Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: 61IkKWYAYKeYURE/0PuRuUxxPFlujHV9bAB/qWUHGeg=
Subject key identifier: 89:20:90:22:28:EF:32:3B:92:D8:29:F8:A6:7E:26:7C:22:A6:0A:22
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019CAD909C70F4C1E8A8CA2E6652F1F98F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 15E8
Signing time: Mon 02 Mar 2026 08:01:01 +0000
Manifest this update: Mon 02 Mar 2026 08:01:01 +0000
Manifest next update: Tue 03 Mar 2026 08:01:01 +0000
Files and hashes: 1: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: 4gRaR3jKQ+rOCEPoGUIezX/XE6epfCSR5htEgfbBoZg=)
2: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (hash: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:9c:70:f4:c1:e8:a8:ca:2e:66:52:f1:f9:8f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Mar 2 08:01:01 2026 GMT
Not After : Mar 3 08:01:01 2026 GMT
Subject: CN=8920902228ef323b92d829f8a67e267c22a60a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:d6:13:12:b9:d5:3d:6f:7f:ed:81:e0:02:
af:39:e7:67:02:30:43:a7:da:4c:d8:f5:e2:eb:ea:
93:f4:e0:66:e3:f6:3a:67:bb:9b:ed:2c:22:d9:98:
12:7b:f5:15:77:bb:9d:00:6a:d3:ca:f4:33:96:a4:
14:50:79:02:6f:ed:57:76:23:10:94:75:09:3e:01:
26:05:e9:fe:8c:6d:9e:ab:ee:ae:a6:9d:40:37:b4:
81:77:09:ff:41:4a:fe:f5:87:4b:25:27:62:21:f9:
d5:19:9b:94:79:c9:4a:1d:35:85:8a:13:6a:89:14:
0f:a7:56:80:e7:97:2d:3f:6a:c0:a2:47:f5:c0:e4:
83:f0:b7:9e:cf:63:46:57:45:08:2e:cc:bb:ab:be:
87:71:f6:c4:f7:bd:4b:d3:77:17:18:04:24:0d:cd:
90:81:33:26:1a:e5:d1:6d:cc:13:29:37:cb:6a:dd:
4b:05:ce:b1:3d:93:f6:f4:da:37:09:a7:59:5d:69:
26:02:bc:b5:4d:2e:4b:35:5b:37:8a:0b:8c:0e:83:
f3:1d:07:76:bd:24:d4:c2:ad:c1:a6:16:9a:81:13:
1a:83:78:e1:48:11:f6:d8:39:64:b1:bd:d2:4f:6d:
81:94:87:dd:3c:b6:72:a9:7a:e2:3c:b9:8f:f6:74:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:90:22:28:EF:32:3B:92:D8:29:F8:A6:7E:26:7C:22:A6:0A:22
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2d:d4:02:5f:75:2a:05:92:56:bb:07:58:4f:2b:b2:0f:d7:
32:40:35:4f:67:c2:42:62:eb:5d:2b:34:55:65:1e:7d:c4:a3:
34:db:bc:10:20:9e:0b:f3:2c:4b:67:b8:d9:15:0c:ac:e1:b7:
9f:6f:57:9a:7a:ec:4a:2f:b7:21:78:a4:2a:04:4f:56:ff:a5:
d7:3e:b0:a3:b9:b2:9a:31:9f:32:03:2a:99:ad:e3:29:5a:54:
61:7a:56:c6:ba:28:70:f4:c5:e9:dd:fc:26:84:6d:f0:06:5c:
8f:45:60:da:5f:a4:6b:7f:b8:ea:7a:09:61:9e:dd:c7:9a:08:
78:26:86:ba:5c:36:2e:3c:67:cc:6a:2e:e7:cb:70:4f:ed:25:
3c:b8:0b:8a:8b:3b:7a:9d:d3:82:c5:41:73:20:1d:43:cc:14:
4c:e3:a7:30:6a:84:93:57:ba:20:04:74:b0:19:26:52:c9:2e:
08:d4:9c:60:a4:b9:18:b0:29:20:8f:ae:aa:63:5c:5b:9e:de:
a6:8b:de:f6:be:d1:67:31:ba:27:7b:68:be:a7:be:b2:57:eb:
da:32:26:e4:40:b2:f3:b8:18:02:d7:d5:44:12:92:7d:dc:10:
58:91:47:89:03:9f:ea:82:49:6b:b1:c4:6a:dc:54:df:09:d1:
5b:95:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:34 2026 by rpki-client