Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: wCrIPJue7zz5N8vIeK7QWQ7N/31uDAN1NKxLIa6DUwA=
Subject key identifier: 8A:17:5A:5C:FC:3B:4B:E0:70:F5:D9:09:12:D2:34:FC:46:0F:A8:D7
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019D9D0802CF4B9E3F5A74F9DFD2263A5123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 1664
Signing time: Fri 17 Apr 2026 20:00:41 +0000
Manifest this update: Fri 17 Apr 2026 20:00:41 +0000
Manifest next update: Sat 18 Apr 2026 20:00:41 +0000
Files and hashes: 1: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: CcuAQ0iBwh1tOABweF6TB9puyzGVePcORjixjlLlrZQ=)
2: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (hash: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:02:cf:4b:9e:3f:5a:74:f9:df:d2:26:3a:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Apr 17 20:00:41 2026 GMT
Not After : Apr 18 20:00:41 2026 GMT
Subject: CN=8a175a5cfc3b4be070f5d90912d234fc460fa8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:70:2f:5f:da:f7:2a:b0:16:61:b8:9c:b6:
7b:db:75:80:dc:f7:61:3d:7b:27:7f:3f:e8:dc:2d:
8a:bb:fc:9b:77:f1:bd:f3:7f:e9:19:d9:71:87:22:
ae:b0:7a:35:62:40:3a:58:10:0f:2e:df:fe:5a:b6:
ea:b9:44:49:4d:94:bb:ab:32:bb:4b:09:ca:91:53:
be:1a:f9:23:8c:7c:02:03:58:e2:e8:de:99:75:7a:
58:2c:6c:20:c3:0e:b8:7a:49:a0:7a:7e:3e:63:ed:
c1:e0:57:a5:e5:2f:f6:18:cc:0b:38:74:65:ce:af:
98:10:a9:a5:81:ed:13:03:a4:52:a8:bc:19:2c:28:
49:45:2e:0a:8d:0d:9b:2a:a7:d4:a7:cd:60:0e:ce:
97:ff:f1:e1:f8:aa:15:b7:b0:11:97:5b:d9:29:d3:
64:96:b4:14:2c:88:5f:c1:76:12:28:e1:ae:9b:ef:
8b:a8:4d:14:ea:4c:6b:9e:c1:f1:cc:2a:17:e1:c4:
77:8f:33:48:5c:a4:6a:e5:56:c5:fd:6e:e1:59:eb:
12:7b:b6:f5:bc:35:af:cc:f0:0b:ca:ec:af:6f:71:
3d:67:3d:4b:cf:13:9a:05:f2:c2:e0:e5:49:ca:7d:
c6:6e:e6:ce:2b:6c:b2:ab:7e:d1:b3:26:05:67:86:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:5A:5C:FC:3B:4B:E0:70:F5:D9:09:12:D2:34:FC:46:0F:A8:D7
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:19:cf:22:5b:f7:9e:0b:d3:ed:a1:16:8f:c9:5b:05:1a:3a:
f9:1c:f0:94:91:78:8e:9c:8a:f1:fa:19:31:08:38:8a:87:f9:
f0:73:fb:81:9e:20:8c:1b:ae:6d:84:6f:6c:ce:29:43:0f:a2:
fc:84:e9:fa:48:6e:82:73:67:6d:f8:3e:99:02:e4:c9:b7:90:
ac:dc:a9:06:81:84:b4:0c:67:56:0a:ed:30:de:f7:12:ba:80:
24:6d:29:51:d0:4a:3a:b7:73:be:7a:1a:21:ef:ec:24:58:88:
ca:07:70:64:f8:da:f4:5a:9d:7c:bc:b1:00:d4:4c:26:99:dc:
8d:1b:3b:01:ad:2d:e8:eb:14:13:16:3e:15:be:9a:54:d4:97:
85:26:51:64:0c:a9:4f:c2:b6:9e:ab:20:eb:ad:bf:26:31:6a:
3b:9c:89:5b:90:61:c4:e9:a0:f5:71:3e:91:9b:04:0c:59:ec:
bb:ca:f8:d5:92:57:be:a8:e4:b2:29:2c:85:c4:58:9c:0b:14:
49:67:ec:0c:d5:85:7e:81:aa:b5:35:f0:2f:7d:10:92:fe:7c:
43:e9:a3:de:80:ca:51:0f:44:68:38:6f:fc:f7:8e:d7:fa:90:
63:5d:b1:4e:eb:ba:fd:21:9d:62:68:ae:14:45:b7:44:95:7c:
98:75:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:22 2026 by rpki-client