Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: S0Ba0IfrtTDUQFkapEZ7CpGoqQMGXP2nxeLjC+lKzaU=
Subject key identifier: 1F:D1:64:95:3D:03:CB:0B:60:AF:58:91:68:B5:4E:B9:7F:C8:F9:D3
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019D29291ADDCB37ADDA3AD8ACEA040D0597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 1628
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: FKc0IsWmdSV/eXHj0UVJSUTB2A2mfc1Kl+nps/9BYEY=)
2: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (hash: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1a:dd:cb:37:ad:da:3a:d8:ac:ea:04:0d:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=1fd164953d03cb0b60af589168b54eb97fc8f9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:0f:28:f4:4d:93:e7:e9:a5:a3:1c:60:1d:
29:78:ed:6b:08:70:f7:cf:bf:8a:c1:83:b8:57:42:
10:3c:18:4c:c2:42:6e:19:22:fd:5e:47:5f:ff:db:
a9:f1:39:64:06:d0:81:c7:b4:9a:23:cc:aa:98:3f:
09:38:5c:b7:f4:6f:17:28:dc:3e:33:4e:0f:05:ab:
1f:3b:c5:65:f2:e1:b8:95:32:4c:ec:81:5c:cd:d5:
4c:b2:67:85:8c:5a:88:a3:22:1f:b7:2f:4a:41:0d:
fa:d5:e3:ab:62:75:46:e2:f1:7c:c7:56:c7:25:a1:
ef:87:79:85:91:69:15:24:e5:8c:7d:16:c6:64:40:
8f:37:a1:c6:01:b9:98:bf:19:dd:01:8c:13:1a:10:
62:d2:95:18:bb:c1:e8:37:ad:32:aa:40:ad:77:83:
58:e1:60:5c:4f:16:52:1f:26:45:3d:65:21:8e:02:
08:ef:75:b0:b2:83:cd:a2:e0:ae:2f:d9:b3:46:9c:
5e:f2:31:c5:6f:2f:a6:c8:f0:26:16:d3:ec:71:1b:
cd:71:26:90:b5:98:ce:da:2b:9a:c6:75:cb:ac:97:
ad:b1:ef:db:41:0b:9b:53:08:d5:78:fe:2b:3e:4b:
1b:1f:92:8c:be:fc:72:b9:de:4b:04:9a:17:ca:82:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:64:95:3D:03:CB:0B:60:AF:58:91:68:B5:4E:B9:7F:C8:F9:D3
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:b1:23:46:fd:e4:76:43:2d:40:71:f1:f7:e4:0e:0e:a7:
24:32:0a:20:74:58:11:24:5d:99:bf:39:38:8d:86:65:75:4c:
7b:0c:5b:96:28:cc:d3:07:12:33:39:3f:d8:59:dc:71:91:ae:
d1:b8:ea:19:0c:68:32:51:71:b4:c4:2a:62:5e:7b:0d:b5:be:
92:0e:2f:ec:a5:78:70:be:c0:4d:05:50:a5:93:a7:23:85:49:
e8:6a:61:86:85:d0:15:0e:ac:90:0d:37:58:b3:2b:2e:a6:a3:
d7:e5:12:55:46:24:2d:f1:f2:87:0b:34:30:67:ec:43:ab:57:
9e:5d:2f:6f:0f:91:c0:80:bd:29:a6:dc:f7:52:e5:3a:0c:8d:
07:da:1e:ca:09:aa:25:77:f9:e2:cc:df:a8:ca:af:11:b4:2a:
36:95:d4:9c:8e:59:29:35:68:71:af:0d:58:f5:85:01:93:14:
e1:12:9a:52:0b:1b:76:92:65:88:28:11:55:e5:41:a7:f3:c0:
70:06:92:4f:a6:03:0f:77:b2:a8:dd:78:09:35:22:1d:f2:e6:
27:6c:22:8d:6a:f5:4a:46:95:a0:42:98:9a:80:43:9d:f9:89:
62:20:33:be:4b:6a:50:22:5f:f4:dc:11:46:01:d8:6d:ae:b3:
a4:f5:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:28 2026 by rpki-client