Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: Pp1LmhBYKpLyaU6TbVTxjBtjB7eBjkNl5841TyA2Sxg=
Subject key identifier: B8:4B:79:C7:8E:29:B5:86:99:53:86:0B:69:9B:CC:8A:B6:91:A0:D9
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019D28BB0FC95D4120ECA869CF13478A8266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 0AB7
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: 0UGDI8RA4ikQpQTFcofCBOI7pok.roa (hash: 0Yi/SCqGm10A/qaehmQPolk2SyxaZrDlQqK63HLj7qA=)
2: lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa (hash: r9UOMYxpKdYi63IObP/C5aZuW6pYv6q+dCCfoqFrtSU=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: 9uRCwmsNnqcC5S2PnEm0V9uHtNl4PYwmP/mRvZ0857U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0f:c9:5d:41:20:ec:a8:69:cf:13:47:8a:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=b84b79c78e29b5869953860b699bcc8ab691a0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:36:b4:86:47:6a:f9:6c:4e:51:5d:c1:39:
81:92:c0:9e:32:93:c2:4a:55:82:11:3a:e6:1c:7d:
f7:a2:f6:74:77:22:94:a9:0f:50:34:44:ee:d1:1f:
50:aa:85:ea:e6:0f:f1:b8:00:d4:e9:07:dc:d4:e5:
5c:7c:a4:ba:7c:56:20:6a:94:f4:27:cb:6a:7c:3d:
54:c6:68:dc:54:1b:6a:35:d2:e9:ff:02:11:ed:fa:
1f:d9:9d:7a:2d:af:75:c6:2e:92:55:38:1f:6d:7f:
4d:12:ae:b7:59:e4:79:6b:48:53:5a:97:ca:3a:e5:
0f:20:e3:34:3f:3d:50:30:f4:54:7b:81:21:f1:f3:
fc:2c:f4:df:34:44:21:96:80:88:cd:ca:92:84:e5:
2f:bf:f4:d9:2a:f1:b4:84:0a:65:d7:59:2f:3b:cb:
94:94:a8:07:b8:d4:5b:54:51:2f:5d:09:9b:dd:61:
aa:b6:01:ad:5f:e8:d5:02:68:51:2b:9b:c0:c7:d2:
13:b8:77:6d:60:df:65:ca:2b:13:04:12:79:c7:05:
68:d9:ba:93:f7:b5:4f:70:af:ff:4f:43:21:21:98:
9f:c6:26:8e:39:b1:10:43:0c:a1:d4:81:56:e4:4c:
e0:8e:45:d1:d0:6e:f3:3a:3e:fb:53:b3:48:56:78:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:79:C7:8E:29:B5:86:99:53:86:0B:69:9B:CC:8A:B6:91:A0:D9
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:9e:58:c4:84:1d:52:8c:fb:f8:0f:91:26:5f:2c:f2:86:
a5:07:fb:ee:0c:8c:f3:b5:f4:85:b9:af:c1:20:cd:3e:d3:1f:
0b:ca:91:93:74:6c:20:f4:66:35:67:64:60:28:eb:d8:9b:b2:
56:85:d1:29:b7:e7:24:38:72:06:b2:f7:69:f7:70:52:46:d5:
77:ac:16:2a:8b:d5:1a:dc:b2:72:0b:2d:95:3a:cf:da:0b:48:
0e:a3:0c:dd:1e:5c:46:7d:f0:8f:ed:6e:eb:92:75:88:42:94:
92:b5:f3:76:9f:d2:68:93:ea:b2:fd:4c:f1:8d:2e:25:e7:fe:
fb:66:10:42:d5:ae:e3:d4:78:6a:7b:bd:b0:aa:67:39:c5:c5:
8c:45:21:c6:db:0f:89:be:ca:71:31:6e:cf:5b:8a:93:1f:fa:
47:61:70:03:04:93:f8:b0:ae:35:46:2c:76:e6:f2:b7:ea:b6:
11:eb:d8:f4:e7:e5:45:dd:3e:e7:ef:35:64:b0:32:c0:ed:ca:
44:a5:23:eb:aa:66:9c:25:4a:79:cb:a7:3e:15:17:91:12:85:
9b:f7:51:03:19:b1:2e:9f:de:30:56:3b:80:de:64:c3:4c:4a:
7e:6f:3c:af:ee:d8:cc:f9:2b:56:f7:30:03:88:71:59:30:f1:
6d:e6:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:00 2026 by rpki-client