Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: wazoTG2Ps2nOQh4c3a8roU28WheLijUilglxwjMgiiE=
Subject key identifier: D1:82:72:D7:D1:BB:8E:32:25:A7:EC:BC:5F:8F:B1:CA:9F:11:60:6C
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019D2772524404394D144C954AE6C24980D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1498
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: /0knBa0XpnKyCiwfGtkCzF6MQhEwTyVB8zBPveXXnCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:52:44:04:39:4d:14:4c:95:4a:e6:c2:49:80:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=d18272d7d1bb8e3225a7ecbc5f8fb1ca9f11606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:35:14:1f:cd:12:ed:a6:5b:82:cf:9b:3e:
69:8e:53:ba:35:f1:8d:71:21:b2:83:fb:8c:9d:fa:
74:1d:31:0a:a0:12:5a:be:b8:8c:c2:e6:17:b4:0e:
02:f7:aa:63:ab:da:d0:d3:38:e9:6e:2b:1f:e2:ec:
94:db:78:cd:b3:8a:d0:9e:17:b0:e9:fa:5b:82:7f:
cd:5f:81:4d:a6:7f:2a:b1:77:fe:a7:aa:8f:e3:22:
43:9d:7b:c8:7e:87:6a:a2:ae:4d:04:82:b6:bd:34:
0d:bb:47:c8:75:22:c5:ab:c4:66:c4:22:45:a4:6e:
25:33:76:1f:4f:05:ea:a4:7c:f4:29:82:ac:cc:3e:
7a:a8:70:f1:45:14:7d:4a:ef:36:71:47:de:a1:29:
fc:49:7f:6c:0a:4d:e8:f7:3b:5a:77:ce:a1:94:e7:
db:f9:bc:dd:32:fa:bd:05:8e:a4:75:b8:24:73:b4:
e6:15:3d:69:f3:5a:93:63:34:20:4e:7d:ad:c6:64:
54:61:8c:65:fe:0a:10:e2:87:cb:0d:15:1d:ca:08:
db:a1:ca:ae:03:f1:f2:1d:e9:04:c6:14:70:77:c7:
e8:a9:41:8d:d0:93:77:20:52:c1:98:cb:2b:88:eb:
bc:97:4d:0d:52:4a:49:b8:3e:86:d3:fd:7f:bd:e9:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:82:72:D7:D1:BB:8E:32:25:A7:EC:BC:5F:8F:B1:CA:9F:11:60:6C
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3f:80:e9:3f:2a:09:31:b6:90:57:ce:6f:d2:5b:0e:29:e1:
f6:8d:e4:06:29:28:53:23:db:4b:b5:9b:f0:8c:c2:78:fb:8e:
e7:75:c4:bb:8f:70:45:25:25:96:02:90:ea:e5:eb:0b:ce:b3:
24:ce:82:08:d8:08:50:f7:cb:a3:67:50:61:e8:c3:cd:be:b4:
8c:22:9a:89:47:95:09:15:06:42:83:cd:09:4e:36:2e:2e:5c:
a4:2b:4d:4c:11:ad:ca:28:63:cf:86:be:65:4f:4f:16:86:37:
46:ec:11:f2:0b:4f:86:6d:f5:2b:43:78:d4:84:bf:6d:53:03:
c6:16:91:be:fb:00:e9:7d:d2:ad:ed:21:5f:89:72:22:66:0d:
6b:de:86:2d:9b:52:30:63:42:11:9a:11:e4:ed:9c:a6:6e:ed:
0b:7b:9e:50:5f:d1:34:bd:29:b1:3c:49:9b:9c:7c:02:7a:bc:
4b:c4:a6:fd:fa:08:41:c1:d1:f6:3a:22:21:7c:95:98:8a:50:
2c:b9:5a:c4:11:83:e6:fa:2f:7e:6e:59:9d:82:fd:f1:7e:85:
cc:01:5a:97:b7:2e:9c:21:cf:bd:aa:52:4b:01:04:fb:7f:bc:
20:ee:c1:3a:32:57:d4:b3:f2:b3:06:52:13:ba:9b:0b:8b:3e:
0d:d2:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:42 2026 by rpki-client