Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: MQytqmH+1CGM9SZG5BDdPbppeew116xJCxib+HSFLWM=
Subject key identifier: F5:A4:BF:DD:28:00:CD:05:FB:08:B8:2D:C1:64:BB:B5:35:18:6F:71
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019CAC4750029F3465F44B986E90440C66D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 091D
Signing time: Mon 02 Mar 2026 02:01:20 +0000
Manifest this update: Mon 02 Mar 2026 02:01:20 +0000
Manifest next update: Tue 03 Mar 2026 02:01:20 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: KLpeMnquam4IzFX3MP6GW4FoCCkekTu/zurjXigsfKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:50:02:9f:34:65:f4:4b:98:6e:90:44:0c:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Mar 2 02:01:20 2026 GMT
Not After : Mar 3 02:01:20 2026 GMT
Subject: CN=f5a4bfdd2800cd05fb08b82dc164bbb535186f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:8a:57:f9:c6:96:0f:02:75:fd:5e:90:e7:
11:ca:3b:7c:9d:5f:ef:98:f3:de:56:3f:b0:2e:82:
58:11:1b:15:06:20:d4:df:b6:23:c7:19:79:f8:f3:
be:17:28:e9:14:59:fc:43:f0:14:0e:55:71:87:20:
eb:42:54:3d:92:d2:f7:dd:25:52:50:36:7b:73:b8:
89:64:c5:75:3d:83:6c:e7:5e:df:02:9c:a4:d1:7b:
e2:8c:17:80:f4:dc:f7:07:ce:df:d5:94:6e:7f:12:
b1:01:ad:7a:15:04:b7:72:59:26:e0:eb:af:7c:c1:
87:3e:59:f5:b5:6d:2e:9c:96:e4:55:8e:90:cf:9b:
42:8a:9a:f3:ae:f4:1e:70:90:3a:2d:f8:aa:1b:64:
4d:4d:89:3e:78:6b:50:1e:48:91:87:f4:4a:fd:7a:
bb:0b:51:ec:ed:11:da:8e:64:50:95:8e:aa:d0:56:
c9:45:d5:43:6b:43:94:58:37:27:35:02:b2:c3:d1:
27:d2:27:08:7b:a0:58:ea:41:50:77:0c:be:96:1f:
3a:77:46:b3:55:d7:c9:c0:b2:2c:c4:c3:d3:a9:bf:
32:ce:bf:a1:22:ce:8e:17:c4:1f:d6:78:64:3c:23:
fd:e1:4f:1f:22:49:5b:91:86:2d:73:21:c5:8b:a4:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:BF:DD:28:00:CD:05:FB:08:B8:2D:C1:64:BB:B5:35:18:6F:71
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b4:e1:5e:0f:56:61:51:2e:44:b2:02:44:0f:86:3c:39:6a:
77:ae:01:31:14:42:2a:5e:83:65:f5:bb:97:72:cd:63:58:8c:
a2:e7:c8:4d:ad:8a:ed:f0:aa:c5:a7:fc:42:2b:6a:54:53:f3:
47:a5:d0:97:bd:cb:c3:c7:a5:b4:9c:f3:3f:07:dc:87:e0:f3:
fe:70:11:ea:fd:da:fa:10:4c:01:40:de:77:79:46:24:96:e7:
45:06:cb:f6:90:ab:aa:38:75:79:75:6a:a7:1e:67:d1:6e:87:
84:34:27:60:76:8b:e9:ec:a9:54:06:aa:48:9c:6c:08:57:99:
98:b8:32:05:b9:a1:6c:16:c5:e3:20:3c:ec:cd:f5:b2:45:d9:
10:b5:ff:79:f0:6e:ee:73:ee:91:f4:0c:41:ed:95:01:d7:aa:
ea:cf:1f:b9:27:3a:1b:1e:25:ed:78:ae:e2:8c:22:74:ed:c2:
8c:9d:f1:e0:e7:2d:ab:ae:2e:9b:15:1a:5c:51:ec:6c:22:dc:
76:ca:67:77:33:62:a6:1b:27:0f:22:e9:50:6a:23:5f:58:4e:
e5:df:bd:c6:46:74:15:0a:33:23:21:8b:2d:37:dc:31:31:c2:
de:8e:32:43:48:6a:79:31:e3:48:c3:f3:5e:19:7a:f1:86:ea:
53:72:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:46 2026 by rpki-client