Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: LFPWMHNTTL69QAUfSqbvAfjmNS/TZaKGgsoKIL6Zkrs=
Subject key identifier: BE:0C:1D:4E:1C:AE:16:10:FC:B0:AA:45:AA:94:48:54:98:63:97:2C
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019D2704C168C58003CE6A6E27AED61F1176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 16DD
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: VC/XTWKDb/AZev2NRoQ/G0Ft7jDBidxaJSgn1pvTczo=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c1:68:c5:80:03:ce:6a:6e:27:ae:d6:1f:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=be0c1d4e1cae1610fcb0aa45aa9448549863972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:c7:ac:4d:7d:87:43:59:e2:00:f5:cf:48:
52:19:a8:da:9a:5f:d2:34:f8:65:09:42:11:6b:a1:
ab:39:c1:98:ea:5f:cf:e0:f8:75:fa:17:82:67:44:
0e:9f:be:e7:20:a5:ff:bc:10:a6:70:54:1a:d0:54:
94:8c:a8:b7:f6:a3:8e:a8:c4:e8:fa:04:0f:8b:8d:
87:f2:de:f3:c9:f2:f4:f5:c5:80:3d:92:3f:00:93:
e0:1d:fb:87:29:2a:d3:ae:6f:43:ec:db:2a:9f:e5:
06:d3:5f:b4:23:65:ad:0b:58:ad:27:bd:58:f2:31:
aa:3c:dd:fe:9f:24:1d:45:5c:2d:77:de:42:4b:a9:
68:4d:a7:ca:3b:5b:30:fe:95:5b:94:ec:75:96:af:
e5:52:5b:9b:ef:16:02:16:b5:91:b9:33:27:5c:51:
4e:43:c3:70:4c:37:df:de:29:eb:e3:6a:53:c3:56:
2e:10:26:ea:bf:96:5b:d1:c5:1c:10:0d:91:19:23:
70:be:c2:4c:a6:16:4d:de:9b:60:8d:99:fc:02:09:
c6:36:4d:4f:94:4b:3f:d4:a6:e1:c3:bc:54:1b:43:
aa:41:8c:5a:e2:4d:9e:b6:57:69:8b:63:c3:c5:f6:
44:e9:ae:f5:8b:61:91:c5:e2:4d:5c:1d:c3:19:74:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:1D:4E:1C:AE:16:10:FC:B0:AA:45:AA:94:48:54:98:63:97:2C
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:6c:12:8f:30:14:9d:0d:cc:c2:08:85:69:3f:91:87:dd:
ca:6d:be:f2:30:95:2b:56:c6:ad:da:7f:17:06:bd:6d:19:cb:
0f:59:e3:f8:fc:5f:2b:f2:81:e4:c0:d2:c1:c3:11:d2:a9:38:
1f:75:6e:b2:0b:4a:f3:93:f8:93:7c:b2:70:69:2a:77:dd:1c:
40:01:8a:ce:5d:ac:dd:e1:df:f4:3b:ca:4b:8f:26:c4:f0:63:
fc:2c:a6:ff:7c:95:58:ba:2d:69:ee:9d:be:1c:ce:23:89:bb:
f8:c3:45:4d:67:1f:b0:58:63:90:58:84:af:18:b1:a4:2e:4b:
53:e1:f9:3f:f9:7c:9a:5f:dc:1c:7f:e9:eb:59:6f:16:ba:76:
cf:85:28:e1:64:96:46:99:79:75:0c:0f:e0:7f:ca:fe:c2:ec:
c0:52:89:d4:8b:15:0c:a8:aa:a2:e9:0a:1a:8f:18:59:23:af:
1d:83:54:0a:8f:bf:4a:ab:23:76:0f:8f:87:45:dc:67:43:3e:
87:02:00:dd:fa:d5:8e:ed:40:5c:0d:10:a5:e8:a1:8d:d2:fd:
00:b3:92:87:c2:cd:21:27:af:24:dd:50:6f:b4:b6:e9:65:d4:
14:89:b5:79:51:5e:db:65:91:14:e8:46:45:3c:cd:72:bd:2e:
82:0a:4b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMFoxYADzmpuJ67WHxF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm
N2M2OGUwHhcNMjYwMzI1MjIwMTU2WhcNMjYwMzI2MjIwMTU2WjAzMTEwLwYDVQQD
EyhiZTBjMWQ0ZTFjYWUxNjEwZmNiMGFhNDVhYTk0NDg1NDk4NjM5NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssLHrE19h0NZ4gD1z0hSGajaml/S
NPhlCUIRa6GrOcGY6l/P4Ph1+heCZ0QOn77nIKX/vBCmcFQa0FSUjKi39qOOqMTo
+gQPi42H8t7zyfL09cWAPZI/AJPgHfuHKSrTrm9D7Nsqn+UG01+0I2WtC1itJ71Y
8jGqPN3+nyQdRVwtd95CS6loTafKO1sw/pVblOx1lq/lUlub7xYCFrWRuTMnXFFO
Q8NwTDff3inr42pTw1YuECbqv5Zb0cUcEA2RGSNwvsJMphZN3ptgjZn8AgnGNk1P
lEs/1Kbhw7xUG0OqQYxa4k2etldpi2PDxfZE6a71i2GRxeJNXB3DGXTmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4MHU4crhYQ/LCqRaqUSFSYY5csMB8GA1UdIwQY
MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt
YTE2NTM1OWE2MjExLzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx
LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkBsEo8w
FJ0NzMIIhWk/kYfdym2+8jCVK1bGrdp/Fwa9bRnLD1nj+PxfK/KB5MDSwcMR0qk4
H3VusgtK85P4k3yycGkqd90cQAGKzl2s3eHf9DvKS48mxPBj/Cym/3yVWLotae6d
vhzOI4m7+MNFTWcfsFhjkFiErxixpC5LU+H5P/l8ml/cHH/p61lvFrp2z4Uo4WSW
Rpl5dQwP4H/K/sLswFKJ1IsVDKiqoukKGo8YWSOvHYNUCo+/Sqsjdg+Ph0XcZ0M+
hwIA3frVju1AXA0QpeihjdL9ALOSh8LNISevJN1Qb7S26WXUFIm1eVFe22WRFOhG
RTzNcr0uggpLNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:24 2026 by rpki-client