Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: yyK2RCbGOlBDGvuK4bqSe9N2oauqsPIfHiFwUt5ysls=
Subject key identifier: 0F:65:4E:0A:FC:01:01:AE:4D:D0:97:C0:1C:54:DB:64:15:DC:DB:90
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 019D26CD56E24482BD8BFAC504D3BCFE1403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0DE0
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: 47fmLu8UcYsmHdmBdck_ql59f5M.roa (hash: ZblBR2/w1rIwhbzwuKN2kKmflX9a5wlTCaHuPYPzgd8=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: 83FcxKmfgsFc27kIkV84QRjqbslOjF0v1P+SFy9RnVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:56:e2:44:82:bd:8b:fa:c5:04:d3:bc:fe:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=0f654e0afc0101ae4dd097c01c54db6415dcdb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:2e:c2:26:5f:04:a5:8d:b0:49:3e:ae:7a:
6f:79:3c:d5:cf:62:a4:80:28:1b:7d:82:1e:1a:fd:
98:ef:a0:ca:5b:00:37:34:de:89:c3:69:e0:d6:52:
8a:f6:bc:7b:46:7d:ac:e6:11:75:6e:a5:53:f0:d2:
fa:69:7e:39:91:08:dc:b0:80:43:d3:8d:75:56:70:
4a:99:45:c1:45:13:c1:5f:1b:45:8b:18:a2:d3:09:
aa:36:b8:5d:91:27:ec:1a:f4:22:96:ee:7d:0e:f5:
c5:d2:b9:3b:46:dc:f3:99:f8:f3:7b:2f:5d:69:6f:
fa:1e:69:d2:f2:77:e5:90:48:33:8c:76:58:fc:00:
64:bc:88:31:3b:bf:00:e7:fc:c6:64:a0:f7:71:b6:
84:21:dd:92:89:0d:95:07:f7:54:26:b1:99:49:c2:
7f:56:60:82:51:90:dd:15:e5:f3:cf:38:89:74:87:
b1:bc:1c:4a:07:cb:d9:d8:4d:a9:c2:eb:20:c3:f6:
ec:09:bc:eb:d3:b1:39:cc:de:d9:d9:34:9e:14:49:
57:59:03:c9:72:0a:a8:4b:f4:2b:e3:01:09:91:db:
d3:16:85:86:92:94:1d:da:03:35:41:e3:43:99:17:
fd:fe:ff:9e:34:8d:6f:25:62:df:4a:7d:a1:66:e4:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:4E:0A:FC:01:01:AE:4D:D0:97:C0:1C:54:DB:64:15:DC:DB:90
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:16:e6:fb:30:65:84:48:ac:0f:fb:fa:08:e9:d6:3d:4d:
b2:70:bc:72:d6:65:5a:6a:5b:53:d2:87:1e:b4:6c:19:ca:c5:
29:f4:ca:75:9a:9b:55:86:0c:45:97:53:9d:75:19:1e:82:4f:
ac:c7:e8:b1:9b:36:e1:2b:56:59:fc:5a:c6:50:eb:24:a1:58:
91:6b:17:c8:df:59:63:8f:1b:d8:50:53:b5:8d:9b:b9:b5:14:
9e:1c:d2:2b:5b:1d:23:33:1d:f8:27:1f:f4:0f:6a:7c:2b:a1:
00:f9:57:e7:fb:14:b6:3c:9d:00:46:3f:f8:cd:82:6e:ce:ef:
90:f0:65:b1:64:40:1f:6e:2a:07:7c:cf:21:cd:ed:1a:f4:fb:
95:75:00:4c:2f:83:c1:cb:3a:c6:5e:29:85:72:9d:f1:fc:81:
d9:62:f2:59:80:b2:d7:44:5a:13:e5:cd:01:fc:ec:3e:b3:70:
e2:b7:ee:0e:7d:05:ce:79:67:84:eb:94:a9:2a:5b:b8:ea:3f:
a4:44:ed:5a:f6:9f:5b:74:76:02:12:43:ce:37:51:dd:78:2a:
c5:29:72:ea:2f:11:23:be:cb:f6:23:fb:8d:8a:48:d8:5a:fc:
61:fd:48:60:f7:7e:fc:cd:11:68:8d:1c:86:ec:ce:a1:ef:c3:
d1:9f:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:50 2026 by rpki-client