Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
File: tqSX68eR3kMxUAM94t2_pIYQw1c.mft (raw, json)
Hash identifier: RBLvODQL+t3FaGDERWEXa/gbuBYJTHKjcxNds4rp4EE=
Subject key identifier: 4C:E4:A8:B5:19:32:00:24:F4:0D:ED:BD:2E:82:3F:E4:71:9A:CE:B3
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019D2BBBEA90FE2FBF8AF296A7F5210E7A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
Manifest number: 4F
Signing time: Thu 26 Mar 2026 20:00:28 +0000
Manifest this update: Thu 26 Mar 2026 20:00:28 +0000
Manifest next update: Fri 27 Mar 2026 20:00:28 +0000
Files and hashes: 1: 94Ul-dlVcZRF2dJCBpIs9n3-IPM.roa (hash: sLcPFuMyvVZeg7LZhaj49iRvaozRs1nQsDsfofbM+sY=)
2: tqSX68eR3kMxUAM94t2_pIYQw1c.crl (hash: 9OJPWO/Gq7+A4h4H2vFvozRXZI+PyQnCzkYprIOvqUI=)
3: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (hash: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:ea:90:fe:2f:bf:8a:f2:96:a7:f5:21:0e:7a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Mar 26 20:00:28 2026 GMT
Not After : Mar 27 20:00:28 2026 GMT
Subject: CN=4ce4a8b519320024f40dedbd2e823fe4719aceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:08:1e:42:bd:db:67:3c:06:79:66:a4:44:
01:77:a3:bb:f7:6c:53:b9:5e:88:dd:49:ea:72:5b:
1b:1e:b8:5c:ec:22:c7:b5:c9:67:3c:a4:ca:d9:83:
07:b0:15:8b:72:16:f1:90:2d:c3:3c:11:3a:0e:b0:
c0:17:65:84:91:b1:99:fa:85:62:94:97:2a:d0:c7:
18:36:bd:2b:00:75:82:ea:b6:0a:76:0d:31:eb:d5:
e1:97:e1:5a:ee:f9:85:e4:75:10:8c:ba:d7:a7:3b:
0c:60:53:34:5c:51:25:53:25:a8:bd:76:47:c4:35:
9b:de:97:6e:c8:b7:91:4e:73:c0:ee:d4:68:22:96:
7b:9e:98:00:e4:d6:28:0c:89:68:44:0f:bb:69:40:
a3:1d:31:03:b7:15:24:ce:47:8a:cf:c9:6f:c8:ba:
fe:8c:9f:a0:4d:65:ed:79:7d:00:f4:b2:25:73:46:
d1:4a:20:3a:27:8a:cd:71:73:87:2e:59:b7:c6:90:
1e:7b:66:c8:c4:af:ab:7e:ac:18:a5:e4:1f:0b:a0:
b0:4f:c1:c4:a3:7e:6b:2c:cb:be:8f:18:15:26:2d:
e7:62:95:9d:0f:2d:0c:8f:b2:35:b3:0c:6e:2c:be:
ce:0f:7c:cd:bb:73:96:77:99:33:1a:f2:6f:79:0f:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:A8:B5:19:32:00:24:F4:0D:ED:BD:2E:82:3F:E4:71:9A:CE:B3
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:d6:71:22:c3:1e:e7:09:e4:e8:01:80:b7:69:02:75:42:
a3:04:c7:c8:c2:2d:3c:4b:4c:d3:c5:a5:60:24:08:f3:ca:91:
8f:07:e0:e7:e1:e9:35:c2:02:9d:b5:0d:67:ed:e4:a3:a7:78:
62:cb:1a:a0:7f:87:66:14:83:4c:0f:3c:48:72:29:25:36:8b:
89:18:af:4d:60:36:50:46:e3:75:56:ad:f8:15:39:13:de:e5:
77:d6:f1:45:db:44:3b:11:7b:ce:6c:2c:c2:2d:fb:69:69:77:
69:22:a1:71:cd:6e:bb:16:ca:43:61:39:a7:96:6e:ae:29:4c:
87:93:32:91:cd:cf:8f:68:9d:c4:14:c1:95:26:a4:39:c4:3e:
e9:1d:6b:ee:22:de:c2:f5:ea:f4:bf:f0:a8:1b:7e:5c:02:c3:
e4:04:12:8b:ea:66:55:bd:07:5f:01:dc:29:58:1c:f0:e1:94:
2e:e8:d5:08:24:c6:32:28:fa:fa:b7:3f:3e:f4:68:3d:4d:2b:
1a:ae:9e:57:0b:3d:e3:51:15:8c:2c:4a:39:d4:a1:78:8b:84:
0f:34:a6:84:0b:95:6e:6b:a3:99:23:c1:4c:c5:ab:d7:ee:4a:
07:e9:65:22:37:94:58:b1:b5:39:2f:fb:67:81:3a:c2:46:51:
48:ce:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:33:44 2026 by rpki-client