Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: l72qDYr7M0LLMd3sCESUxb7Zw0WYxWUM0MlPeKJZB3w=
Subject key identifier: 37:D4:67:CE:A2:E2:DC:CD:EE:50:3E:BA:F6:84:9A:57:CA:F8:02:DA
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 019D26965731626958E299D3D57740A9FECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 0FE2
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: 5shtjSwYY1wV6rWlUfcIKGn6yqo.roa (hash: VOmUNnvEDlqDrfQ2raf9GqtN9WB6Ae56gIOAstRWDXQ=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: dHMJHE0O5ovy/59kDWMtXCOvIKkjdC7J991FUp/eGf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:57:31:62:69:58:e2:99:d3:d5:77:40:a9:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=37d467cea2e2dccdee503ebaf6849a57caf802da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:08:2d:0e:59:ca:37:1f:10:42:c5:32:c2:f0:
50:a6:cf:63:bd:1b:36:de:8b:f2:98:73:45:f7:2d:
5b:a4:80:ec:d9:6a:8d:45:56:e6:b0:d4:34:66:5f:
62:a4:57:f2:be:83:ef:7b:05:d0:45:54:2a:34:f3:
b7:d3:00:29:56:3b:ee:72:05:1d:e7:4e:e0:59:17:
5d:df:ff:5d:76:26:47:07:4d:12:9b:fe:5f:35:45:
78:50:b5:ec:0f:d2:2e:a5:a3:ac:a4:15:fb:df:de:
96:39:1a:5e:fd:52:41:61:bd:2e:71:04:1c:9e:6c:
1d:7e:18:0b:5f:cc:34:53:e2:4d:dd:3a:a3:d1:3e:
9f:65:37:f2:73:07:f5:dd:f8:e2:99:3d:ab:4c:d9:
7c:00:dd:18:cd:d1:62:2e:78:7b:ff:4a:47:44:5b:
74:dc:b7:52:5a:20:ee:dd:db:b9:55:58:09:9c:1b:
e9:8f:2a:1a:9f:76:b2:85:17:7c:ce:ee:7e:52:35:
0f:ac:85:d5:25:b7:e4:62:48:b0:10:ec:bc:10:14:
4e:a3:ef:b7:ab:fd:5e:00:22:54:09:fc:1f:7b:6f:
7f:d8:ba:b5:26:db:55:33:18:15:33:4b:bb:68:05:
8a:50:9e:7b:8e:98:eb:bc:bd:84:97:32:69:43:06:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:67:CE:A2:E2:DC:CD:EE:50:3E:BA:F6:84:9A:57:CA:F8:02:DA
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:29:f2:bb:55:84:43:39:fe:dc:ae:e1:07:19:6e:0b:de:
be:6f:a3:e7:de:de:29:d4:3a:3e:13:50:8a:b8:c8:51:c3:a5:
bc:a4:6a:8b:96:49:1a:7a:52:81:35:b0:5d:7e:67:db:e5:ed:
57:c1:1c:34:5b:f2:56:82:f9:2d:2e:64:be:e4:fc:13:5b:8e:
e0:b3:ab:cf:43:d8:a5:22:53:7b:7e:5e:c1:84:1b:ca:0e:9f:
0d:ad:55:c2:1a:10:7a:56:09:96:fc:62:17:47:6b:ce:b8:55:
da:6c:e5:ca:ee:4d:9c:da:b9:7c:ee:3a:f1:f5:9a:4a:d8:4f:
39:9a:56:4e:91:39:ee:6e:a3:cb:ad:18:a1:78:3a:97:73:14:
5c:be:7c:b0:34:89:02:c6:89:d6:d7:87:1b:ad:c8:66:88:2f:
d6:bb:c0:01:42:17:23:25:aa:e4:07:86:87:f1:c0:b1:d1:1d:
8a:4b:2e:6c:3d:4b:0b:08:8f:ef:52:cf:27:1e:fa:ac:9e:36:
a7:2d:68:bc:cf:29:1b:94:2f:be:0a:ea:2c:a9:d0:10:be:86:
9b:25:aa:7f:4b:2e:42:72:1c:c0:78:57:50:b9:4b:f2:02:ba:
ed:9b:43:fe:7a:0c:d7:86:94:21:53:d9:77:40:70:68:29:48:
3f:21:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:07:12 2026 by rpki-client