Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
File: tqSX68eR3kMxUAM94t2_pIYQw1c.mft (raw, json)
Hash identifier: 4sHgYCy3wlJJRENiEjBAezdvV0A/OyEHlj9kfhiR/wA=
Subject key identifier: EA:8F:A7:56:31:89:95:78:28:D2:09:F7:14:8F:E8:B1:72:18:56:16
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019F8FEBF5C68E75A7E771CA8CE16FA74A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
Manifest number: 018C
Signing time: Thu 23 Jul 2026 17:00:33 +0000
Manifest this update: Thu 23 Jul 2026 17:00:33 +0000
Manifest next update: Fri 24 Jul 2026 17:00:33 +0000
Files and hashes: 1: 94Ul-dlVcZRF2dJCBpIs9n3-IPM.roa (hash: sLcPFuMyvVZeg7LZhaj49iRvaozRs1nQsDsfofbM+sY=)
2: tqSX68eR3kMxUAM94t2_pIYQw1c.crl (hash: NVk2jNJGOQMhiX/G5lHq5uYkz4OoUqxkt+PzP+Ir/hk=)
3: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (hash: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f5:c6:8e:75:a7:e7:71:ca:8c:e1:6f:a7:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Jul 23 17:00:33 2026 GMT
Not After : Jul 24 17:00:33 2026 GMT
Subject: CN=ea8fa7563189957828d209f7148fe8b172185616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:50:ff:84:aa:5d:66:7e:d9:a8:34:de:85:
e9:ca:4a:9f:9b:ac:77:ad:5f:7c:8f:2a:a5:0e:73:
b7:8c:d1:1f:0a:b6:69:b9:ca:2a:03:6c:a0:14:ac:
9b:2d:8f:0e:04:5c:87:f4:d3:a9:34:8a:b5:db:d1:
bc:fb:f7:56:da:4b:02:31:e7:59:a9:e8:47:61:f5:
3b:1b:82:14:79:c0:06:3f:6c:87:69:36:bd:4c:6f:
7b:b7:da:ad:50:fa:53:b3:1b:f5:1d:bc:33:64:1c:
1d:51:46:6d:4e:fa:6b:f5:99:9b:06:3c:2f:f8:5b:
3b:7c:77:1b:78:9e:ba:02:89:02:f2:78:b7:03:1d:
53:12:d4:4a:48:a4:1f:8b:f1:1e:ef:d9:df:a1:7e:
f7:5d:8f:ae:c5:9b:d0:29:7f:69:67:66:77:d7:e0:
5f:42:d1:ba:cb:9e:f7:16:51:8a:ab:3b:20:09:fa:
2a:64:c7:c0:75:c0:96:38:7d:f6:26:b8:07:bd:5a:
0a:68:ec:9c:5f:65:e9:5f:ed:f5:23:a2:e6:2f:e6:
f2:97:18:c6:25:92:e0:f8:94:34:f1:00:48:bf:3d:
9a:9d:4f:77:da:ff:f2:cc:a5:68:0d:9f:2b:a8:62:
8a:a9:ea:92:13:e2:67:fd:26:19:69:f3:a9:0a:e6:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:A7:56:31:89:95:78:28:D2:09:F7:14:8F:E8:B1:72:18:56:16
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:c3:0f:1d:98:e4:32:d7:bf:d2:89:54:e7:67:0c:a1:33:
25:8c:77:39:fd:f7:db:d4:52:64:91:46:c8:e5:7a:08:4a:0d:
b8:2a:0b:c0:8c:84:3d:c7:86:85:a2:e9:3c:8b:99:48:5b:23:
07:79:fd:b7:24:35:92:bd:46:6e:84:52:65:20:5d:0b:c2:14:
3f:37:53:c6:73:7c:ec:b2:db:1c:63:63:2b:ce:66:b1:a8:67:
e2:e2:6f:77:55:5e:8f:33:9d:8d:18:03:d9:97:8f:9e:1e:d9:
81:8a:10:38:49:52:e5:77:4b:5e:4d:6a:c0:0f:0e:9d:f3:1d:
44:b6:3e:ac:e7:5f:67:72:5f:f8:ee:18:39:5e:68:6a:14:c2:
75:40:f8:68:f0:6e:42:1a:af:af:8a:9e:c2:a9:e8:93:0a:8d:
9e:92:ff:12:84:3b:c5:7b:cd:00:4a:02:8e:f6:6b:d2:7f:87:
7a:56:bb:45:00:0e:54:8c:fe:17:40:2d:dc:f2:64:cf:c6:04:
9a:25:f6:04:a5:9f:ef:34:c9:23:48:42:c3:25:c9:ec:57:c4:
6d:be:3a:a1:5f:86:ca:fd:e0:a9:0f:ea:02:17:b7:ad:cf:48:
3e:3f:8c:bd:dd:d7:b8:a9:e6:57:7d:d0:29:88:ce:00:eb:03:
38:a7:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:10 2026 by rpki-client