Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: kqQbm+d27vRBFlgav7Hp4h32bhfMDHuA/tB8+ng2fNU=
Subject key identifier: 54:F3:58:52:11:C1:8C:1A:E3:92:DB:42:3D:5A:BF:A0:E8:60:15:00
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 01A1DEDE18D0167A042B4BAB0448AC34A342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0BCE
Signing time: Sun 15 Nov 2026 11:00:59 +0000
Manifest this update: Sun 15 Nov 2026 11:00:59 +0000
Manifest next update: Mon 16 Nov 2026 11:00:59 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: VwQPQwG4wjqMub38pBFlRABQhSmzVxbq2iHoKtVRJv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:18:d0:16:7a:04:2b:4b:ab:04:48:ac:34:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Nov 15 11:00:59 2026 GMT
Not After : Nov 16 11:00:59 2026 GMT
Subject: CN=54f3585211c18c1ae392db423d5abfa0e8601500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:0f:f7:2c:d5:2f:78:9a:c6:6c:7f:a9:7f:
19:18:3b:07:a0:dd:2f:08:8f:ab:21:ae:71:ec:58:
40:ac:f4:73:64:5c:dc:5e:64:9c:25:37:cd:cc:77:
88:6b:7c:d4:14:3b:6c:b5:c2:52:ac:6c:aa:44:1c:
13:6c:61:31:bf:e1:78:2e:a1:75:1a:e6:19:db:91:
ac:2e:de:d4:8c:9d:ae:47:a5:05:f5:4a:50:52:b1:
eb:5e:11:96:4d:5e:29:e4:c8:30:c3:4b:25:04:f5:
ca:fc:17:7e:5a:14:17:59:53:60:34:0e:16:0b:c6:
b3:45:78:f6:dd:d8:7c:8a:b6:d5:95:05:e9:d7:02:
5b:98:76:35:90:77:c1:ee:25:9c:ff:83:d0:5b:ab:
ad:f4:f7:94:a1:30:ee:37:51:2d:7e:0e:6e:f6:d9:
6f:f7:46:4b:e7:da:51:d4:28:2c:2f:6a:c0:62:92:
f2:0b:3c:e1:e2:56:68:bf:7d:76:a4:14:e0:78:bb:
f5:88:4d:60:4b:d0:a0:9c:86:c6:c5:c5:59:60:22:
d9:97:16:53:0f:99:16:01:55:e7:11:05:a1:08:98:
6b:dc:34:2c:b1:89:e8:37:0f:9c:5e:fc:fb:a1:3c:
20:47:3c:e8:b0:e3:29:e2:56:bc:3d:c6:02:ee:45:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:58:52:11:C1:8C:1A:E3:92:DB:42:3D:5A:BF:A0:E8:60:15:00
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:7a:98:51:36:6c:8d:21:b1:50:06:81:49:77:a1:72:d9:
db:2b:36:2b:80:c7:ca:e3:94:a6:eb:de:00:04:29:e2:ce:70:
a3:a9:d5:69:59:fa:3c:02:59:c6:e4:4b:1f:cf:1f:76:88:01:
95:d0:25:95:7a:8f:1c:b7:41:ed:fa:60:03:09:b5:35:0f:80:
76:dc:f3:e3:ca:aa:cc:3c:8f:b5:5b:46:ed:15:53:44:d8:ba:
4e:f5:08:ed:f0:5c:3b:12:d4:bd:66:ab:87:b8:04:e6:7e:2f:
bd:65:79:51:37:e8:6c:bc:cc:d3:e3:11:bb:b3:37:0d:df:23:
8d:57:c7:52:a3:c0:0a:e3:cb:7c:17:0e:54:4e:4f:c3:73:a4:
a8:9f:28:e5:4a:2a:d4:5c:ef:9a:75:f9:63:dd:37:8b:f3:5b:
0c:5b:11:46:01:dd:26:e6:24:b8:c5:de:10:6b:a6:73:99:e0:
3c:44:23:38:6f:8f:f7:74:40:bd:c4:5e:ad:57:4d:2a:55:20:
e6:f7:7f:fc:6d:3f:91:d3:96:68:d1:06:f0:f4:b3:b0:a3:57:
bb:11:02:2e:56:9e:29:fb:3e:e2:ad:fe:1c:3d:c8:f6:83:79:
cd:4b:07:a2:fa:66:1f:87:f6:d6:eb:8f:7a:ef:ae:52:df:9c:
7a:45:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:35 2026 by rpki-client