Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: +syEr/mjPuej5QCZz9iQUcXgtgt85WZtYLt2iX6Z6NE=
Subject key identifier: 42:B8:C8:1E:B0:C6:09:FA:D0:C3:D9:61:A4:DB:E1:6D:84:DC:46:89
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 01A0C8C66529FAAB291EEC346EBE13CD15DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0B3E
Signing time: Tue 22 Sep 2026 11:00:40 +0000
Manifest this update: Tue 22 Sep 2026 11:00:40 +0000
Manifest next update: Wed 23 Sep 2026 11:00:40 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: GrMiysiOVwLiqmaYrPL+vQTGF/ev/w+jjv9JCiGeu+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:65:29:fa:ab:29:1e:ec:34:6e:be:13:cd:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Sep 22 11:00:40 2026 GMT
Not After : Sep 23 11:00:40 2026 GMT
Subject: CN=42b8c81eb0c609fad0c3d961a4dbe16d84dc4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d7:59:06:90:9e:1f:ec:9a:28:5d:53:28:11:
99:f1:4f:0d:a3:7a:14:25:cc:13:2c:17:a9:25:2f:
52:55:42:60:c2:3f:89:af:33:df:8e:85:ba:00:f3:
51:9b:8a:d7:e8:ef:8e:80:0b:32:19:be:4b:95:39:
51:64:4c:4b:09:8c:b6:36:0d:4b:0d:99:91:4a:1f:
68:55:2e:b1:6b:58:b3:29:e7:5c:93:9c:60:ba:27:
a4:46:2b:57:31:97:e3:07:d4:6d:80:32:11:41:0f:
9a:2d:4b:87:06:f4:ad:ad:2a:25:ae:df:61:0d:b2:
e0:ad:9d:ee:d4:e2:64:bf:f3:d2:8a:bd:e9:99:82:
09:c7:d2:07:75:a4:94:68:41:00:4e:2c:dd:3b:a0:
3a:16:1c:43:8c:49:f7:9d:b5:e2:c8:72:cc:d4:98:
0a:d0:34:0b:d6:eb:38:ba:ed:f0:1e:9e:84:16:37:
c9:fb:bf:f9:19:b1:26:29:e5:b8:9a:ea:10:dc:6f:
76:f1:f8:11:b0:c3:e5:73:f4:06:2b:c8:15:1d:86:
16:d5:65:58:6c:03:19:34:4d:ca:bd:f6:b6:d0:53:
75:55:8f:bf:0e:9e:11:ef:04:92:c3:40:1a:f8:e6:
cc:7c:b3:06:92:76:d9:ad:45:c6:d5:78:23:8e:ba:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:C8:1E:B0:C6:09:FA:D0:C3:D9:61:A4:DB:E1:6D:84:DC:46:89
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:d7:9b:ee:8d:39:b7:d6:7c:18:24:06:1d:2f:71:1c:46:
65:df:e6:1b:08:f6:d7:b2:c3:1d:97:5c:16:b2:6c:79:1e:fe:
5c:28:22:47:52:43:48:c8:02:18:80:e8:02:37:8d:a8:96:97:
00:eb:5a:c8:e1:e8:e1:14:7f:c6:22:60:9a:e7:9f:c9:a6:1a:
88:1d:4b:c7:d3:0a:b6:ce:35:cb:32:b7:4e:ce:6a:4f:b4:c0:
a2:3f:3f:54:83:6f:4d:40:75:2b:0f:1a:27:08:88:0e:bd:7f:
70:4b:c1:1e:1d:34:42:99:6e:40:5a:25:50:fa:5d:7d:fc:e3:
98:b3:78:3f:a1:72:e1:0c:bc:95:b0:d4:19:fe:b1:84:d4:c9:
bb:55:a5:c1:ad:af:2b:75:9c:e5:40:c6:4a:e9:75:86:1c:e4:
ee:7e:f7:41:19:c7:b7:70:ad:d7:08:50:8e:fe:9b:29:c9:2f:
8b:a2:9a:e7:1b:78:5a:19:b5:03:3c:1a:c1:f7:02:a1:53:21:
4c:24:15:8f:1c:4f:39:c6:37:52:1c:43:d1:05:d8:65:2b:ed:
80:e6:4f:e3:da:af:2d:4e:bf:22:a4:b1:ec:ea:75:68:31:aa:
9d:7f:ac:2a:5e:7b:5c:bb:be:f7:03:4a:aa:70:b8:e4:5b:71:
45:7b:76:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxmUp+qspHuw0br4TzRXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz
YWFhOTQwHhcNMjYwOTIyMTEwMDQwWhcNMjYwOTIzMTEwMDQwWjAzMTEwLwYDVQQD
Eyg0MmI4YzgxZWIwYzYwOWZhZDBjM2Q5NjFhNGRiZTE2ZDg0ZGM0Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ddZBpCeH+yaKF1TKBGZ8U8No3oU
JcwTLBepJS9SVUJgwj+JrzPfjoW6APNRm4rX6O+OgAsyGb5LlTlRZExLCYy2Ng1L
DZmRSh9oVS6xa1izKedck5xguiekRitXMZfjB9RtgDIRQQ+aLUuHBvStrSolrt9h
DbLgrZ3u1OJkv/PSir3pmYIJx9IHdaSUaEEATizdO6A6FhxDjEn3nbXiyHLM1JgK
0DQL1us4uu3wHp6EFjfJ+7/5GbEmKeW4muoQ3G928fgRsMPlc/QGK8gVHYYW1WVY
bAMZNE3Kvfa20FN1VY+/Dp4R7wSSw0Aa+ObMfLMGknbZrUXG1XgjjrqV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK4yB6wxgn60MPZYaTb4W2E3EaJMB8GA1UdIwQY
MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt
MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy
LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGHXm+6N
ObfWfBgkBh0vcRxGZd/mGwj217LDHZdcFrJseR7+XCgiR1JDSMgCGIDoAjeNqJaX
AOtayOHo4RR/xiJgmuefyaYaiB1Lx9MKts41yzK3Ts5qT7TAoj8/VINvTUB1Kw8a
JwiIDr1/cEvBHh00QpluQFolUPpdffzjmLN4P6Fy4Qy8lbDUGf6xhNTJu1Wlwa2v
K3Wc5UDGSul1hhzk7n73QRnHt3Ct1whQjv6bKckvi6Ka5xt4Whm1AzwawfcCoVMh
TCQVjxxPOcY3UhxD0QXYZSvtgOZP49qvLU6/IqSx7Op1aDGqnX+sKl57XLu+9wNK
qnC45FtxRXt2Xg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:45:56 2026 by rpki-client