
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier: zgsO0ChfcbZQl/LERM+2vfVOsdV+Jet/qYgXLmMOHAE=
Subject key identifier: AA:8D:5A:AE:80:C8:1D:80:3B:4A:49:DD:D3:80:0A:B0:D0:63:32:4E
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019D26CCE6A334815F885BCFD9FD64FA5591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number: 189B
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: 1pHn4hqgEKi5WJeiJ2I6cNmqUs4.roa (hash: rm285URNEpurD6hEamOB1NODDegbZPZxULRcBNqYUGw=)
2: 2jrszJlgV71mCpgTFgHjigRHN0o.roa (hash: WSCn/RX/PMY99fcjdFAAZEiGRwDYCQ00UuZMQjGF8MQ=)
3: 2rG6ym8QVb4IUhWKaVABLqMEudA.roa (hash: Y1qgFOR6xRSvB0/M5PW+1DtdG1enb2kLb7e2HnI2Yl0=)
4: 5CmVOyjMGaOx3Azoa9vaES31gNU.roa (hash: tmSpZLW8QseubN/4w6VFtZ3Yl76f3yLn1OWmBKE45j4=)
5: I_YkIIbROaBHikP_X2q88QJJL04.roa (hash: i+Ynuk2mjQ1KZXlivUmIRXIts9g1U/IQ+uGbqumlnv0=)
6: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: +DsfKUYlqPmmZkIQjEzatB8ZUMovu8I97j04lA91vfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e6:a3:34:81:5f:88:5b:cf:d9:fd:64:fa:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=aa8d5aae80c81d803b4a49ddd3800ab0d063324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:0d:2a:89:13:51:41:6f:fd:33:4c:bf:39:
b3:dc:a3:61:59:bc:7f:88:9d:13:cb:e1:03:3a:b0:
6e:f6:2e:c0:f5:90:be:87:39:ef:65:fd:23:b1:1a:
53:28:13:bc:24:19:4a:d2:c7:de:da:8d:8a:ec:bd:
a6:5c:cd:af:d3:cd:e8:91:58:59:e7:15:21:0f:d2:
c5:98:b1:6f:a5:03:9d:3b:c8:02:c4:05:71:81:5d:
ec:2b:79:e8:71:2c:00:86:05:7e:43:90:82:97:7f:
26:20:cc:ea:c0:1b:eb:ca:c5:32:fe:41:4c:3f:df:
10:ca:e4:95:bd:f2:25:88:4c:98:bb:23:25:d9:21:
ce:cd:9d:78:72:84:7e:a8:3d:14:3a:20:35:1d:34:
ac:14:d1:65:5f:ad:b2:ab:a0:15:ce:a8:24:7b:e5:
8f:7a:2e:90:36:07:7b:e5:65:3a:16:7b:98:0b:8c:
1a:12:da:35:25:cd:23:fa:5f:79:8a:69:0b:f5:bc:
55:1a:6c:e8:70:ec:dc:79:6f:e8:6f:86:31:5c:47:
33:4b:a2:f6:c3:15:71:56:11:05:42:9f:5b:e3:cc:
38:ea:ac:77:b3:d6:e4:34:2e:ab:83:b7:f5:70:88:
db:39:70:33:42:1d:cc:ee:2e:e3:c5:bd:59:ec:fb:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8D:5A:AE:80:C8:1D:80:3B:4A:49:DD:D3:80:0A:B0:D0:63:32:4E
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d7:af:62:ce:fe:0e:27:37:75:d0:5a:88:f4:c9:e1:95:5b:
3d:d4:73:6c:d8:d2:e0:41:9a:94:28:02:cb:5e:a2:ce:1e:d2:
86:e7:76:c2:64:bc:9a:6a:c9:f9:3a:ca:03:17:5e:24:a4:de:
1b:32:1f:14:69:8f:d0:96:9b:81:f4:d2:76:e4:13:fc:9d:54:
41:ce:40:83:73:6d:28:9f:8b:1d:b9:f2:98:e9:d0:6b:79:83:
58:ce:11:b4:7d:aa:65:56:2b:2f:17:80:98:b7:08:40:a1:80:
03:22:79:69:5d:44:f5:cc:23:ab:e0:ac:52:74:a0:41:44:50:
e8:68:c9:42:ae:54:ee:48:7b:6d:8c:30:61:65:56:c6:75:ee:
61:69:55:70:a9:b4:16:73:80:09:5d:b7:70:c9:05:5b:1c:58:
f7:5d:e0:08:55:ef:e0:f5:a2:9d:b3:79:14:18:58:f5:e3:2d:
b6:1f:60:44:34:b2:e0:91:f7:3e:b7:96:1f:07:8b:90:8a:82:
c3:40:6a:d0:84:97:f0:19:bb:0f:23:d0:20:db:f1:22:ca:8d:
85:c5:b1:18:60:98:a7:a3:af:11:e8:35:a2:ab:09:69:4a:23:
e5:59:92:52:e4:19:fc:68:05:0b:22:b3:38:26:33:d8:e8:8f:
f8:44:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:25 2026 by rpki-client