Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: WWksOKhORQE2IMLaoC44UwyxwEh1MWTiXusxjMiTpxI=
Subject key identifier: 37:96:03:10:1E:34:5B:81:D5:CD:01:3A:95:9A:18:7D:70:15:1D:52
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019D25BAB3801B2E0E615EACC8B5213A51E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 1786
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: OqvWJzr4TZ9cqJzcYcP7qapjBA489bwQDTgrTjj4pfk=)
2: sj7z-OE7wtWIbAsLlk0f8070JJA.roa (hash: fCvU62phFkPvYGJbKu7jFDsWbZSEAX8kQ2AkhH7Ekk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b3:80:1b:2e:0e:61:5e:ac:c8:b5:21:3a:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=379603101e345b81d5cd013a959a187d70151d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:bf:88:52:7d:68:fe:ac:cd:28:1f:30:62:
72:3d:64:5d:d2:ee:f1:c9:49:05:99:87:86:e1:a8:
7d:b8:28:74:66:29:04:7a:e7:7f:09:11:35:3b:ed:
a2:33:a9:7b:6b:e6:71:a6:de:e0:1d:dc:ed:1b:3c:
cc:46:b5:a6:25:af:70:cf:cb:d7:fb:0c:5b:2a:2a:
f2:6f:26:be:ec:ed:35:51:c5:7e:d9:62:aa:df:d6:
42:12:ef:92:92:f1:90:64:3f:a5:30:6d:54:fb:18:
23:8c:d0:5c:9d:98:9a:53:ae:05:3d:d6:7f:b0:13:
69:38:82:93:a8:99:aa:0e:d0:9c:d8:7e:0d:6a:21:
09:16:8b:6b:b6:ca:2e:f2:7b:75:68:f1:fc:e9:37:
f2:56:8f:41:22:1e:99:69:d5:40:ea:09:00:99:0d:
9a:5f:73:9a:68:27:81:ab:c2:ca:65:da:e9:d6:6b:
be:ea:e0:22:2f:0e:20:99:c1:11:92:6d:b2:47:17:
cf:b4:40:cf:59:01:15:b3:59:c6:85:da:eb:28:27:
a5:42:71:f1:af:5e:ce:a8:d4:eb:61:98:b3:43:c1:
3d:42:44:08:89:5c:32:dc:b2:10:dc:1a:83:fd:22:
61:14:4f:d5:d7:aa:ca:92:0e:94:6b:80:0d:e3:92:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:03:10:1E:34:5B:81:D5:CD:01:3A:95:9A:18:7D:70:15:1D:52
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:20:44:3c:b9:65:6f:29:d7:b9:82:05:b9:8d:51:da:0d:
2b:4b:bb:ac:6e:1e:2c:15:bc:ea:b3:57:fe:82:5f:b3:06:9e:
18:a7:87:fd:d1:a2:95:04:a9:d6:13:36:db:74:25:ae:26:bb:
a5:d2:1f:ed:1b:2c:95:b2:93:48:30:ad:b4:58:05:4d:6f:9d:
e5:3c:f2:8f:5f:e9:ca:1e:88:f7:8a:09:36:c0:91:c9:77:e1:
fd:0a:7c:36:37:d4:c4:3b:3c:b6:79:1f:26:9b:a0:da:bd:5f:
cc:9a:56:68:1e:c2:87:4f:54:65:74:20:35:9f:36:58:c2:52:
d7:f5:ef:09:6f:ec:4f:4b:52:8a:fe:4e:1b:74:b3:05:24:d0:
93:42:0c:2a:52:03:9e:17:be:83:2f:16:5c:a0:d8:d0:4d:b0:
17:cc:0f:6b:55:2f:34:fc:db:33:28:80:02:c4:fa:ce:73:71:
e9:2b:34:f1:05:5c:cc:58:e8:c8:13:ba:50:91:c3:4f:91:ef:
4f:11:36:fc:f5:34:04:dc:14:10:a0:a6:3a:f4:6e:ee:48:cc:
f0:d9:69:72:c1:d5:e8:e9:e1:67:ad:a6:8f:ce:09:6e:01:a2:
be:23:ed:78:7f:c9:1c:c6:4a:0e:c2:a7:10:d6:93:43:4d:7c:
b7:ff:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:05 2026 by rpki-client