:14:
2d:aa:36:9b:d0:37:9a:5a:28:ed:cf:32:5e:b1:e4:30:18:ae:
03:16:4d:72:56:c7:96:59:3c:97:23:a3:24:1b:ef:58:ba:e5:
ad:21:07:09:c6:ee:06:30:26:a6:34:65:57:a9:e3:f9:d5:eb:
bd:dd:76:ef:05:fa:c2:92:8c:70:6b:db:02:56:5f:47:b3:96:
b6:41:f4:54:bb:23:6f:27:93:71:88:46:ed:4b:98:3e:7f:d7:
bc:66:4f:2f:f1:f0:58:97:90:58:bb:72:34:e0:5c:ed:19:af:
7d:f8:8f:b5:de:6d:d6:ce:d1:04:96:c3:a0:ec:31:b5:df:f3:
41:68:c1:99:ed:95:34:59:d2:05:82:91:d9:6d:57:7e:b0:64:
5f:cb:11:58:16:f5:fa:bd:50:ad:48:f7:c7:7a:69:fe:63:d3:
55:db:0e:ec:75:24:43:c7:83:49:ba:32:9c:2c:d4:15:db:91:
aa:ce:24:88:24:09:b2:52:38:b2:94:16:1a:97:15:4b:4e:4f:
d3:72:95:cb:02:58:00:1b:92:f3:14:d6:1d:bc:78:ff:b7:84:
b7:d3:c1:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg+Lu2q4pqaq0hGhiCvKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5
Y2ZkMWMwHhcNMjYwOTI0MTMwMzUwWhcNMjYwOTI1MTMwMzUwWjAzMTEwLwYDVQQD
EyhiMDhhOTI3MTJiYTVkMGUxMjU3ZWQzYmJhYzY1OTUwOTBhNzg1N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKSE79R8oJyPNPz7dOi8U7mal4Wg
oH9EptfCuh9kebeEhCCIVIaereB20BkbGHIwq7ZDOhaLbM36ygYT8GoJ7mPs7Da0
IRHjOUARM5RAYBKLE+DAHzfR4cw73FeQH74ozXz22REHBr0PD0tHlRdYiB+qsK0A
Y6wjj6MDgEwAXmc0AgOcvG1JYEJa0D/DZXgOud6deAPaSx/ZuyCJ/x1c8P+zm97Z
CMhbdOCTjACrmn2uzKAxFE4EAuQ+iDpIOZFi8UlZ/yX5wnClNi0gQAtog0V2wUo/
2Y2mG6ryUX2Jf3YW6HTGiAKjvKnDwb0AD+OTz6PfE4Fqajc9rhE4pbO7EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCKknErpdDhJX7Tu6xllQkKeFfZMB8GA1UdIwQY
MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt
Mzg2ZWVhOGQ4ZGQ2LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2
LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBlwH9dZ
wokR/DhnLeAfQy+C/exzkKvXmMMq9kxPci3Qe58ULao2m9A3mloo7c8yXrHkMBiu
AxZNclbHllk8lyOjJBvvWLrlrSEHCcbuBjAmpjRlV6nj+dXrvd127wX6wpKMcGvb
AlZfR7OWtkH0VLsjbyeTcYhG7UuYPn/XvGZPL/HwWJeQWLtyNOBc7RmvffiPtd5t
1s7RBJbDoOwxtd/zQWjBme2VNFnSBYKR2W1XfrBkX8sRWBb1+r1QrUj3x3pp/mPT
VdsO7HUkQ8eDSboynCzUFduRqs4kiCQJslI4spQWGpcVS05P03KVywJYABuS8xTW
Hbx4/7eEt9PBYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:35 2026 by rpki-client