Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: Qf0IJte1JK8jh2ENoI08SOJKlSI8WNlyVRGRWK5zCfg=
Subject key identifier: A4:CF:FD:31:A8:98:9F:48:E8:E1:19:67:29:0B:85:1C:85:98:69:26
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019D27DFB3DAFB7531281037EB24E572949F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:05 +0000
Manifest this update: Thu 26 Mar 2026 02:01:05 +0000
Manifest next update: Fri 27 Mar 2026 02:01:05 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: a7KWhmosV10s476raoQ3jjKAf40Cyh28pkL1zUkFjXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b3:da:fb:75:31:28:10:37:eb:24:e5:72:94:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Mar 26 02:01:05 2026 GMT
Not After : Mar 27 02:01:05 2026 GMT
Subject: CN=a4cffd31a8989f48e8e11967290b851c85986926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:1c:3e:18:ca:df:fd:b0:2b:87:a9:70:50:
29:88:5b:d9:1d:e6:c1:9e:9a:17:93:3b:a0:97:7b:
ee:e1:f5:35:6c:9a:15:4f:7a:2d:1b:e1:03:16:92:
ed:36:c0:36:b1:d3:d7:1e:35:2f:c1:d6:68:18:f8:
9e:15:0b:3e:49:3d:96:d1:2b:b0:1d:ac:ce:99:2e:
7f:33:ef:62:3b:9b:14:8a:ce:97:2b:ea:66:4b:79:
2f:51:2f:65:50:06:f9:b6:cd:d1:af:b8:ff:25:ed:
0c:cb:3a:30:db:98:97:48:d3:2d:fb:87:ad:d3:76:
3a:0d:8e:92:4c:5b:b8:a7:4a:e9:7d:ff:18:cd:48:
17:fc:6f:a8:4f:be:3e:9d:31:ad:cc:14:e4:14:e2:
82:6f:1c:ef:ac:2d:d5:41:06:45:84:d3:21:1a:0c:
60:fc:1a:3f:99:35:ed:20:85:58:83:2b:b4:d2:6c:
27:1a:0d:8c:43:58:78:c8:4c:62:ef:f9:ef:d9:8d:
02:22:91:16:6e:fa:02:a6:d6:15:b1:2b:78:5a:06:
ac:f4:d3:cc:c0:c9:cc:c9:8a:07:32:99:3e:18:d9:
78:33:8e:a1:46:4a:25:37:1c:70:0b:66:a2:87:9a:
b8:be:10:b2:6d:da:d1:49:01:e6:a9:6e:c0:0b:c4:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:FD:31:A8:98:9F:48:E8:E1:19:67:29:0B:85:1C:85:98:69:26
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:36:d3:03:d5:df:73:11:90:6f:93:68:50:94:7d:ce:b0:7b:
9d:65:8f:b0:e7:75:a8:e9:b0:57:8f:d5:b7:1e:8b:17:e1:ae:
81:0b:78:4c:f1:d8:e4:78:bf:6f:f8:68:db:6c:0e:e9:e4:29:
6f:df:34:ea:b9:60:bc:ce:0a:b8:4a:c7:19:95:0b:fa:60:e5:
d0:60:a8:2f:84:51:94:d1:fc:6a:25:fc:a5:b1:be:a4:aa:93:
ed:d1:62:5b:e5:bc:9d:77:f9:6c:74:be:a4:ea:c1:85:5f:fa:
e2:b2:c3:94:0b:cc:54:a9:0f:d6:ab:38:2a:da:bc:fb:c5:b0:
97:d4:12:ae:aa:88:1b:bf:d7:55:c8:9c:de:4d:8b:15:58:bd:
f0:97:4f:fd:25:a6:1d:b3:36:0d:12:47:49:23:53:c9:f1:bb:
24:3f:b2:fc:d2:5e:cb:6c:1c:b3:5a:e3:82:45:64:a1:84:24:
72:ff:dd:b2:6b:9f:45:56:f9:ba:3e:8a:d9:7a:bf:04:3b:ae:
51:01:df:ec:5f:59:e0:b5:4f:ea:ed:32:59:42:30:c0:1b:f9:
e6:9c:a0:c5:57:c9:7a:84:15:89:e2:41:e9:72:b2:52:07:6d:
75:d4:eb:5e:12:c4:62:c4:86:2d:36:e1:2f:45:85:13:27:01:
1c:2f:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:19 2026 by rpki-client