Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: EUon+J7NT7uCS/LGxxd8ZDButPGj//7o9ldV85kTWR8=
Subject key identifier: 2F:82:F4:D0:CF:78:9C:64:C2:E3:6D:C9:F4:C0:4C:B3:D6:20:FD:B0
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019D3752772683022805F5B09A38261EF032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0965
Signing time: Sun 29 Mar 2026 02:00:44 +0000
Manifest this update: Sun 29 Mar 2026 02:00:44 +0000
Manifest next update: Mon 30 Mar 2026 02:00:44 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: mm3NeRRF1H/QTBtJ5zNTC143Vvf5HR7k46Schug4Va0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:77:26:83:02:28:05:f5:b0:9a:38:26:1e:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Mar 29 02:00:44 2026 GMT
Not After : Mar 30 02:00:44 2026 GMT
Subject: CN=2f82f4d0cf789c64c2e36dc9f4c04cb3d620fdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:ff:56:01:c0:22:5d:61:5e:d5:56:ad:61:
45:f9:62:90:9b:64:56:f6:c9:98:21:46:e3:3a:dc:
32:77:e3:85:c7:16:71:e7:ed:4d:1d:bc:c8:a8:98:
31:3f:2c:9f:60:c9:52:5e:39:8c:59:8c:1a:a1:2b:
1c:3a:36:9e:f3:ff:91:35:e6:85:1c:49:d1:15:08:
2c:61:55:21:67:0f:e7:e6:88:26:ff:d7:9f:c2:91:
a1:a1:cd:08:c9:14:d4:be:e9:27:0d:74:fb:b1:57:
10:51:e9:85:50:6a:33:88:4c:28:8c:b1:e8:6d:8d:
0c:13:b4:cd:1d:70:12:73:dc:76:6f:30:89:92:66:
13:ef:3e:cc:39:3b:f2:ff:9d:15:a4:d7:9a:49:32:
02:b4:9b:76:48:04:93:16:ca:03:66:87:5e:72:71:
90:0a:5e:0a:59:05:a2:04:b1:c0:48:62:e8:48:90:
8b:b9:96:cd:13:8e:3f:6f:cd:24:51:5c:32:43:90:
45:90:44:b6:1e:8e:1c:57:0f:d6:8a:fb:e1:b2:71:
3a:0f:91:20:0f:dc:2d:f2:08:bd:5e:6f:85:62:67:
55:f1:c3:28:80:a8:38:8b:0f:0a:57:2c:c6:a2:c8:
86:37:6f:a1:fc:55:db:89:71:b2:4f:27:aa:7e:44:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:82:F4:D0:CF:78:9C:64:C2:E3:6D:C9:F4:C0:4C:B3:D6:20:FD:B0
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:17:a7:f4:8a:de:3f:59:cf:b0:a9:40:aa:77:eb:7b:7c:dc:
7c:6c:43:aa:d6:5d:c3:6f:67:bf:26:d7:46:c7:36:d5:35:e7:
5a:94:c2:f6:0c:e6:c0:5b:93:cf:dd:af:51:1b:70:b8:a9:e5:
d7:d7:a5:e0:8c:f3:64:96:3a:c4:12:a2:81:0a:a2:c5:b6:9a:
a2:2d:6a:83:db:2f:2e:61:6e:37:99:95:43:7a:08:c2:a0:1a:
7b:25:37:8d:d2:3b:3c:6e:d8:f8:fc:af:5d:3a:17:dd:2e:12:
4e:ca:41:38:b2:b4:62:49:f8:ae:be:b0:6e:93:3f:dd:e0:3d:
6a:75:32:bd:2b:ae:04:1f:6f:6e:b7:09:ea:f4:f8:a8:98:e5:
8c:e1:cf:b3:59:64:80:aa:e1:a8:4c:fa:9c:43:99:74:fe:e3:
8f:8e:84:8d:f8:6e:c6:1c:96:2d:3c:6a:09:48:33:90:ff:6e:
aa:c0:da:0f:76:cf:75:e1:48:6a:7b:9b:e7:fc:8a:c4:e6:f9:
ff:e7:1e:36:93:c6:30:6d:ad:58:c0:00:b7:4b:75:f3:e3:06:
3a:8a:50:af:f5:f4:09:19:17:63:b8:fd:66:21:99:cb:ea:d2:
70:e0:77:18:6a:92:f4:62:98:52:9e:63:ff:d8:ca:ba:fc:1a:
09:65:68:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UncmgwIoBfWwmjgmHvAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz
YWFhOTQwHhcNMjYwMzI5MDIwMDQ0WhcNMjYwMzMwMDIwMDQ0WjAzMTEwLwYDVQQD
EygyZjgyZjRkMGNmNzg5YzY0YzJlMzZkYzlmNGMwNGNiM2Q2MjBmZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCP/VgHAIl1hXtVWrWFF+WKQm2RW
9smYIUbjOtwyd+OFxxZx5+1NHbzIqJgxPyyfYMlSXjmMWYwaoSscOjae8/+RNeaF
HEnRFQgsYVUhZw/n5ogm/9efwpGhoc0IyRTUvuknDXT7sVcQUemFUGoziEwojLHo
bY0ME7TNHXASc9x2bzCJkmYT7z7MOTvy/50VpNeaSTICtJt2SASTFsoDZodecnGQ
Cl4KWQWiBLHASGLoSJCLuZbNE44/b80kUVwyQ5BFkES2Ho4cVw/WivvhsnE6D5Eg
D9wt8gi9Xm+FYmdV8cMogKg4iw8KVyzGosiGN2+h/FXbiXGyTyeqfkRDHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+C9NDPeJxkwuNtyfTATLPWIP2wMB8GA1UdIwQY
MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt
MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy
LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxen9Ire
P1nPsKlAqnfre3zcfGxDqtZdw29nvybXRsc21TXnWpTC9gzmwFuTz92vURtwuKnl
19el4IzzZJY6xBKigQqixbaaoi1qg9svLmFuN5mVQ3oIwqAaeyU3jdI7PG7Y+Pyv
XToX3S4STspBOLK0Ykn4rr6wbpM/3eA9anUyvSuuBB9vbrcJ6vT4qJjljOHPs1lk
gKrhqEz6nEOZdP7jj46EjfhuxhyWLTxqCUgzkP9uqsDaD3bPdeFIanub5/yKxOb5
/+ceNpPGMG2tWMAAt0t18+MGOopQr/X0CRkXY7j9ZiGZy+rScOB3GGqS9GKYUp5j
/9jKuvwaCWVo1A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client