Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
File: tqSX68eR3kMxUAM94t2_pIYQw1c.mft (raw, json)
Hash identifier: 2ajGv4wnTGQtXA9uKsgeQVv+99EyYC738Bmb1S9jV/8=
Subject key identifier: AE:93:57:3D:86:29:FA:E1:5E:FF:AD:04:6E:1F:FE:A5:05:28:C0:24
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019D9DAD6F09553694113B0BAD47788CE04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
Manifest number: 8A
Signing time: Fri 17 Apr 2026 23:01:21 +0000
Manifest this update: Fri 17 Apr 2026 23:01:21 +0000
Manifest next update: Sat 18 Apr 2026 23:01:21 +0000
Files and hashes: 1: 94Ul-dlVcZRF2dJCBpIs9n3-IPM.roa (hash: sLcPFuMyvVZeg7LZhaj49iRvaozRs1nQsDsfofbM+sY=)
2: tqSX68eR3kMxUAM94t2_pIYQw1c.crl (hash: DFoBMSLRtg48LzaExFFk1sYhlGmH91auY+LGY64V23g=)
3: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (hash: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:6f:09:55:36:94:11:3b:0b:ad:47:78:8c:e0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Apr 17 23:01:21 2026 GMT
Not After : Apr 18 23:01:21 2026 GMT
Subject: CN=ae93573d8629fae15effad046e1ffea50528c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:4f:35:d8:4a:c3:6f:07:3c:a7:c6:30:76:
2a:9f:28:22:a0:d1:9b:cc:a5:c8:99:fb:62:54:b1:
06:fc:1e:14:7c:31:b9:bc:1c:f8:39:b2:0f:fd:51:
90:69:5a:b3:fd:0b:70:b2:bf:2e:0c:57:36:1d:34:
29:53:63:ae:37:24:ad:37:e9:36:ca:7f:36:cf:ef:
f7:3a:29:4c:86:22:bd:32:cf:fb:29:a3:e8:a2:5e:
7c:50:cd:f8:03:e8:c2:a9:28:80:e0:23:e3:62:51:
2f:9f:24:00:fa:e5:c5:fc:4e:5d:95:40:06:d7:c8:
47:73:4d:14:23:c8:c2:7e:ae:31:e9:2a:c8:77:41:
32:cd:ad:a3:2e:99:03:b7:9c:3d:e6:b0:72:d1:67:
e3:db:93:34:d8:82:1e:bd:a0:04:ab:53:59:68:fb:
58:58:54:fb:30:50:b5:7d:9d:6d:07:3e:3a:1d:46:
0b:a1:61:b2:4f:f4:96:35:9b:8c:ab:b1:4a:0e:1e:
5f:15:63:ae:5e:c8:3e:36:ee:b6:0b:1a:32:20:39:
52:b2:b4:e7:a4:dc:ea:f3:72:d3:e4:0f:38:bb:1c:
2e:7b:b0:f2:1d:e9:51:c2:24:df:15:a1:40:f9:63:
14:9d:4e:ab:09:7e:90:1f:5d:c9:97:c4:bc:bd:7e:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:57:3D:86:29:FA:E1:5E:FF:AD:04:6E:1F:FE:A5:05:28:C0:24
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:95:3b:8c:21:44:1c:36:e6:e7:67:3b:8c:1e:f0:2c:56:
e0:9c:14:2e:4f:f2:6b:4c:14:76:b0:b7:20:67:b8:04:f5:9b:
b9:4b:46:fe:a0:a2:53:9b:5c:a0:6b:1c:57:05:b1:e2:9a:17:
04:f2:14:71:39:5a:4f:1d:20:ed:af:6c:5b:64:ba:68:45:6b:
91:ce:05:d9:c0:97:b2:59:79:cf:f6:63:65:f2:be:d0:6f:5b:
b3:6d:c9:3e:6b:01:14:e7:9b:73:df:00:91:d5:96:dd:e3:b7:
63:12:f1:12:70:6f:4d:1d:35:9f:2a:63:a3:dc:2c:3a:1a:eb:
1c:6b:ba:85:44:34:bb:5e:22:9a:1d:be:3e:d4:39:ea:9e:3b:
e3:4f:47:34:52:04:93:44:44:95:f6:9d:99:95:dd:6e:c6:d6:
55:8c:25:f5:3d:a6:f5:d7:6a:ba:5e:49:75:3a:54:8e:54:50:
82:f2:13:0b:df:00:8f:23:47:dc:25:8c:ff:9a:98:1b:1c:dd:
70:e9:9d:eb:37:90:8f:e2:0f:25:fb:27:95:21:d2:e4:c0:8b:
47:73:f5:12:e7:17:5c:70:5c:fc:4c:c6:a5:4b:a6:5a:c4:2e:
4c:fa:5f:23:69:ff:b6:7a:f1:30:f2:d6:48:19:53:9a:d8:87:
91:b9:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:10 2026 by rpki-client