Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: x1BHY9Md0huwy4biZ5xLtHQwS8+dDnzUpaq3haWVH30=
Subject key identifier: A8:6F:52:DA:71:F8:63:DD:DA:A6:D3:4A:E7:C1:A6:AA:17:AB:2A:63
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 019D273A9F712A65BDE2B31AC43B4EF808CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 12D4
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: xGC7KkGM9FlBlPzm2Ayb3aNdKw68eLywnevdTEXb2FA=)
2: xdrQzD8F-W74pVt7R0a-P7c9upU.roa (hash: abblQYTkxZVFW1Ns3PROXNnoRQdUS1zz9CUYdEet9Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9f:71:2a:65:bd:e2:b3:1a:c4:3b:4e:f8:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=a86f52da71f863dddaa6d34ae7c1a6aa17ab2a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:ab:7a:2b:c6:4f:1e:f3:fa:24:29:a4:19:
0d:16:b6:53:09:56:1e:68:e3:38:16:79:2c:24:a8:
7d:24:d4:53:03:cc:e8:21:5a:d5:af:0f:f0:2a:d4:
ef:9d:3f:37:43:58:ae:df:b0:2d:4a:4e:cb:cc:d7:
81:b9:11:d9:fe:02:c8:c5:fe:61:cc:ff:49:c8:b0:
6f:dd:d6:18:7b:70:72:3c:9f:17:ca:aa:88:ee:36:
15:75:29:ff:42:11:3f:a2:64:1a:46:e6:b4:ea:9c:
cf:40:98:59:21:d5:82:e8:3f:58:dc:ef:5a:61:2a:
43:ca:34:7a:9a:d0:75:42:a6:d4:48:35:c8:5c:17:
3a:b1:a9:74:de:68:1d:98:0a:e8:6e:e4:f6:fb:cb:
6e:cd:20:c9:18:6c:fc:43:c8:f5:00:7d:a4:61:9f:
67:85:fd:6c:cf:9e:8a:4e:44:d2:8b:2b:90:08:41:
78:16:cb:4e:1e:77:68:4e:72:fc:3c:d9:54:51:3f:
19:ce:88:10:3e:06:51:ea:4f:49:65:60:0c:41:79:
73:17:a0:29:53:db:44:d9:dc:11:00:c0:7b:cd:31:
08:6e:32:61:eb:54:2d:6c:f9:41:e8:89:ea:3d:9c:
7a:3a:01:23:ff:a8:dc:e2:f0:2e:be:1b:65:fc:98:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:52:DA:71:F8:63:DD:DA:A6:D3:4A:E7:C1:A6:AA:17:AB:2A:63
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d1:2d:22:93:aa:13:91:a7:0d:e2:3b:31:9f:03:ba:b3:08:
0b:43:19:1e:72:ce:19:da:b8:e1:5d:69:ba:51:89:d3:19:d5:
15:ec:20:93:73:44:89:8e:e4:da:09:ef:18:cf:70:e3:4a:19:
81:ec:5d:7e:79:08:99:d5:06:fb:73:43:46:a3:16:07:f2:c8:
07:91:4a:c0:7b:d6:b9:d9:0f:70:30:bf:68:a0:9d:32:f9:32:
62:f7:c2:52:de:8d:09:44:33:1f:91:b4:f9:e9:09:b1:ab:d3:
02:c4:dc:7a:84:e8:27:07:47:2f:85:42:46:75:48:10:93:b5:
fd:e5:7a:84:4f:e3:10:4e:37:dd:98:65:04:ce:b2:9e:e5:82:
74:51:7d:4d:e8:b8:78:43:25:4d:d1:0d:cb:43:27:69:a8:4a:
67:a1:b0:f1:73:81:a6:38:56:da:18:d5:b5:fc:a6:73:41:68:
39:cb:45:e8:57:64:cd:18:21:61:ed:50:48:1e:46:e5:92:0e:
81:ce:f2:52:68:68:1c:ac:b1:37:7a:f7:7b:81:c8:85:68:da:
66:64:91:a4:ce:da:5e:5d:15:98:24:26:fb:85:29:6c:e0:4f:
a6:3a:b5:cd:1f:a6:07:ca:d9:83:78:24:3c:12:e5:23:f7:d5:
d2:71:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:49 2026 by rpki-client