Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: sU0ulm8ept+2f9UvBzDKNEJHe6Arh1Y0eQntxo0Ljdo=
Subject key identifier: EB:B6:86:CE:A2:A4:84:6E:18:B1:2A:68:F6:D9:05:1E:43:0C:37:F8
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01A0E3622E07F43DAC3B4D9737FC69EFFF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1687
Signing time: Sun 27 Sep 2026 15:00:57 +0000
Manifest this update: Sun 27 Sep 2026 15:00:57 +0000
Manifest next update: Mon 28 Sep 2026 15:00:57 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: cKl3vAD7nRi3GUBMslkq5HzR6dnk7pjUuFYatfbAK4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:2e:07:f4:3d:ac:3b:4d:97:37:fc:69:ef:ff:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Sep 27 15:00:57 2026 GMT
Not After : Sep 28 15:00:57 2026 GMT
Subject: CN=ebb686cea2a4846e18b12a68f6d9051e430c37f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:dd:b3:89:07:f6:b7:78:a1:a0:d3:0f:08:
d5:9f:dc:13:aa:6a:c2:d9:dc:d0:fc:b7:c0:04:00:
80:8e:9b:6b:b2:f7:7f:c9:28:7a:62:91:70:ae:54:
69:67:aa:c2:35:82:26:c5:08:8a:d3:de:0b:c4:ce:
75:ac:15:db:9c:5f:f1:f9:f1:12:9c:1a:63:40:da:
3c:3e:0c:be:ae:c3:6a:43:9e:c3:37:f8:5f:88:3e:
53:63:3c:5b:53:6d:b9:39:3c:df:f5:6e:f9:7b:a4:
f1:2a:ff:53:ff:e2:d4:b5:f3:d9:95:18:2b:b3:5c:
6b:85:d4:e3:53:b9:11:fb:ae:44:eb:5d:bb:c2:45:
31:8b:8d:63:1a:ca:19:0b:08:47:89:ff:00:fb:44:
bf:1b:6c:d5:0d:ed:fb:17:68:11:59:f2:0d:41:ab:
b3:d1:df:2c:9f:12:97:3f:1e:8c:b7:f1:70:1f:11:
92:88:51:a6:d4:4a:33:e9:62:43:ee:47:4c:e7:18:
e2:a5:54:c7:83:54:00:7a:81:93:71:20:83:98:e6:
d1:3c:4c:af:87:dc:01:43:46:f7:1c:b9:6d:8c:7a:
cc:0f:ea:46:94:ec:8c:ee:ec:11:bb:b4:21:57:fe:
16:d4:58:9d:70:c9:67:be:10:37:f5:cc:9b:24:16:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:86:CE:A2:A4:84:6E:18:B1:2A:68:F6:D9:05:1E:43:0C:37:F8
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:b0:74:d6:75:93:d7:a3:a0:5c:69:00:ed:16:26:1a:ce:
e4:fb:5f:f2:aa:76:a9:f5:b1:76:4a:50:79:c1:e9:da:a5:76:
42:da:32:44:ae:80:5e:4f:9a:79:9a:d9:a0:ce:d1:52:33:4c:
b4:8f:54:e7:20:30:e5:cc:0b:6a:28:64:cb:38:14:45:33:fa:
46:fb:d4:b7:dc:0a:31:1e:89:17:00:25:71:18:d7:2b:b6:c8:
97:2f:52:d0:25:07:f5:cf:22:92:61:50:db:ab:da:32:b0:f4:
83:20:b9:52:d3:4f:b5:d2:b3:56:c2:29:28:60:9d:a9:36:61:
c5:91:64:23:be:26:38:ab:c0:42:7f:e1:82:9b:a8:96:d0:9f:
3c:76:e0:e6:d7:0b:01:ae:1f:c1:38:ab:23:bd:eb:b4:6b:13:
a7:04:7e:be:76:e8:7b:82:3c:78:e1:b7:0c:5a:9d:68:f1:6d:
fe:0e:f1:35:35:55:75:3e:4a:9c:27:fe:37:b9:c0:57:7e:93:
8c:9e:49:78:94:e5:7a:a0:17:3d:b9:3d:c5:fc:ef:48:3e:fe:
dc:e8:c5:05:3d:30:42:6b:61:b7:d4:94:60:c2:47:5b:47:c7:
74:f8:6c:c7:47:27:a7:4a:95:21:96:5c:74:1a:8c:b4:07:69:
b5:82:3e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjYi4H9D2sO02XN/xp7/9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjYwOTI3MTUwMDU3WhcNMjYwOTI4MTUwMDU3WjAzMTEwLwYDVQQD
EyhlYmI2ODZjZWEyYTQ4NDZlMThiMTJhNjhmNmQ5MDUxZTQzMGMzN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRvds4kH9rd4oaDTDwjVn9wTqmrC
2dzQ/LfABACAjptrsvd/ySh6YpFwrlRpZ6rCNYImxQiK094LxM51rBXbnF/x+fES
nBpjQNo8Pgy+rsNqQ57DN/hfiD5TYzxbU225OTzf9W75e6TxKv9T/+LUtfPZlRgr
s1xrhdTjU7kR+65E6127wkUxi41jGsoZCwhHif8A+0S/G2zVDe37F2gRWfINQauz
0d8snxKXPx6Mt/FwHxGSiFGm1Eoz6WJD7kdM5xjipVTHg1QAeoGTcSCDmObRPEyv
h9wBQ0b3HLltjHrMD+pGlOyM7uwRu7QhV/4W1FidcMlnvhA39cybJBaEnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu2hs6ipIRuGLEqaPbZBR5DDDf4MB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYiwdNZ1
k9ejoFxpAO0WJhrO5Ptf8qp2qfWxdkpQecHp2qV2QtoyRK6AXk+aeZrZoM7RUjNM
tI9U5yAw5cwLaihkyzgURTP6RvvUt9wKMR6JFwAlcRjXK7bIly9S0CUH9c8ikmFQ
26vaMrD0gyC5UtNPtdKzVsIpKGCdqTZhxZFkI74mOKvAQn/hgpuoltCfPHbg5tcL
Aa4fwTirI73rtGsTpwR+vnboe4I8eOG3DFqdaPFt/g7xNTVVdT5KnCf+N7nAV36T
jJ5JeJTleqAXPbk9xfzvSD7+3OjFBT0wQmtht9SUYMJHW0fHdPhsx0cnp0qVIZZc
dBqMtAdptYI+fw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:15:42 2026 by rpki-client