Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: tzIKZ+ij+ZmxbEljQELUBjFZKuLRMbmAr1xwc+CLlJc=
Subject key identifier: 76:9A:48:01:2A:B4:C1:D0:92:60:40:93:0E:D1:FB:73:22:EE:57:08
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 019F90FF1F6BE0339E365DDE5DDA0C0946D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 16EB
Signing time: Thu 23 Jul 2026 22:01:06 +0000
Manifest this update: Thu 23 Jul 2026 22:01:06 +0000
Manifest next update: Fri 24 Jul 2026 22:01:06 +0000
Files and hashes: 1: IajqYEYSYPwSNp58GvQ2XhMsIz0.roa (hash: JEmZj60XxBFSY/yD+XtuID0pW43ypG8UoqsqxxlGlYU=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: lgJCpxTnR+IxSMrYx4bCUgFzX2yt+a38DAnSRFIB9QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:1f:6b:e0:33:9e:36:5d:de:5d:da:0c:09:46:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Jul 23 22:01:06 2026 GMT
Not After : Jul 24 22:01:06 2026 GMT
Subject: CN=769a48012ab4c1d0926040930ed1fb7322ee5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:fa:48:1e:6d:3d:ab:ab:a0:b7:ee:84:bb:
19:d7:c0:8b:5c:d7:4f:99:d6:35:4e:b9:0e:bd:f2:
e1:51:55:e0:d3:b2:4a:bb:39:83:87:28:ea:15:0a:
17:88:73:65:7d:de:a4:ef:12:9c:64:16:9c:cf:07:
88:d4:ad:32:37:d0:ad:d6:f0:2b:a8:2e:c1:28:3e:
df:51:8c:36:8c:6e:61:72:2c:16:74:c2:b3:07:c1:
91:aa:e8:7f:94:dc:d5:c9:bc:d8:c2:7a:96:e5:bd:
be:f5:08:76:2f:20:80:66:cf:d9:66:e7:22:c8:1c:
4f:d7:55:81:47:ff:88:3d:d0:f0:eb:36:a0:bb:99:
b5:64:bb:18:b3:7f:91:e1:e7:96:d2:f5:60:b1:3d:
75:6b:4b:4c:6f:74:47:5f:70:73:66:fb:3e:b0:3d:
10:1c:e9:e3:cd:72:d9:e5:6c:5a:b2:ec:24:05:ed:
70:ba:e5:ba:1d:8e:3e:82:c3:4c:6d:7e:77:ee:26:
e2:90:b6:53:06:61:c5:48:ab:6c:4a:1d:d1:dd:da:
0d:66:a5:0b:9e:d4:5f:b5:43:ad:bc:5a:61:bb:ad:
e7:60:2d:23:08:11:d6:7f:95:95:73:b4:fc:56:3a:
a1:9c:bc:a4:0f:e0:a6:fb:04:ca:7e:aa:13:c8:96:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:48:01:2A:B4:C1:D0:92:60:40:93:0E:D1:FB:73:22:EE:57:08
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:b7:d1:ce:4e:0d:53:76:f8:9e:80:eb:45:20:b1:91:3a:
6f:5e:e1:c0:1f:2a:8b:82:21:5d:09:f2:1c:31:12:0e:23:e7:
ed:63:59:b0:49:3f:a9:cc:52:e8:51:7a:ee:df:55:89:01:dd:
b2:57:14:9b:48:f4:34:cc:14:e1:20:dc:2d:68:89:4b:bb:2b:
96:6f:9d:b3:fe:c9:76:39:9d:2e:4e:c7:63:c7:f8:45:72:b3:
05:cc:92:2f:c1:9e:9c:a3:51:95:92:6f:1c:31:92:ea:83:21:
8b:64:4e:c2:ce:fa:e1:0d:9b:66:cb:70:11:6d:b2:1c:40:51:
ee:c5:e0:2a:a4:30:a3:e9:25:17:b2:8a:45:ab:28:f3:6d:ce:
ac:d2:7b:b0:f4:17:ad:17:e1:2f:2b:a8:9a:a4:fc:81:dc:bb:
6d:1e:dc:9b:01:0e:54:c4:da:ca:4e:c9:4e:d3:85:45:e0:2c:
fb:ce:a9:7f:37:60:eb:3a:ea:69:7c:70:b0:ee:09:8c:32:dc:
59:53:7c:99:db:ea:6a:cf:ec:d2:6b:93:ac:f0:3e:8d:78:7e:
b8:d2:28:cb:af:1d:cf:19:02:e3:cb:05:26:a7:07:d9:50:0f:
87:97:ea:36:f4:8d:97:69:ea:ed:a3:91:e9:a6:57:bd:2b:c7:
78:6a:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:45 2026 by rpki-client