Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: kGmVW3pEJM4OK2bN5WpxzF8sgV9mqTfL8pe1cRQ0fFI=
Subject key identifier: 2B:4C:CD:10:3C:E1:16:2A:F8:33:CB:0E:E3:D9:75:12:32:9E:CE:A6
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 019CABA1D7ABD62929339EF1793D3A94D2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 1294
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: 4KiDBxTHW7K4Lm2GdNkpDMgMJ4tflPVB1yN1LkCXiRM=)
2: xdrQzD8F-W74pVt7R0a-P7c9upU.roa (hash: abblQYTkxZVFW1Ns3PROXNnoRQdUS1zz9CUYdEet9Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d7:ab:d6:29:29:33:9e:f1:79:3d:3a:94:d2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=2b4ccd103ce1162af833cb0ee3d97512329ecea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:d2:3d:5f:3e:26:01:27:9f:4d:0e:2e:85:
dc:2e:3f:f7:1b:a7:29:d6:f1:da:4b:80:5e:6c:27:
0b:8e:f0:a4:d3:37:1e:67:ba:e2:a5:ae:f5:d3:73:
70:e3:ec:74:77:c8:42:1b:ae:56:f9:2e:de:ab:fc:
4f:72:63:01:e4:0d:b3:dc:51:8b:74:c4:31:ad:02:
39:f8:bc:72:fc:4c:3a:dd:da:2f:bb:b8:21:34:94:
0a:fc:64:b6:63:87:be:f3:60:54:6e:d5:3e:31:b6:
2c:58:cd:bf:02:6e:a2:b6:98:d3:9d:4d:f0:b8:d0:
af:d2:84:30:5b:4a:66:3e:49:ec:81:45:86:d3:d1:
e0:74:52:2d:a8:54:23:1b:1c:7b:f8:ad:d1:aa:95:
f5:28:1b:38:5a:7f:66:19:09:43:f2:86:a6:4f:59:
27:25:ab:62:67:48:c9:05:a9:a6:d3:ce:ca:0b:2a:
a7:15:ac:5e:65:71:1e:62:8c:e0:47:55:52:83:d4:
a0:80:8b:47:ac:c7:a5:2e:b8:56:e2:61:d7:8a:e2:
a2:34:8d:05:cc:ff:d7:df:e5:06:a6:8b:3d:20:0a:
da:d6:b7:e7:81:79:95:76:27:d1:01:44:57:8c:b1:
89:31:ff:16:19:6d:27:82:46:6c:8f:f2:80:f1:29:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:CD:10:3C:E1:16:2A:F8:33:CB:0E:E3:D9:75:12:32:9E:CE:A6
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2a:a0:a6:63:34:07:71:24:47:db:30:df:8d:e5:6d:ae:50:
cb:9b:fa:62:8a:4a:9f:f6:aa:fd:42:97:cf:27:1d:7e:31:b4:
93:8b:92:90:8d:70:f0:29:a6:21:6e:58:2b:dd:6d:5f:63:88:
60:1f:9e:7b:25:cd:17:2c:97:02:81:a5:d6:70:54:05:ca:cb:
c6:f7:61:e9:7f:c7:22:44:6c:ed:a8:d8:af:2b:8f:bb:c3:83:
26:15:cc:7b:6d:18:9d:0b:8a:e3:36:ce:d8:48:bf:5f:b1:a3:
f6:e9:d1:04:4f:a3:d5:15:b9:be:90:5f:fd:40:86:3d:82:f9:
aa:33:b5:e2:fa:1d:3e:a1:80:05:24:50:b7:ea:f2:3c:e1:c1:
26:c4:97:0a:17:58:f1:8b:57:0c:95:51:c7:30:74:c2:54:f6:
7f:bd:1a:f8:9b:c2:d3:d0:ce:83:6d:9d:af:92:f5:b0:39:89:
33:75:fb:e3:90:16:9d:2a:74:ab:62:cc:ad:72:9c:7b:8f:eb:
12:ec:15:9a:67:e2:fe:34:fd:7f:48:b8:5f:48:34:59:4e:55:
15:ca:c1:e9:16:8b:b2:6f:cb:a4:b9:1e:e7:59:ed:47:13:30:
7e:0b:49:d0:8a:59:a3:81:ae:f9:f7:28:c8:d4:7a:ec:12:6a:
a7:d8:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:14 2026 by rpki-client