Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: V59zt9Y+LWoWmAYC1lG2c5PNp5eiLdsmLcWwv5NCjMA=
Subject key identifier: 90:78:0D:00:DB:EA:31:D8:4A:2B:5D:0C:61:11:26:6A:BB:D7:11:54
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019CABD92606B730D2EAE4625E5B9E553FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1458
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: 2cJIkx/wBKhfYitth45RHRdqZvAb6tWeDadDF6UNvDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:26:06:b7:30:d2:ea:e4:62:5e:5b:9e:55:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=90780d00dbea31d84a2b5d0c6111266abbd71154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:b2:83:88:83:90:52:10:2f:31:27:82:54:
2d:66:b3:c9:d9:18:97:27:42:3c:0a:93:d1:04:3c:
51:96:52:36:49:dd:17:cb:5a:95:1e:5c:3e:b7:a5:
30:93:19:ce:5b:05:a3:39:5f:49:ac:dc:a0:fb:50:
d8:54:66:e3:c7:ec:e9:fd:a3:e2:d4:4d:f4:2a:53:
ec:c9:40:cc:4a:aa:0d:85:5a:d3:35:9b:e6:99:2b:
f4:96:f2:28:08:37:11:96:68:97:b9:d4:04:c3:91:
53:64:4b:92:b3:8a:f6:0f:fa:75:99:8f:e4:33:e7:
83:ab:d5:e9:2f:42:ed:9b:ad:ad:d2:71:de:86:88:
ce:06:34:9e:5d:67:26:e6:06:22:2d:6d:5e:7b:38:
13:b5:a8:c0:c1:dc:49:6c:7a:f5:0e:79:2a:50:b4:
ef:cc:00:56:11:13:4b:c9:fe:cb:96:9c:be:43:20:
ab:c4:d6:96:e9:bb:aa:53:10:48:79:9b:99:32:74:
f2:52:95:af:5b:d0:b7:e3:1a:e4:27:1a:1e:20:6b:
d9:82:5f:80:7d:69:dd:ea:2d:72:4c:05:c8:22:88:
b4:77:cb:ed:ed:5a:d7:bc:bf:96:22:f3:46:60:84:
70:4a:c4:f8:42:35:f1:09:23:1f:a4:80:e7:37:fb:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:0D:00:DB:EA:31:D8:4A:2B:5D:0C:61:11:26:6A:BB:D7:11:54
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:37:33:00:51:51:9b:13:82:d5:5a:0b:30:be:e2:9c:88:81:
be:9f:3e:02:ae:95:d2:2a:96:a4:9c:9d:d5:72:08:a6:eb:2b:
ce:1d:32:cc:6b:ec:55:d5:23:df:81:78:f6:2f:40:1a:d9:15:
a5:3d:9d:e3:a6:ff:e4:22:94:58:bc:d9:e0:c2:1b:97:1d:c6:
04:76:3a:80:2b:a3:80:4e:1b:32:2a:ea:e9:0a:a3:c0:09:1f:
3a:41:b7:84:a6:27:f7:73:55:7f:0e:f9:1c:8d:60:ea:d2:61:
3f:2b:d7:95:fc:08:a0:eb:5f:b4:54:b0:fa:79:af:d7:92:69:
d6:62:9a:ad:d8:8a:53:30:94:bd:fa:9f:6d:5b:0f:c0:96:96:
3d:11:0f:fc:df:d7:b8:8a:4c:ea:37:ef:d6:e6:93:85:fa:4e:
49:51:ff:f0:91:11:f8:b7:ec:e6:01:85:83:89:3f:22:e0:2f:
34:b4:d1:bd:83:7f:80:a7:d4:f5:92:db:e7:25:cc:91:f1:7e:
64:82:42:9b:b3:1f:86:c7:49:ef:47:f4:03:b4:de:43:ed:b7:
53:6c:ae:12:10:e4:f3:29:34:4a:9f:14:3c:5a:b4:ec:62:97:
f3:7b:ee:41:c6:62:c2:c8:8d:34:ad:0a:9f:f9:d1:ff:24:43:
61:6d:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:46 2026 by rpki-client