
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: +z5YZ2f3wjmfxcAjaufdG5Z0Q07pMQ5h878zS9nQznU=
Subject key identifier: 6F:CB:D0:47:AD:BB:5E:68:C0:3E:B4:A4:84:FE:28:6E:15:08:16:D3
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 01A1DB38BDF48AFEC3B432C302689208ADF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 18:01:31 +0000
Manifest this update: Sat 14 Nov 2026 18:01:31 +0000
Manifest next update: Sun 15 Nov 2026 18:01:31 +0000
Files and hashes: 1: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (hash: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=)
2: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
3: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
4: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: kc2+K/QHeTNUCBlpQBFDHLTzwwLHRAC4VLJoQBwan2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:bd:f4:8a:fe:c3:b4:32:c3:02:68:92:08:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Nov 14 18:01:31 2026 GMT
Not After : Nov 15 18:01:31 2026 GMT
Subject: CN=6fcbd047adbb5e68c03eb4a484fe286e150816d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:72:be:8f:5b:23:83:5c:d2:af:19:79:48:
1e:a3:4f:0b:0e:a1:19:3a:b7:5c:20:be:d1:8d:bf:
c2:fa:79:b9:41:ef:15:33:a0:5b:f0:33:90:3e:c2:
ca:39:79:c9:78:8b:79:9c:6d:27:cd:23:c4:4b:2b:
fc:69:d0:24:8c:04:33:34:43:84:5d:b2:34:06:74:
b3:3d:20:09:c7:52:7f:7b:f7:2c:7b:ff:c1:a1:ed:
06:16:0e:08:ec:34:4e:9f:1c:b7:c8:f5:2a:d2:c8:
8f:18:7a:04:5c:69:25:25:df:e1:cd:5b:1f:73:d3:
d8:28:26:71:9a:c2:ec:0f:2e:6f:be:e5:0d:eb:8a:
63:2e:dd:f7:c9:a1:8e:78:54:47:80:3a:81:e7:ea:
f0:95:e4:90:ec:a1:7c:73:b5:75:25:ca:e1:e8:8d:
8f:cc:de:bc:f1:2f:13:0f:86:bc:f5:19:98:2e:7d:
a0:38:5e:75:2e:84:f0:7e:85:02:a3:5d:c4:da:dd:
9c:85:03:a1:34:28:22:a1:c8:bf:e8:ed:13:80:b5:
36:c9:ed:b1:73:97:71:84:84:72:e5:23:8a:dd:91:
67:7e:0c:51:d3:7d:cc:07:71:67:bf:bf:a5:4e:63:
d9:65:8a:e2:5b:fe:c8:0d:57:6e:0a:a5:fa:a5:d2:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:D0:47:AD:BB:5E:68:C0:3E:B4:A4:84:FE:28:6E:15:08:16:D3
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:a9:a5:ce:c7:3c:06:55:75:45:b4:b5:dc:50:3e:c8:6f:
20:da:e5:66:8a:ed:3b:72:03:cb:be:bf:cf:37:ba:7b:75:f6:
76:23:79:d5:e0:e1:35:37:0b:45:92:4b:06:fe:35:c8:e1:88:
80:70:3a:c8:8c:23:26:61:84:6b:d9:9d:8e:66:49:95:b1:3d:
8d:c5:ea:e3:9f:78:c4:6a:dd:3a:07:6e:49:d3:76:1e:85:b3:
50:26:30:b3:84:41:64:0d:0d:4d:0f:0c:9a:bc:a1:a2:26:c6:
cf:8f:0d:82:e5:c5:83:f8:37:16:61:fa:18:87:9f:b6:de:65:
6f:6f:4b:2c:e3:5a:31:72:d2:4c:f2:b1:4a:1a:30:e6:33:94:
20:7b:9c:6d:ed:1c:42:8d:ee:cc:b2:a8:c8:17:95:2d:d7:2c:
7e:d5:ec:da:46:3c:f9:5b:f4:17:7e:c7:48:53:e1:0c:ca:1d:
dd:5f:f1:1a:65:2a:9a:8c:f1:cd:7b:1a:4f:f4:bd:b8:de:92:
2d:e9:30:e0:74:d2:48:ff:c3:2d:bd:d9:34:d8:1d:3c:31:b7:
7c:d4:13:87:b3:7f:24:b1:73:a0:da:64:2d:9e:56:9b:8f:f2:
78:6f:f6:8e:00:58:94:0f:d2:cb:87:ea:5c:6a:72:d3:23:73:
a0:37:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:58:20 2026 by rpki-client