Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
File: Tm32g40DOAFB635O5V3AXYcGHck.mft (raw, json)
Hash identifier: 0+3VyjewT7gBVMY/QAaJHehDpQpKi5CR4niGX5pZsog=
Subject key identifier: 94:E6:98:D5:88:3E:C0:AD:CC:1F:A8:37:A5:48:F8:D6:F9:E9:B0:83
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Certificate issuer: /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial: 019DA2D335A884B1DFB6C9D85E58787A124E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
Manifest number: 1314
Signing time: Sat 18 Apr 2026 23:00:43 +0000
Manifest this update: Sat 18 Apr 2026 23:00:43 +0000
Manifest next update: Sun 19 Apr 2026 23:00:43 +0000
Files and hashes: 1: Tm32g40DOAFB635O5V3AXYcGHck.crl (hash: ZeXu7ri6FQrsXVswxMbDzBw5O13+QR30H6JRbXMpTc8=)
2: xdrQzD8F-W74pVt7R0a-P7c9upU.roa (hash: abblQYTkxZVFW1Ns3PROXNnoRQdUS1zz9CUYdEet9Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:35:a8:84:b1:df:b6:c9:d8:5e:58:78:7a:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Validity
Not Before: Apr 18 23:00:43 2026 GMT
Not After : Apr 19 23:00:43 2026 GMT
Subject: CN=94e698d5883ec0adcc1fa837a548f8d6f9e9b083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:56:fc:0a:b5:9c:c9:fd:b7:13:d0:b3:1b:
7a:55:ea:68:33:7e:65:f4:6e:19:cf:74:dd:9d:1c:
ca:30:e5:74:c3:0b:f5:53:56:86:af:95:e5:a0:8d:
60:76:ee:78:e4:1f:4f:ef:81:69:c2:b8:d7:c4:d8:
87:71:12:8d:52:24:07:97:2e:75:2a:4e:66:d6:5a:
f2:91:5d:a7:0d:ff:6d:2c:ab:c8:26:53:16:52:89:
d4:5a:e7:a4:4f:8b:74:32:2b:2e:b3:14:43:f5:f2:
91:9f:e0:7a:ba:be:35:37:14:d7:6c:d9:24:4f:bc:
07:f3:3d:f1:70:c3:3a:b5:a1:95:77:d7:da:9e:d0:
be:0b:a2:b9:e6:73:77:80:f4:42:cf:21:ea:34:65:
4b:65:9b:cc:9a:d1:0c:ea:98:ae:6e:dc:97:e1:bc:
f6:46:ca:10:f9:9e:ab:35:38:1d:7c:11:53:7f:dd:
87:80:88:55:ee:7a:d6:3c:37:81:88:e9:33:d6:ec:
1b:c2:48:65:d7:bf:64:5e:74:cf:ad:13:0e:9a:60:
4c:98:58:dd:63:b6:d7:8f:59:d2:c4:66:df:20:19:
29:5c:51:1a:ce:58:b0:7d:dc:ea:45:1f:55:f9:b6:
c9:aa:75:7b:25:9d:65:a1:62:dc:b9:73:22:cf:18:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E6:98:D5:88:3E:C0:AD:CC:1F:A8:37:A5:48:F8:D6:F9:E9:B0:83
X509v3 Authority Key Identifier:
keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f7:fa:03:15:e4:80:2f:1b:d0:a1:a6:d0:bd:fb:6e:fa:e2:
73:ba:b7:ca:00:04:75:5d:7e:b8:b9:91:9e:3b:21:08:eb:d9:
de:29:02:9b:b3:16:4e:8d:35:ad:fa:7a:00:3f:12:e5:4b:cc:
1b:b8:6b:a4:54:76:67:32:4f:cd:12:bf:5a:c6:dd:19:ef:eb:
be:a5:2d:f9:f0:4a:d8:89:cc:ff:ae:aa:ab:eb:5e:e9:f1:eb:
e2:29:f7:f4:f7:07:15:a6:fb:26:d8:f6:dd:27:98:7c:03:ff:
0f:ff:2a:92:33:7a:7d:1f:6d:2f:dc:6c:e9:f9:b0:33:f2:ed:
ef:7d:94:bb:5a:ed:ab:f7:9c:e5:d9:55:d0:fa:ea:2d:01:a9:
91:1c:d9:e8:49:fd:18:a0:92:4c:4d:bf:55:bb:4d:e0:fc:e4:
e9:bf:7d:ed:1d:c2:63:ee:7f:0c:5c:ca:1c:34:bb:47:e1:fb:
ca:03:0b:09:c4:4a:29:1a:6c:29:1e:62:9b:86:6a:79:6d:aa:
de:4f:ed:5a:15:c1:b7:57:2e:b9:fa:2d:a7:5f:5c:35:7e:6a:
0a:91:f9:86:85:34:71:bb:90:b3:d5:82:26:04:43:3e:2d:79:
ea:45:8b:5b:b6:61:6d:7a:44:16:09:3d:b3:2b:4c:92:31:89:
75:ef:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:54 2026 by rpki-client