Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: EeojtZK30ZG1WczpWJZUy+CqLmwxdU4flOtDbgNNrzU=
Subject key identifier: C2:BC:78:4E:26:C8:99:D3:BF:D0:3A:1C:BE:60:50:59:62:14:46:09
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019D27A91874A0FF998465EDBC521835B662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: 8oDnGBz/zQsGyOVrnthlPRJb9VsgJ5tP0DgGKcmkjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:18:74:a0:ff:99:84:65:ed:bc:52:18:35:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=c2bc784e26c899d3bfd03a1cbe60505962144609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:85:48:d7:c8:f0:76:76:e3:12:de:e4:98:
5b:f3:43:55:0f:ad:e3:85:d3:81:b8:eb:fc:fc:86:
ef:4b:60:ba:2b:1c:2a:08:bf:40:c5:da:95:0b:c7:
d2:a1:25:53:49:b0:c3:3f:5a:97:dc:5d:70:6a:90:
67:be:3f:0d:2c:b7:6f:f9:c4:ea:55:d6:77:8d:9d:
9e:7c:4a:42:c8:76:67:ea:8c:6f:f1:e0:91:bf:84:
85:12:27:b6:65:d3:70:6b:c3:4c:b0:c8:d2:87:38:
12:6e:3d:ef:3b:c8:24:ea:87:0d:4b:7e:75:da:bd:
7c:fd:a1:cb:9c:a8:08:25:be:87:f5:99:55:0b:fc:
f9:a1:5c:fe:a2:43:60:ca:07:e3:e8:60:da:27:65:
03:96:c6:ed:55:82:6f:b3:b1:88:22:6d:5e:49:83:
6d:d1:dc:b4:a1:b2:96:56:4d:28:ab:a8:7a:b1:6d:
84:84:be:2c:f8:a1:41:ca:bc:c0:cc:30:ef:e1:f7:
34:52:54:6e:54:b2:d9:06:b2:95:36:2d:d1:5b:8e:
02:ab:bd:86:fd:d8:73:a5:26:15:48:86:3f:46:80:
20:dc:c6:78:00:98:28:a5:be:e9:67:a6:98:02:6f:
25:0f:2f:7f:ae:79:c5:21:dd:f4:49:ea:49:af:73:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:78:4E:26:C8:99:D3:BF:D0:3A:1C:BE:60:50:59:62:14:46:09
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:41:5b:c5:83:f9:9a:2f:9c:c3:a8:82:5c:ff:a6:32:cc:4e:
3a:c3:d9:7a:a3:84:ea:51:50:b1:51:dd:cb:e0:8d:3a:8d:14:
59:72:46:0f:40:4d:89:00:2f:e1:2f:84:9f:d7:72:9e:4e:5b:
2c:53:9e:cd:5f:2c:09:f0:7e:07:f9:8f:bb:f0:fa:2b:91:68:
34:99:36:2f:0f:0d:93:51:b4:d7:06:55:85:1d:ea:06:9f:69:
a4:8c:ce:95:1a:5c:5b:79:03:82:96:4e:1c:be:02:8b:7f:83:
ad:4c:bc:6a:01:47:28:ce:d1:89:20:32:45:50:34:d5:14:4d:
53:25:96:a4:08:ce:56:d7:25:a3:59:be:53:3d:53:3c:f0:64:
25:71:77:4f:d8:47:9b:75:42:42:19:1d:c4:46:6b:70:12:de:
c9:f2:f7:c7:67:d3:2a:b4:7a:1c:01:59:fc:12:0a:5d:7d:c1:
65:e5:41:61:d8:7f:d7:02:63:a4:58:2e:a5:2e:20:05:af:9b:
1a:7f:95:90:60:f1:0c:2c:e7:e3:88:77:2e:d5:68:5f:cb:fa:
c7:81:4f:23:d9:59:5f:74:da:e3:18:ad:cd:00:8e:8c:2c:d5:
0f:b7:d8:f7:01:79:23:a2:47:61:4c:12:a1:0c:03:ed:c7:3c:
67:8e:70:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:53 2026 by rpki-client