Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
File: TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft (raw, json)
Hash identifier: f8v9X6YCvPDWdFMEzdj48LkJ2yW/aZZO652NBcsXO0U=
Subject key identifier: 4B:ED:EA:D0:64:E0:6F:01:1B:CA:80:5A:E5:38:53:E4:95:53:90:5A
Authority key identifier: 4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
Certificate issuer: /CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Certificate serial: 019D99D01397264A552AD22D8888A4466AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
Manifest number: 04B0
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl (hash: wFnvfJKSM0mpMxaOdDjv5Tnwk+cqBU0IWRPzlPehDPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:13:97:26:4a:55:2a:d2:2d:88:88:a4:46:6a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea805aea86030bacdd0ba3e4e424e1baef0824d
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=4bedead064e06f011bca805ae53853e49553905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:ae:d4:ca:88:85:2f:c4:32:86:6d:67:95:
28:3b:70:69:80:16:ec:e5:99:e4:85:1e:c1:00:2a:
0c:cd:eb:f8:c2:23:71:aa:29:5f:dd:06:05:7d:38:
2e:c8:37:e8:b6:46:d1:b0:8a:e5:17:95:d9:7b:97:
46:40:8c:f9:ea:ee:43:d8:fb:05:54:ee:03:0d:b1:
b6:dc:ad:47:7e:ee:18:ad:4f:ba:c8:fa:c8:c1:72:
da:f5:d2:e2:9e:bd:15:a9:6c:15:11:d8:34:c8:64:
5e:87:83:96:56:cf:eb:c7:d9:83:5c:c9:52:0b:d6:
26:20:f9:73:50:e5:80:7b:3a:21:cb:7f:b6:2b:56:
67:be:c6:1d:f8:88:2b:b6:aa:82:92:c7:da:4e:e8:
df:5d:b3:d3:5f:f7:38:b1:22:e2:c9:23:02:42:dc:
39:d9:11:06:5c:0b:ca:0b:0c:93:b6:a1:ff:a9:19:
bf:fe:2d:d0:7e:70:4d:21:c2:eb:a0:e3:b1:65:17:
52:b5:b5:02:fc:f5:62:be:24:f6:9f:d1:a3:d7:3d:
5c:60:02:d8:3e:70:d2:30:da:cd:de:09:21:17:47:
60:b5:dc:13:00:66:7f:67:e3:9f:ae:0b:48:89:e9:
3e:d3:c1:c9:87:0d:42:ae:fa:c4:53:da:dc:72:9b:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:EA:D0:64:E0:6F:01:1B:CA:80:5A:E5:38:53:E4:95:53:90:5A
X509v3 Authority Key Identifier:
keyid:4E:A8:05:AE:A8:60:30:BA:CD:D0:BA:3E:4E:42:4E:1B:AE:F0:82:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqgFrqhgMLrN0Lo-TkJOG67wgk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f90ac9-5367-4232-b137-778873a2726c/1/TqgFrqhgMLrN0Lo-TkJOG67wgk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cb:aa:2d:5d:0f:e3:40:29:3d:28:3f:75:f5:78:ab:5a:20:
d8:47:0b:48:82:7c:e6:55:17:ea:70:57:f3:f3:0f:b7:2f:af:
77:54:2e:f1:8c:4a:b5:2e:0f:07:2e:9b:35:4d:5e:87:ac:3c:
39:0d:1c:eb:83:a5:f2:46:05:c0:7a:4b:8c:58:87:1b:1d:d9:
26:20:f4:ef:72:57:84:60:ea:82:be:1a:1b:4c:a8:7e:36:1f:
5d:4f:ef:72:aa:56:93:4b:13:b1:ba:75:5f:aa:3a:50:f3:36:
42:f2:7a:d6:30:f9:17:09:e3:51:2f:aa:74:9c:b1:1d:82:bf:
94:2f:96:6f:b4:0a:02:07:69:a5:da:c0:0b:ea:b6:eb:5c:ad:
10:86:3e:00:3e:39:49:c4:08:27:cd:e2:ad:e7:24:81:21:70:
27:46:b9:32:08:e1:f8:89:6d:a2:60:49:65:09:61:74:6e:e2:
cc:f3:e2:c3:da:e1:69:1e:93:10:a8:4f:aa:71:6c:40:4d:7f:
8d:4e:3a:65:0b:f3:d5:cf:fc:74:ce:85:c9:22:97:d3:a0:72:
ea:98:cb:56:08:07:80:f2:9a:8c:1e:23:12:72:bf:15:32:4f:
17:e2:29:b8:09:2d:07:32:c4:c3:18:b1:02:40:a4:d3:1e:58:
ae:ef:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:15 2026 by rpki-client