Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: jctki5UrNq/diLdJCiQP8Va2ffYMcebEMkoT1MnlqMQ=
Subject key identifier: 27:C6:B2:EF:E5:B6:0C:0A:35:B6:C8:0D:F9:C1:03:78:AB:85:29:A7
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 01A0E92E24C662F755BE277F37431CAD694F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 168A
Signing time: Mon 28 Sep 2026 18:01:50 +0000
Manifest this update: Mon 28 Sep 2026 18:01:50 +0000
Manifest next update: Tue 29 Sep 2026 18:01:50 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: Crxd0ymrJek/SdsxQaIDHzlaVsDTT9onswB+ZeBdox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:24:c6:62:f7:55:be:27:7f:37:43:1c:ad:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Sep 28 18:01:50 2026 GMT
Not After : Sep 29 18:01:50 2026 GMT
Subject: CN=27c6b2efe5b60c0a35b6c80df9c10378ab8529a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:18:89:d7:11:e9:8f:a5:b9:25:ca:d9:3e:
2d:34:35:60:4b:63:71:4d:c5:e8:a4:56:bc:ea:da:
ae:b9:b6:64:a7:b3:e1:88:bf:fa:61:e6:ec:dd:75:
4f:58:82:c1:2b:d4:7b:b1:be:1b:81:f6:e1:b8:25:
e3:0e:6c:bd:af:f9:ef:9e:74:92:4c:7d:aa:c2:a9:
1c:0a:c5:1a:75:56:48:b4:78:6e:ae:d7:f5:36:37:
1d:d2:f8:93:9b:ab:4f:c1:0c:dd:36:33:25:ca:07:
d2:b5:75:90:34:8e:6f:d5:cb:d1:bb:38:f8:64:e4:
a0:e4:74:46:ed:ca:33:78:a4:df:5c:80:42:81:b4:
a4:19:d6:68:fb:f7:e8:3a:0e:82:50:24:bb:b2:a3:
58:74:45:11:e4:fd:a5:ea:12:d6:00:c2:34:79:e4:
de:43:46:99:77:35:3a:bb:21:2f:80:a6:be:3c:bd:
b0:d6:0c:95:1b:85:96:35:e8:9d:1d:45:e2:2c:1c:
87:ea:a5:63:a9:78:e1:90:6d:d5:a1:5e:24:32:dc:
01:8e:52:eb:a5:82:ee:eb:b8:75:d0:d8:3b:b4:39:
18:ae:6f:66:4b:4f:d0:11:46:0c:13:64:44:8c:36:
66:c3:19:48:c2:a3:9d:db:90:ca:8b:df:d1:73:ba:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:B2:EF:E5:B6:0C:0A:35:B6:C8:0D:F9:C1:03:78:AB:85:29:A7
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cf:fa:cd:32:5c:dc:92:eb:3a:96:84:26:fc:0e:aa:5e:92:
c6:86:46:cc:19:06:b9:d0:54:d6:17:3e:b7:87:12:45:4d:1d:
55:0c:f8:eb:f8:5c:75:5e:c5:ea:03:e1:10:c9:c9:cc:0d:30:
c0:33:52:c6:06:59:dd:29:bd:0d:3c:00:11:c0:1b:b6:58:3f:
c1:5a:4e:54:8f:b8:8d:c2:c5:ea:41:02:41:a8:a3:ce:73:8a:
05:ea:98:10:89:53:fd:21:57:f8:ca:0d:b6:96:20:18:54:7f:
c7:35:80:68:2b:23:e8:b0:2e:84:24:ea:f4:43:f9:1a:89:63:
71:ee:67:c6:3a:27:d3:e6:0e:70:83:05:cc:39:7e:60:67:de:
07:77:60:a1:5f:2b:6f:ba:d7:96:87:c2:a0:a9:b6:77:94:63:
17:fb:48:a3:13:60:7e:75:a2:c7:e4:45:09:41:8f:35:98:fa:
e3:fe:fd:7f:e1:2f:f6:6e:26:9e:ba:2a:04:52:57:3e:3d:3d:
b9:33:e6:e6:fa:0d:6a:dc:de:83:3d:e3:92:cd:cc:75:ab:1b:
e5:37:e0:d5:b9:39:6a:54:cf:3a:1e:dc:ae:d2:c9:cc:1c:d2:
a6:58:64:93:7f:61:95:80:fc:26:3d:cb:e3:11:2e:c0:3f:ff:
27:25:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:42:38 2026 by rpki-client