
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: /sGhHdm2JHYmJ4/7TVYamlf9hc9gESGeIFZFrORTCK0=
Subject key identifier: 1D:E0:DB:39:E1:BD:0F:15:02:FE:DD:6F:EE:4D:D2:53:C5:33:1E:AE
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019EC148E3A26AE7CB7D76B73C7E3C0EEFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0A31
Signing time: Sat 13 Jun 2026 14:00:39 +0000
Manifest this update: Sat 13 Jun 2026 14:00:39 +0000
Manifest next update: Sun 14 Jun 2026 14:00:39 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: pM8GPtiZ9/GPz33niqhjGx0GNCPvuuUAKTlajxESvSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e3:a2:6a:e7:cb:7d:76:b7:3c:7e:3c:0e:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Jun 13 14:00:39 2026 GMT
Not After : Jun 14 14:00:39 2026 GMT
Subject: CN=1de0db39e1bd0f1502fedd6fee4dd253c5331eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:ab:5a:c8:a1:29:e9:d3:c9:f4:4c:71:4b:
60:63:e2:68:6c:d5:aa:a1:fd:28:c8:a5:cc:98:c1:
d6:9e:77:48:04:2e:c0:51:78:b7:e1:63:b5:74:8b:
17:2a:41:8d:0c:fd:18:25:af:b1:c8:a6:2c:53:69:
8e:ab:38:34:85:a5:11:d3:ef:d2:1f:be:48:62:20:
ef:c7:81:cf:cb:9e:64:ee:0d:70:b0:7d:37:4d:c5:
c7:fe:c0:b9:ba:80:8b:58:bf:20:70:07:da:0b:2e:
5d:4c:5f:c8:52:5d:b3:2c:59:7d:be:23:ff:8f:9b:
31:47:36:6d:fd:da:5f:64:80:02:92:32:02:14:40:
40:b0:f2:da:4b:f4:1a:eb:5d:26:9a:8d:84:cf:09:
13:8f:a3:e3:92:ee:99:fe:1e:f7:ca:de:54:7f:d9:
49:ab:4e:c9:0a:12:77:b1:e8:bc:d7:96:ac:af:03:
17:f9:99:e7:f1:24:df:88:56:d9:2b:85:41:4c:b4:
dd:a0:ea:a3:1b:44:70:96:f0:c9:89:2f:7a:63:b0:
af:ea:aa:fa:cb:78:1d:83:c0:af:71:35:0e:e7:8f:
26:07:1a:4c:19:c5:0c:2f:1d:73:eb:1b:1c:d1:77:
a2:8e:18:4a:e5:34:f7:02:26:9a:9e:1a:79:03:ae:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:DB:39:E1:BD:0F:15:02:FE:DD:6F:EE:4D:D2:53:C5:33:1E:AE
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9e:89:68:b6:02:39:e0:48:3c:bc:1c:16:e2:a5:00:a5:fc:
0a:29:41:45:a6:03:b5:5c:02:60:04:5b:27:19:c4:2c:b7:f6:
d0:0e:e4:e3:12:4c:19:a7:cf:f0:5c:00:5f:f6:37:89:08:5e:
30:f2:e9:c4:1e:84:00:c7:2d:7f:b2:90:0f:48:ca:ef:67:64:
b8:00:54:cc:de:96:50:eb:cf:84:63:8f:39:d7:07:f0:d9:ca:
33:4f:7a:34:50:64:e6:a8:8d:d1:aa:cd:bf:47:20:57:f3:b0:
cf:8c:42:dc:bd:b5:3c:e0:b6:0a:c2:25:fc:39:21:a5:87:b8:
5e:3a:3a:cb:d0:37:fb:c6:22:c4:d3:ec:57:d0:13:e0:e0:9b:
70:0b:30:77:3d:ed:63:d2:b1:3c:60:03:b9:1e:88:a9:9f:77:
10:a0:1e:62:46:dd:c3:8b:e6:98:2a:ad:74:8d:ad:0b:88:9c:
46:35:24:16:6b:c1:f4:63:da:45:00:01:67:bc:d3:11:68:75:
8e:e1:0b:58:ee:5e:2a:91:55:78:ec:37:09:ab:d4:49:cc:3f:
fc:aa:c5:54:35:f3:ef:93:9b:2b:f7:f1:d9:da:cc:f7:94:55:
8d:3f:bd:a3:d0:96:3d:25:d0:6b:32:8a:3a:1d:d9:90:33:36:
f9:c2:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:21 2026 by rpki-client