Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: LV12BmcEI96kQdCXeS+okvhPK7uhMj0xiDZMqnfBClQ=
Subject key identifier: AB:82:EB:E5:42:AD:3A:11:2A:7E:E2:D2:4E:D3:A0:4A:E2:E0:FA:C9
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 019D27E08357EFB7B7910236293E692683C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 0475
Signing time: Thu 26 Mar 2026 02:01:58 +0000
Manifest this update: Thu 26 Mar 2026 02:01:58 +0000
Manifest next update: Fri 27 Mar 2026 02:01:58 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: +2Rm/BvxgM79IQCZklaKQUjVtyN+UfC9RSKNpjMvIPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:83:57:ef:b7:b7:91:02:36:29:3e:69:26:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Mar 26 02:01:58 2026 GMT
Not After : Mar 27 02:01:58 2026 GMT
Subject: CN=ab82ebe542ad3a112a7ee2d24ed3a04ae2e0fac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:a6:c6:b7:fe:b1:0b:d9:d3:47:8b:86:7b:
30:0a:1a:66:8b:bd:f2:b3:91:24:42:73:fd:18:08:
99:5f:d8:b0:97:91:98:0a:68:12:83:9b:d7:a2:20:
6a:9a:39:a5:ea:bd:c7:6d:7e:e2:82:14:bb:ae:65:
0a:31:e0:80:6b:f6:25:70:92:35:b2:9d:c6:47:fa:
f5:61:78:0a:4e:2f:01:b0:1e:5c:06:22:da:8b:57:
d6:62:22:a4:03:1b:af:5e:44:46:fd:be:43:5a:71:
c4:76:4c:ed:ae:ba:8c:c5:6e:88:3e:61:2a:85:4f:
7e:45:cc:75:21:82:40:0b:33:98:0a:a4:08:63:96:
f7:40:ba:02:67:45:d0:05:6d:dd:d7:5b:f5:34:10:
d5:68:d2:e5:e5:d8:35:05:1e:34:ac:44:ed:39:67:
42:d0:a1:6e:32:10:66:3e:97:3b:2c:86:48:ca:9b:
55:4d:24:2c:4a:e1:88:25:80:0c:0a:db:c9:d2:4e:
b4:1f:bf:35:a8:93:66:fe:83:ae:56:70:5c:04:01:
66:38:6d:e8:2e:06:88:2d:8b:37:d3:38:97:e7:68:
6e:da:75:ff:e0:9a:4c:fc:bf:ad:d6:f9:0e:16:59:
d8:c6:78:2a:c2:d9:cb:32:60:80:69:f0:5c:9d:80:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:EB:E5:42:AD:3A:11:2A:7E:E2:D2:4E:D3:A0:4A:E2:E0:FA:C9
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e4:89:6a:c9:1b:dc:9f:88:a9:a1:22:24:60:88:e2:62:a3:
ff:51:07:bf:1a:25:89:d8:32:5e:bd:7b:9f:aa:fb:41:18:e1:
f4:49:c0:59:7d:9b:5d:9a:07:2f:25:e5:6f:22:23:3f:c0:0d:
82:10:f2:76:47:38:bd:af:34:8c:ce:76:50:77:38:ad:81:d8:
97:b5:c4:11:66:de:6d:fa:48:0b:2a:0e:8b:ab:bc:fc:26:7f:
63:b2:b3:b7:8d:58:ab:af:c7:f6:b0:ab:88:e1:20:92:39:f6:
1a:05:b2:77:bd:40:3b:7f:5e:27:44:53:c0:92:e6:27:8f:a4:
65:4f:ea:64:09:04:6a:40:de:1f:4b:af:29:cb:0c:c9:ed:c9:
8b:72:8a:e6:6e:1f:99:a4:84:d4:f4:47:d7:2b:91:67:52:1a:
39:95:5c:f2:3b:20:9c:9a:d3:e6:8c:78:91:81:da:72:64:65:
28:c8:ff:11:13:69:de:09:b0:ca:72:e7:ef:f6:3f:75:c4:3f:
26:c3:89:80:a8:d5:e8:cb:9f:da:9f:f6:c7:81:14:53:11:47:
96:f8:14:00:b3:4a:af:a8:19:42:61:7d:18:4c:25:2b:68:36:
70:f6:4f:1e:a2:1f:85:14:62:a2:27:29:31:15:78:37:f5:d2:
ed:04:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:33 2026 by rpki-client