Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: Baw+ZKGQkt/G33VPQbYoRUbwJoESEFCymlfb0Flt46Q=
Subject key identifier: 59:67:46:74:45:3A:34:59:2F:97:6B:85:D5:53:3E:97:15:7C:3C:45
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019D28844FD7DB087B4EE82642713724BF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 05:00:52 +0000
Manifest this update: Thu 26 Mar 2026 05:00:52 +0000
Manifest next update: Fri 27 Mar 2026 05:00:52 +0000
Files and hashes: 1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: rToB2p2rcGUqQQ+uyKkE2yPcuGXEoEnQa8MMquIjmPg=)
7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4f:d7:db:08:7b:4e:e8:26:42:71:37:24:bf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Mar 26 05:00:52 2026 GMT
Not After : Mar 27 05:00:52 2026 GMT
Subject: CN=59674674453a34592f976b85d5533e97157c3c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:08:9a:49:dd:84:78:8a:cf:4d:de:ef:d3:
24:b9:47:f9:3b:a9:a8:0d:db:02:78:ad:1b:3b:ec:
94:d1:a5:ee:fe:ad:09:73:61:41:d9:b7:81:47:59:
f5:78:13:78:24:b3:63:3a:f2:4c:13:9c:fc:63:1c:
4e:3a:32:e1:73:c2:08:1f:7a:83:9b:3e:b9:aa:30:
02:b0:73:b2:5f:81:1a:ec:4d:7f:1c:8a:38:b8:66:
77:54:65:77:25:15:5a:e5:14:ed:61:db:48:e4:ba:
44:e4:97:83:5b:75:0c:ab:7b:4c:87:97:92:09:26:
4d:7a:7e:36:10:71:6c:b8:55:15:a8:4e:90:1e:23:
be:8f:a0:86:7a:7a:13:b8:5e:a9:a1:65:6f:4d:ea:
55:33:00:e0:07:b7:03:a5:3f:08:69:b7:cd:ca:6f:
cf:38:1b:d7:6a:bc:fe:38:ee:66:d0:e9:57:fc:c7:
ab:05:fc:17:c7:fb:08:d6:02:d9:35:ba:07:85:4e:
40:51:58:94:d6:6f:46:de:31:37:6b:84:fa:4b:fa:
5f:23:fd:a4:bb:68:01:be:61:93:c4:31:81:a8:9d:
f1:9c:8d:60:42:f7:d7:e9:a4:06:28:d7:73:2e:fa:
4c:a2:e3:78:8c:7d:0a:ed:0f:7b:8b:d8:96:2f:a7:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:67:46:74:45:3A:34:59:2F:97:6B:85:D5:53:3E:97:15:7C:3C:45
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0f:1f:07:f4:04:d4:11:d0:ae:52:af:a0:99:0a:3b:b4:5c:
2e:08:46:6f:78:4e:23:fb:34:4d:57:6c:db:e8:73:3b:81:50:
6a:78:33:47:37:59:69:a4:d9:d6:63:c9:9b:53:a5:fd:6f:24:
80:b8:73:5e:cb:f3:70:56:87:5d:99:e4:82:93:5d:11:fd:42:
4b:ed:f9:94:48:f4:58:1d:f4:6b:8d:c1:8d:c5:2a:31:cd:ae:
20:53:ed:60:fa:73:46:1d:e7:a7:1f:d9:75:90:20:92:43:fc:
42:fa:cf:13:39:0a:9b:3b:a4:e0:3c:c1:2c:09:11:4f:c6:63:
c9:df:22:bf:bd:d9:db:6d:66:65:ef:6d:99:05:b0:e9:1c:24:
37:91:1c:b6:36:d7:30:83:56:83:0b:a5:07:8b:9b:b1:74:45:
89:38:1f:62:5f:89:c1:1d:ab:58:57:ec:3b:ed:78:c2:04:e8:
f3:e5:70:02:6e:bf:5f:6c:13:ea:bc:63:a6:7a:d0:44:33:ae:
f3:3c:ba:9b:43:e7:3f:91:ab:99:de:b5:a2:93:6b:09:c6:03:
4c:27:ed:c9:0c:00:89:2f:d0:d0:b7:c2:ef:e1:af:86:c3:5a:
1f:b6:cb:9f:4b:0f:78:27:a8:1a:9c:2d:65:b6:88:7c:fe:2f:
46:36:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:38 2026 by rpki-client