Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: k1uyViGRdvlSPe/6lann5eggevCmXgBnXjosYr28R7Q=
Subject key identifier: 7F:09:30:5D:40:1E:A2:62:08:8B:10:AF:8A:99:BF:90:FC:76:2A:16
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 019F9323DE23A2611210C62680C026772119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 114F
Signing time: Fri 24 Jul 2026 08:00:29 +0000
Manifest this update: Fri 24 Jul 2026 08:00:29 +0000
Manifest next update: Sat 25 Jul 2026 08:00:29 +0000
Files and hashes: 1: VIZHMby6Q0z8tuLZsidVN3bEF_M.roa (hash: i1v+i2O2Pq/WLn5UBhp0s/SOrdZreDHtW1YwUuevJKQ=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: Mw/Jao7a82rWoBWARW3D1fN7fpGSinrJNo8nXn+qAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:de:23:a2:61:12:10:c6:26:80:c0:26:77:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Jul 24 08:00:29 2026 GMT
Not After : Jul 25 08:00:29 2026 GMT
Subject: CN=7f09305d401ea262088b10af8a99bf90fc762a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:43:11:1b:c6:40:3e:ec:b2:6c:76:91:49:
c5:e0:58:69:7e:4b:5b:f6:8d:55:6c:cb:78:9b:b8:
fc:60:57:ac:ba:e9:1c:2a:1f:08:1b:54:d8:e9:ca:
bc:bd:e0:ed:5d:09:76:61:be:11:6e:36:d0:e9:d1:
70:dd:de:10:e4:1d:a7:8b:57:d4:04:a5:d0:3f:9a:
66:e0:4f:33:fa:f5:21:7b:f2:6c:54:f0:2e:1b:0b:
b5:f6:eb:f5:5f:ad:75:95:07:60:fd:e9:5d:20:dc:
b8:42:98:db:29:ea:23:ab:8c:79:32:0e:32:cc:93:
c7:0e:7d:ca:a4:b3:2c:88:6f:8e:54:8f:76:1a:79:
c1:91:c4:d7:0a:1f:b0:e2:28:16:40:1e:06:1a:9f:
48:4a:ae:14:1b:c1:b6:46:10:f7:a8:02:08:50:0f:
6d:c5:66:0a:51:49:0b:64:50:c5:ae:73:31:85:13:
f6:68:84:af:3c:e7:71:c0:0f:0d:c3:79:34:ae:4d:
f3:7d:82:df:80:94:fe:f2:d0:40:9d:33:21:38:5c:
ce:8d:bf:3b:f0:a4:c4:71:60:b2:9a:67:ae:e5:8a:
89:a5:e4:18:3e:85:f6:18:fb:1c:91:d3:81:43:32:
d1:4b:ae:9c:45:88:a5:89:b3:d9:af:f0:36:fd:9a:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:30:5D:40:1E:A2:62:08:8B:10:AF:8A:99:BF:90:FC:76:2A:16
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:35:25:be:39:e3:9b:42:8a:5b:7f:74:b9:6b:3e:18:ba:
75:f8:3d:ab:d8:4b:c4:b2:cf:c8:c4:9a:9f:be:e1:f8:60:b2:
07:4c:99:30:4f:20:25:89:b4:01:71:58:c2:a8:4c:e5:a2:21:
6b:85:d7:ac:eb:fa:7d:f7:cc:b9:d9:4b:f8:5d:e1:d5:cd:ca:
b4:bf:73:89:3b:01:5a:81:93:3a:e8:5c:82:cd:ac:6d:53:7d:
c1:74:09:ac:c4:9b:89:7f:7e:5c:fa:ab:77:19:c7:af:af:ec:
e7:b1:d4:a2:81:1f:56:05:24:f1:ad:b2:76:91:2f:0c:34:6d:
66:ae:66:23:86:e1:3a:1c:fd:f7:13:6c:b5:ba:cf:9d:9a:0a:
51:d5:5e:36:a9:bd:24:9f:86:e0:97:5d:94:55:b5:e9:ae:94:
5d:4d:5e:93:c3:05:80:c4:2b:f8:bb:d8:d3:25:b8:7a:cf:ac:
56:0e:79:64:2b:74:a5:67:8d:04:29:b8:13:5e:de:d9:1d:3f:
dc:72:0d:98:41:26:81:71:5f:3b:fc:4c:1c:8e:53:c2:9b:18:
d8:1a:c3:24:c9:e0:a8:58:0c:94:b0:e2:87:4d:c9:71:91:8e:
e8:54:a8:b0:fa:ae:12:59:f2:7d:6b:84:3e:05:b3:31:a7:58:
14:9f:eb:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI94jomESEMYmgMAmdyEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTBmZTBmYWY2ODQ0OTg4YWYyZjc0NGQ1MTZlZGI5YzVk
ZmU3MWMwHhcNMjYwNzI0MDgwMDI5WhcNMjYwNzI1MDgwMDI5WjAzMTEwLwYDVQQD
Eyg3ZjA5MzA1ZDQwMWVhMjYyMDg4YjEwYWY4YTk5YmY5MGZjNzYyYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL5DERvGQD7ssmx2kUnF4Fhpfktb
9o1VbMt4m7j8YFesuukcKh8IG1TY6cq8veDtXQl2Yb4RbjbQ6dFw3d4Q5B2ni1fU
BKXQP5pm4E8z+vUhe/JsVPAuGwu19uv1X611lQdg/eldINy4QpjbKeojq4x5Mg4y
zJPHDn3KpLMsiG+OVI92GnnBkcTXCh+w4igWQB4GGp9ISq4UG8G2RhD3qAIIUA9t
xWYKUUkLZFDFrnMxhRP2aISvPOdxwA8Nw3k0rk3zfYLfgJT+8tBAnTMhOFzOjb87
8KTEcWCymmeu5YqJpeQYPoX2GPsckdOBQzLRS66cRYilibPZr/A2/ZpCLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8JMF1AHqJiCIsQr4qZv5D8dioWMB8GA1UdIwQY
MBaAFLbg/g+vaESYivL3RNUW7bnF3+ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMt
MjA5ZTFmODQyMjRlLzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMtMjA5ZTFmODQyMjRl
LzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAA1Jb45
45tCilt/dLlrPhi6dfg9q9hLxLLPyMSan77h+GCyB0yZME8gJYm0AXFYwqhM5aIh
a4XXrOv6fffMudlL+F3h1c3KtL9ziTsBWoGTOuhcgs2sbVN9wXQJrMSbiX9+XPqr
dxnHr6/s57HUooEfVgUk8a2ydpEvDDRtZq5mI4bhOhz99xNstbrPnZoKUdVeNqm9
JJ+G4JddlFW16a6UXU1ek8MFgMQr+LvY0yW4es+sVg55ZCt0pWeNBCm4E17e2R0/
3HINmEEmgXFfO/xMHI5TwpsY2BrDJMngqFgMlLDih03JcZGO6FSosPquElnyfWuE
PgWzMadYFJ/reQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:36 2026 by rpki-client