Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: vDcevad/HbT2jTZtdJvAfmI+ZLTM8FoYt2sD4XB/0MQ=
Subject key identifier: 48:18:AD:01:E6:C1:06:0D:54:AA:0C:AC:80:36:48:1B:3F:22:A7:83
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019D9B50644B897C0706269EA091C1C83AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 14D4
Signing time: Fri 17 Apr 2026 12:00:30 +0000
Manifest this update: Fri 17 Apr 2026 12:00:30 +0000
Manifest next update: Sat 18 Apr 2026 12:00:30 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: wfTGckufRLFAwkIrgiJeGD6o/YXVWPBK3U923NIt5HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:64:4b:89:7c:07:06:26:9e:a0:91:c1:c8:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Apr 17 12:00:30 2026 GMT
Not After : Apr 18 12:00:30 2026 GMT
Subject: CN=4818ad01e6c1060d54aa0cac8036481b3f22a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:0b:1e:dd:80:0a:d1:2b:92:01:bf:29:a9:
33:46:10:a4:f8:3a:61:c3:78:4f:f8:d3:55:59:36:
09:ff:a0:eb:f7:cd:e8:56:b3:18:37:34:cc:66:92:
7f:2e:19:0d:d4:3d:84:e4:89:66:20:d3:27:14:33:
a0:20:d6:2c:a4:d9:ef:cd:a5:a5:05:14:f0:fb:e6:
e5:9e:7a:95:4d:03:cf:ae:f4:5a:da:3b:34:04:21:
c1:6a:21:ea:2c:4f:35:07:ed:a9:0b:d2:36:75:4c:
59:ad:d7:f7:d3:e2:63:9c:25:b4:d5:1e:19:95:75:
27:7a:e5:7f:5b:cb:cc:4a:9f:9a:3f:48:58:0d:d6:
0d:09:1b:eb:16:5f:93:1f:0c:ca:9f:5d:db:6b:3a:
1d:dd:4f:e4:ae:6e:0b:5a:74:60:73:33:6a:23:60:
2c:00:30:77:9c:b2:03:39:66:8e:b4:7a:32:63:93:
6e:cf:b9:99:66:3f:2f:6d:ec:fc:5a:3e:fe:18:ef:
56:bc:89:bd:7a:5c:c0:79:ab:d5:08:72:04:13:19:
29:20:a8:df:b8:c0:9c:d7:03:b3:2f:c5:57:1f:21:
29:93:29:77:92:17:45:2f:89:08:ba:fb:91:7a:8c:
1b:94:1b:71:bd:46:e0:6a:87:60:b0:8e:8e:e0:b6:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:AD:01:E6:C1:06:0D:54:AA:0C:AC:80:36:48:1B:3F:22:A7:83
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:c3:80:6d:d4:28:4f:17:6d:56:3e:ae:55:ab:74:a2:bb:
bd:97:15:40:1f:d5:5c:c1:42:e7:e5:3c:e9:06:07:fd:89:dc:
ac:4c:23:1e:da:ab:43:34:d1:c8:a0:df:fe:08:c8:f9:a8:1e:
2b:95:e8:df:0a:ec:ae:c5:3d:25:19:96:51:c0:9c:6a:94:4a:
46:d3:af:47:fb:85:1c:e4:b5:f1:49:3a:e4:c0:2d:f9:2e:ff:
ff:17:d8:f7:5a:28:d3:db:c2:3c:37:67:98:2d:03:65:c4:da:
d2:0d:50:35:23:32:a2:e1:3b:01:5d:f0:54:12:64:60:67:78:
9f:cd:cf:d3:14:b7:de:ca:cc:ba:d1:7c:43:a6:d4:e5:d7:70:
e0:6c:0a:63:6b:5f:fd:c8:63:d3:ba:f8:3d:14:7c:8a:b6:28:
0b:aa:f9:06:30:35:19:2f:d9:52:77:25:69:c2:3e:58:fc:35:
b7:f7:73:4f:5e:cd:ee:54:7d:0b:1e:9a:3c:59:18:bc:bd:71:
3d:e8:28:eb:3f:f6:80:aa:02:51:10:13:32:d8:43:61:5b:23:
16:02:40:ca:d5:7c:ba:47:fc:78:c8:02:c8:cc:2a:a0:1a:6f:
be:0d:2e:d3:56:71:9d:e0:97:1d:fa:b0:1f:f5:b8:e2:ff:00:
3c:3b:e1:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUGRLiXwHBiaeoJHByDqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjYwNDE3MTIwMDMwWhcNMjYwNDE4MTIwMDMwWjAzMTEwLwYDVQQD
Eyg0ODE4YWQwMWU2YzEwNjBkNTRhYTBjYWM4MDM2NDgxYjNmMjJhNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z0LHt2ACtErkgG/KakzRhCk+Dph
w3hP+NNVWTYJ/6Dr983oVrMYNzTMZpJ/LhkN1D2E5IlmINMnFDOgINYspNnvzaWl
BRTw++blnnqVTQPPrvRa2js0BCHBaiHqLE81B+2pC9I2dUxZrdf30+JjnCW01R4Z
lXUneuV/W8vMSp+aP0hYDdYNCRvrFl+THwzKn13bazod3U/krm4LWnRgczNqI2As
ADB3nLIDOWaOtHoyY5Nuz7mZZj8vbez8Wj7+GO9WvIm9elzAeavVCHIEExkpIKjf
uMCc1wOzL8VXHyEpkyl3khdFL4kIuvuReowblBtxvUbgaodgsI6O4LbvUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgYrQHmwQYNVKoMrIA2SBs/IqeDMB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVzDgG3U
KE8XbVY+rlWrdKK7vZcVQB/VXMFC5+U86QYH/YncrEwjHtqrQzTRyKDf/gjI+age
K5Xo3wrsrsU9JRmWUcCcapRKRtOvR/uFHOS18Uk65MAt+S7//xfY91oo09vCPDdn
mC0DZcTa0g1QNSMyouE7AV3wVBJkYGd4n83P0xS33srMutF8Q6bU5ddw4GwKY2tf
/chj07r4PRR8irYoC6r5BjA1GS/ZUnclacI+WPw1t/dzT17N7lR9Cx6aPFkYvL1x
Pego6z/2gKoCURATMthDYVsjFgJAytV8ukf8eMgCyMwqoBpvvg0u01ZxneCXHfqw
H/W44v8APDvhWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:27 2026 by rpki-client