Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: yznJ/aViiHIQOn9UncboTw9/3GuWB2XTZjpfv0SYSBM=
Subject key identifier: E0:47:EB:7C:54:5B:E9:63:50:2A:A0:57:A7:4C:BD:71:2C:CF:DA:C0
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019D99D03860B4B74250B54ACE27FAE6471B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0998
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: ajG+uwLquAB2oOmjD+Ox3kX3xHvKhZYE9JfT/o634zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:38:60:b4:b7:42:50:b5:4a:ce:27:fa:e6:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=e047eb7c545be963502aa057a74cbd712ccfdac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:89:b6:4c:e4:ac:a2:cd:8c:14:f2:49:85:
6f:ee:c6:cc:19:50:0c:19:bb:4c:64:a1:d0:a2:7a:
dd:1c:f4:1a:0f:18:10:3b:54:6d:db:b6:62:aa:d3:
12:05:ef:12:16:9d:00:91:4c:1e:69:89:df:b1:95:
dc:fd:a9:fa:01:18:dd:e6:06:bb:f9:01:07:e9:36:
b3:d3:d8:56:4d:b2:e0:48:67:fb:8f:d0:db:b8:54:
6f:95:cf:b0:40:d4:ba:b0:b2:0b:a0:7f:f1:5e:e0:
ea:6a:b8:ec:9b:dc:70:98:91:c4:9a:5a:55:70:d5:
3b:1d:4c:b9:60:61:27:99:e3:de:2f:69:84:13:f1:
fd:8f:18:07:9f:56:a2:a7:10:ab:bd:c1:f0:2a:cb:
95:6b:c6:8a:79:85:ac:fa:5d:83:8e:73:04:10:14:
9b:5a:61:69:64:e9:4b:d2:0d:64:4c:6c:65:a6:40:
fe:85:7c:17:c9:ad:31:6c:a4:40:83:5c:13:68:99:
47:66:1d:08:e3:22:10:58:93:9e:17:96:c6:5e:99:
c9:e0:aa:96:28:2c:ad:e6:fd:a2:9f:ab:2a:34:e8:
05:04:25:24:10:e5:5e:a2:be:3e:9c:d1:e3:ff:5e:
c5:0b:76:d2:e3:17:5e:de:a3:62:7a:96:85:22:d2:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:EB:7C:54:5B:E9:63:50:2A:A0:57:A7:4C:BD:71:2C:CF:DA:C0
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:ed:fd:e2:6d:3e:49:c2:c1:43:47:3a:3c:12:4e:fe:2e:
dd:17:ec:ba:5e:41:da:1b:61:d6:e3:a0:ba:c8:f5:1c:d8:86:
ed:ec:0a:a9:35:27:1a:fe:11:51:e0:67:43:cf:c6:c0:82:fc:
d6:af:8c:d3:33:52:c7:ca:af:da:06:f0:08:02:a4:73:58:6d:
38:1a:59:0a:58:c6:ea:15:ed:1c:f5:e8:50:1b:c8:d5:93:72:
37:25:3d:04:ac:c2:9a:f7:1f:a0:ad:ff:76:db:2e:2f:e4:53:
ea:15:82:57:c0:f1:7d:c6:39:0a:d2:04:c0:ec:39:ea:d9:bb:
67:88:16:e0:5d:51:4d:35:c5:5d:10:3c:de:ca:12:6d:13:31:
c2:c8:ce:7a:35:75:39:e8:10:a7:8b:a8:36:59:64:a5:77:17:
a0:23:16:b3:51:ff:da:92:48:98:7f:28:91:ce:1c:a7:f0:21:
51:4a:62:f8:33:10:57:be:c7:72:e5:e8:36:a0:89:d8:e3:d4:
69:b5:38:a4:3b:30:53:a3:99:a0:ef:dd:67:90:80:95:09:cf:
25:8b:d4:21:0d:36:13:6d:1f:fe:3e:ef:ef:6a:10:61:b6:7b:
b7:b8:49:06:f4:e5:2a:31:68:bf:8b:d7:12:83:3b:be:b2:31:
40:6d:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:45 2026 by rpki-client