Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: SQjYEpNvNA+qh/5BF4r3j6jd5SfrhKMDoLIihVy2VRg=
Subject key identifier: E1:8A:5F:19:DF:BE:8A:F1:8E:F6:39:6D:72:0A:BC:22:48:F8:0A:07
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 019E1E35BCFE31747FA8AA17327A6321A427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 175D
Signing time: Tue 12 May 2026 22:01:38 +0000
Manifest this update: Tue 12 May 2026 22:01:38 +0000
Manifest next update: Wed 13 May 2026 22:01:38 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: ALpIdm8h09S6Tld7+mDkXhBumChlx9d76eEHdmIHvi4=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:bc:fe:31:74:7f:a8:aa:17:32:7a:63:21:a4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: May 12 22:01:38 2026 GMT
Not After : May 13 22:01:38 2026 GMT
Subject: CN=e18a5f19dfbe8af18ef6396d720abc2248f80a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:4e:83:b6:d4:21:20:03:92:5e:bd:21:5f:
03:fa:26:6e:4d:04:e2:9e:01:9a:54:1a:b4:4d:c3:
87:ad:15:0c:17:77:9f:18:84:15:7a:ed:5e:0d:d7:
90:f6:63:0a:d8:88:ce:e4:30:14:e9:92:e5:4f:4b:
12:73:7a:02:ec:75:2b:ca:06:b2:35:3d:77:35:27:
47:77:c9:43:79:5a:ce:b4:17:2b:be:6d:15:b7:55:
63:39:d2:a4:5f:95:e5:3a:a2:d4:a1:56:a0:6a:c4:
7e:3e:80:c6:24:fd:02:37:77:04:6e:37:68:aa:51:
2c:a9:c3:7b:b1:64:35:e6:c8:20:ed:c2:10:96:a1:
c1:7c:df:72:8e:bb:1f:9e:ac:77:63:a1:61:e4:c5:
88:43:da:6e:0b:59:bd:ef:ac:9f:65:90:68:22:0c:
d9:de:14:cd:e2:0e:9d:96:81:7b:a7:97:f2:f1:ed:
ab:97:ef:a8:a9:72:8e:cb:17:2f:39:7f:bc:99:b6:
5d:3c:cf:5f:aa:9a:0b:16:2b:9f:84:5b:db:d3:01:
d1:c0:5f:4b:14:e6:a1:29:e3:94:aa:7c:f9:fc:1a:
02:77:08:21:55:ef:d9:47:17:bb:69:ba:16:1b:22:
5c:9b:ba:b0:00:e3:c2:49:14:a6:cd:a5:be:27:05:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:5F:19:DF:BE:8A:F1:8E:F6:39:6D:72:0A:BC:22:48:F8:0A:07
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:e6:fb:51:ea:9e:7b:dd:81:ce:14:3d:2d:26:2e:c7:a2:
c2:a8:8a:dc:dc:7d:11:7b:2e:3a:96:a9:1a:98:de:7b:15:fa:
4e:a1:e5:61:bc:5d:5e:b1:eb:7a:ae:e3:c2:93:1f:a7:b3:f0:
29:c8:c2:5a:c4:ac:9d:6c:a8:54:97:18:d7:c0:32:66:5d:c8:
0d:fc:bd:fb:d8:73:1d:3c:ff:dd:7f:a1:dc:ce:15:e1:5d:25:
74:91:5e:36:0c:d4:31:d4:b0:53:16:4d:0a:d7:29:b8:ca:52:
df:6f:85:c6:25:a7:ab:59:87:d9:75:40:f7:30:11:80:74:5a:
89:ca:af:60:74:6d:7e:5b:71:1b:57:10:7e:fe:52:61:bc:e1:
db:e6:da:af:b8:0b:70:33:75:ae:86:48:03:c7:69:bb:1d:fd:
23:56:6f:69:87:ec:1c:c2:c8:c0:4b:75:0a:c5:32:e9:d7:9c:
dc:13:95:6e:6d:71:88:f8:99:94:78:a9:26:b2:cd:6f:c9:40:
d2:7d:75:57:86:27:0a:2c:6d:69:6c:96:f0:30:b3:13:3e:b6:
13:e7:5e:7e:d2:4f:6d:78:fa:94:bc:ad:52:ea:8d:10:81:48:
62:21:50:49:c8:40:d5:bb:f5:14:bc:3b:67:61:e6:1d:57:f7:
f4:0f:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:41 2026 by rpki-client