Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: ZQxidUGxw9tn+PeH9EH73QNfzy/ooxwGWdRIv+wQaGM=
Subject key identifier: 8A:94:6A:4B:68:24:CA:D1:FF:92:8D:52:81:53:F2:87:8A:A8:BF:45
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019D337565BAE7FC3C5EC57EF2C7D093D546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0963
Signing time: Sat 28 Mar 2026 08:00:24 +0000
Manifest this update: Sat 28 Mar 2026 08:00:24 +0000
Manifest next update: Sun 29 Mar 2026 08:00:24 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: aFKEyaJDAIRFPor6s33PFfDLD/tdNV8NWxxcYDmxWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:65:ba:e7:fc:3c:5e:c5:7e:f2:c7:d0:93:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Mar 28 08:00:24 2026 GMT
Not After : Mar 29 08:00:24 2026 GMT
Subject: CN=8a946a4b6824cad1ff928d528153f2878aa8bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:f7:c0:d7:10:49:07:c2:aa:24:bb:7f:fb:
19:df:12:c8:b8:93:bb:50:75:52:5e:8c:f5:97:a0:
0e:e8:d7:9b:c0:b9:6d:e5:84:4a:58:14:03:08:04:
8f:fa:d6:43:14:d2:e1:79:27:9b:81:7d:8c:9b:99:
55:14:57:65:4f:6b:11:0f:0e:97:22:80:46:f7:8d:
77:a0:9f:db:ee:3b:ba:a2:29:15:4a:fe:14:5c:ef:
01:c1:ed:41:0f:f9:bf:0b:ff:04:0a:3c:56:67:63:
52:ea:6e:e4:4b:05:1f:47:3e:29:80:3a:f3:95:dd:
bc:40:2c:04:f8:b3:e9:ce:e0:a9:54:52:ea:d0:44:
f0:d0:61:07:fa:80:8b:cd:e7:dd:ae:15:38:14:1f:
18:e5:99:fe:f0:8e:0a:09:bc:22:46:21:0e:f8:35:
f6:a4:06:08:86:8d:d5:41:73:ce:ff:38:dd:10:1e:
d8:a9:25:48:f5:8f:e6:73:0b:9b:dd:81:9f:7b:cc:
b4:87:a5:44:bc:57:16:b5:cb:63:02:c6:1a:88:50:
61:f5:84:39:47:43:d9:27:c0:95:70:54:cc:f5:bd:
33:a8:4f:f3:b3:e7:51:0f:ce:f4:8a:dd:79:f3:da:
00:f3:05:46:a7:ac:46:5d:fa:21:bd:6a:65:3d:96:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:6A:4B:68:24:CA:D1:FF:92:8D:52:81:53:F2:87:8A:A8:BF:45
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:a7:b0:c5:46:4f:c4:11:2e:fc:09:74:6f:31:05:25:0c:
ed:87:26:13:e3:91:e3:2f:ec:40:a9:d8:f0:24:b0:51:0e:39:
e3:3c:ad:ae:7d:9f:98:45:90:10:a5:50:5e:3d:3b:2e:4e:3b:
88:3c:7f:de:2a:21:85:4c:6e:64:c0:3a:d2:b8:36:29:99:7a:
a9:0d:7f:62:12:a6:21:fe:8b:ed:df:1c:03:ea:54:88:6e:1b:
be:bf:d3:a6:92:71:b0:4c:bc:6a:af:3b:9c:03:74:c4:0b:b7:
02:bb:d7:34:59:b4:53:2b:f2:8b:10:68:42:ec:5d:61:ec:40:
3d:fc:19:ad:73:cb:73:c1:e5:e1:7e:ef:6e:ba:9d:c4:f7:1e:
7a:9e:f1:b1:f1:0f:60:cb:ef:6f:eb:4f:dd:14:ce:a2:e3:80:
92:56:b5:66:f9:e9:9b:e3:f2:e3:e8:fd:65:06:26:d2:2b:00:
a0:a5:6c:38:ee:c4:09:01:37:76:7f:e6:36:38:89:a8:ff:fe:
ed:60:7b:5a:db:17:4e:fa:eb:b7:e5:a3:7f:8e:6e:02:e8:df:
d3:44:61:df:19:aa:e6:20:c7:b8:00:99:ca:2b:5b:cb:c1:05:
1f:53:39:0e:82:c8:f4:0b:c2:74:94:dd:8b:b6:d5:06:5b:b4:
57:6b:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:19 2026 by rpki-client