Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json)
Hash identifier: g1Z7woVMQ+SvcPGRDp6jJbNCItd2JrWNUVZUMc8+JjA=
Subject key identifier: D4:2D:0A:EF:8C:82:66:9C:52:81:30:BA:3C:DD:68:BD:24:A0:51:B3
Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Certificate serial: 019D33087D5A3406695D6F84B726DD83D0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
Manifest number: 0E79
Signing time: Sat 28 Mar 2026 06:01:27 +0000
Manifest this update: Sat 28 Mar 2026 06:01:27 +0000
Manifest next update: Sun 29 Mar 2026 06:01:27 +0000
Files and hashes: 1: 5DPQKVh7BOyXWi6HVipGuI-DbKI.roa (hash: 7niXhQfcaYijhdxK0OqWBqiveT28StizLbsME/eXTCM=)
2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: vnzJ1MMx7hEms+xuCZBLPFR9ciq69dqcySROVmF+Zwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:7d:5a:34:06:69:5d:6f:84:b7:26:dd:83:d0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081
Validity
Not Before: Mar 28 06:01:27 2026 GMT
Not After : Mar 29 06:01:27 2026 GMT
Subject: CN=d42d0aef8c82669c528130ba3cdd68bd24a051b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:a6:30:92:c5:65:bd:8a:6d:45:16:2a:66:
a7:24:0d:2b:b0:f5:aa:6e:9f:db:23:16:b6:a7:c4:
5b:0a:a9:f8:2a:03:f0:6b:99:cc:d0:09:26:13:cf:
23:1e:45:64:65:f8:0a:13:ca:11:fd:84:76:22:aa:
98:a3:1c:48:c9:63:cb:7a:bd:81:05:ab:06:4f:74:
d5:a3:d5:34:7b:95:90:7a:6d:d0:45:e7:21:18:a0:
2e:ca:f3:de:8d:24:a6:93:a3:66:29:c5:38:95:33:
10:ea:da:9b:80:5f:c7:63:7d:18:23:6b:5d:fc:bc:
d9:29:49:4c:72:96:df:0f:22:72:10:d7:8c:f6:45:
8d:20:74:3e:e5:cc:49:5c:c8:67:ed:0f:80:d7:b3:
c4:54:84:c8:46:08:45:e9:e1:ad:1a:f3:ee:5d:54:
da:9f:f9:e4:4c:99:78:c4:6d:09:99:ab:9e:11:74:
f8:58:1e:58:3b:05:11:53:5c:95:3d:b2:51:00:f8:
5d:99:fa:bd:46:12:e4:15:f6:17:e7:41:d6:02:f9:
85:93:80:e9:26:82:08:c3:ac:6d:11:25:3b:6f:59:
34:72:ed:10:33:76:18:fd:0b:95:26:54:07:0a:67:
ad:d1:54:ef:30:29:e8:11:4b:17:8b:ae:c9:99:ff:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:0A:EF:8C:82:66:9C:52:81:30:BA:3C:DD:68:BD:24:A0:51:B3
X509v3 Authority Key Identifier:
keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:c1:64:a1:42:83:0c:ef:b6:20:e3:73:28:72:94:9c:58:
81:59:55:90:a8:64:df:33:a6:b9:3b:cf:a8:c6:b7:9c:3e:50:
de:da:1d:7d:07:69:21:50:96:64:ff:c1:49:dd:f2:09:0b:67:
2b:0b:bb:7f:5b:a8:ee:7b:72:61:8e:84:22:22:05:63:f6:0d:
d9:29:15:31:e7:54:a1:d3:bf:bc:70:43:aa:1c:0c:90:34:fa:
e7:e5:b5:d9:ce:1f:0b:86:b2:0e:d6:f8:e1:60:ee:f7:af:09:
da:ad:2f:38:cb:0d:ab:c9:6c:0c:0a:17:f8:eb:28:9d:3d:2c:
f5:64:7d:1b:dd:e7:23:3b:33:b4:bc:14:96:19:40:66:20:a4:
d9:82:4a:21:eb:76:47:a3:5c:6d:d9:e9:fc:14:0b:32:7c:d3:
5d:84:b8:a1:00:62:10:71:7d:ee:b4:cb:a2:0a:4d:4c:d0:54:
25:82:70:28:c4:81:1e:a4:6f:d2:82:e7:99:e5:7f:06:94:9f:
c8:4a:c9:22:3b:4f:1c:b6:e3:ba:32:72:f3:e6:91:9d:71:4a:
6d:59:47:c2:14:b5:c6:3c:3d:9e:7c:68:a5:e2:71:5d:8e:cb:
80:37:ff:a3:10:66:22:85:ff:e8:64:b8:48:ae:44:90:f1:26:
5c:7e:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:22 2026 by rpki-client