Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: nudN8njvwkyEHOYBOa/3j825+OwMn6sIXk44Q78cz/U=
Subject key identifier: 9B:54:C6:94:E4:C6:FB:D3:50:E6:ED:AC:0C:09:E4:AC:0D:79:9B:B4
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 019EB7A0EC25F2E0941EE3D5A25A34BC1876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0A2C
Signing time: Thu 11 Jun 2026 17:00:37 +0000
Manifest this update: Thu 11 Jun 2026 17:00:37 +0000
Manifest next update: Fri 12 Jun 2026 17:00:37 +0000
Files and hashes: 1: 3_tNIlo2YWHL3dJkJCC31hE6w5g.roa (hash: BBLO35NAw44GpuFUB+ZTAQbSUglK46VVnMrzcyrNdJ8=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: ZxLo9LG2nuT+REH0HU3k2H/yPpNvIrnwIvaKtb4TSfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:ec:25:f2:e0:94:1e:e3:d5:a2:5a:34:bc:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Jun 11 17:00:37 2026 GMT
Not After : Jun 12 17:00:37 2026 GMT
Subject: CN=9b54c694e4c6fbd350e6edac0c09e4ac0d799bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:b6:20:f3:37:ad:91:ab:02:1e:a6:7d:4b:
aa:7d:d8:15:4b:91:1f:a6:44:e3:e7:d1:00:0a:c0:
85:8b:a4:78:ff:1b:27:02:6f:21:69:0d:7b:5c:36:
0f:e8:79:37:2a:2b:52:1e:e5:4e:e1:39:9b:61:9a:
8f:e1:2a:83:2c:32:d5:c8:b9:35:28:59:04:44:c6:
71:a7:05:eb:13:d5:70:e3:b8:79:b8:da:b3:94:df:
9f:65:8a:46:e8:a6:11:31:35:94:d6:ab:53:9a:ea:
43:80:a4:56:f8:cf:0d:9b:18:f2:36:76:95:b2:3c:
b1:83:40:50:d2:f7:7e:ca:ff:c9:49:ea:e4:9a:6e:
2e:a3:ec:ed:ed:92:d6:b5:4e:81:00:92:8e:03:37:
63:e8:d1:22:17:41:aa:55:3a:de:c6:3c:76:d3:5e:
b6:04:e2:23:cf:88:a5:70:08:3d:8f:c8:20:e6:e5:
9c:a5:ac:b3:4f:0c:48:58:70:99:60:fe:4e:f2:7f:
35:40:17:57:6c:a0:f2:fd:c3:65:d7:42:b7:9a:40:
ec:33:bc:4e:fd:cf:06:5e:25:ce:08:3f:1f:a2:2c:
9c:f1:49:0f:8d:f5:6a:98:5c:fe:6b:be:17:46:ee:
16:16:ba:dc:96:49:4f:81:39:18:43:3a:b8:a2:f9:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:C6:94:E4:C6:FB:D3:50:E6:ED:AC:0C:09:E4:AC:0D:79:9B:B4
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:ce:f9:c5:73:31:f7:70:2f:31:d0:d2:31:3b:ad:64:21:
0d:2f:56:88:1f:04:a8:35:cd:e6:22:fa:19:0c:4c:69:10:cc:
2d:85:85:9e:87:12:0e:6a:5a:e7:43:e2:27:12:31:b0:67:cf:
92:b0:19:7f:9a:55:31:28:6a:16:b0:af:71:96:21:b2:2d:81:
5e:d4:59:34:ac:28:cd:7e:03:81:34:73:cb:cb:8c:3f:c8:32:
85:8b:d2:3e:13:fe:4a:12:51:3a:5d:d4:cb:e1:19:dd:66:dd:
2a:80:da:11:b9:ed:c3:56:87:7b:22:40:a6:10:ee:a2:f1:27:
8c:dc:1e:a2:61:a4:c4:4e:e1:f9:4e:65:ab:04:3a:30:15:a6:
cf:75:f5:8a:ab:d7:68:d3:e8:a1:1f:82:8d:a4:9c:cc:4f:68:
86:19:15:e0:d1:b2:df:c1:4c:bc:6d:49:15:07:d1:41:21:e8:
31:8b:89:d2:1c:fa:12:f8:6f:f6:11:82:df:a2:c2:c3:7e:39:
23:9a:f4:4e:ac:e5:f9:bb:26:87:e3:ed:73:d5:c2:52:53:af:
80:9b:07:f7:11:14:cd:7f:8d:4e:74:50:5a:21:9b:53:e1:01:
85:82:6f:fb:58:34:71:31:26:99:f1:47:ba:b2:4f:41:62:d6:
9c:4e:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:08:53 2026 by rpki-client