Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: FSevhofszBodGvpoUet/WMpRnY9Hf3gMEb4YAnqwPnU=
Subject key identifier: 01:FC:03:55:A8:22:4A:4C:79:0D:93:B9:C4:71:F6:6A:F8:D8:50:F1
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 019D2929A2F303F7FDB6D1D96CC0E39DF1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 100F
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: VIZHMby6Q0z8tuLZsidVN3bEF_M.roa (hash: i1v+i2O2Pq/WLn5UBhp0s/SOrdZreDHtW1YwUuevJKQ=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: iMvcFu4jM4CJdZlt/TCcOlp7XUgzQHPQ5hb6Qbk+sYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a2:f3:03:f7:fd:b6:d1:d9:6c:c0:e3:9d:f1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=01fc0355a8224a4c790d93b9c471f66af8d850f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:74:d5:bb:14:58:30:2e:89:49:03:a2:2f:
71:d2:5d:db:05:44:47:bc:ff:49:65:e2:98:fc:11:
ca:dc:a9:f5:00:3f:d7:a7:07:32:5e:1d:52:fd:a6:
1a:f4:4c:54:95:24:62:c4:db:2c:be:8d:04:93:f3:
31:8d:ba:1f:46:36:25:c8:64:15:2c:55:25:1d:fe:
01:5d:6e:32:cc:4a:55:a7:2d:7d:65:63:49:28:fe:
18:87:71:d0:68:76:77:5a:bd:fc:dd:41:7c:3d:cc:
63:b0:dd:9d:95:b3:2e:a2:16:a1:1e:3d:d5:5c:7f:
e3:4b:79:3b:d7:8d:5c:b1:33:4b:0e:3d:f3:e1:06:
e8:76:a0:f6:db:82:e4:8d:2b:93:71:89:00:b2:54:
ef:6c:69:b2:a0:c4:b6:8c:c0:8a:9b:41:87:5d:29:
8e:f1:9a:c7:1b:23:e7:38:5a:0b:bc:8e:b9:44:c3:
25:9f:57:9c:10:f4:db:4e:bf:4f:30:2c:53:1e:74:
3e:d1:01:e7:42:53:f2:1f:89:c1:70:65:72:58:a0:
88:54:e0:80:09:ce:bc:81:68:14:8b:b5:63:6e:f0:
ae:82:2f:3f:56:95:97:b1:77:df:a9:ca:06:72:f1:
79:da:10:90:fb:b8:78:d5:2d:74:9d:ca:66:6f:36:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:03:55:A8:22:4A:4C:79:0D:93:B9:C4:71:F6:6A:F8:D8:50:F1
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0b:47:02:69:19:14:69:23:9e:78:c0:70:bb:b6:45:3a:c4:
5d:3e:83:61:54:c8:05:5d:07:eb:92:be:92:c1:46:fc:35:d2:
0d:a0:5d:7f:94:f5:dd:c4:85:6e:58:b0:69:25:a1:d9:2c:af:
1d:69:56:cd:43:4c:06:46:92:45:d9:e8:8a:d6:2d:52:96:8e:
6a:6d:2a:ed:3e:4f:0e:e4:d7:33:2a:6e:7f:49:c8:2f:bc:94:
02:90:aa:f5:82:9e:0e:40:96:bd:8e:dc:d4:41:1d:7a:4a:0b:
91:95:b7:2b:8e:8b:d6:59:c9:41:10:29:89:8f:56:d1:d1:91:
0d:8d:cb:2b:03:b6:8a:01:df:ec:37:5c:11:38:6e:a6:35:25:
e3:ff:50:e0:99:ab:fa:f2:d5:d1:bf:d6:e9:3b:52:5f:eb:01:
6c:e5:2b:6a:42:f3:b4:aa:e2:ca:b7:a4:c5:f6:96:4a:6a:33:
71:b2:46:1a:13:bf:dc:6f:34:da:04:34:c5:b5:2c:11:bd:72:
e3:76:c1:e4:d7:cb:1b:39:84:26:1d:6c:d7:ec:e0:20:cb:9c:
96:a4:a9:d5:68:29:21:36:40:d3:46:89:4e:dd:d5:bf:fe:bf:
7e:50:17:14:f9:15:e5:12:74:80:aa:6f:09:ef:ae:12:9c:a5:
88:2f:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:27 2026 by rpki-client