Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
File: tqSX68eR3kMxUAM94t2_pIYQw1c.mft (raw, json)
Hash identifier: SK+ZBCtxpELEonlpX4C58Uqvx6fGuHwTM1q9NHCGRMo=
Subject key identifier: 5E:C5:01:95:54:16:B5:A6:0E:9D:27:93:64:EA:1D:67:F7:FC:EB:23
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019CAA5826B2064376EBCB2672FC7C5A5138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
Manifest number: 0C
Signing time: Sun 01 Mar 2026 17:00:29 +0000
Manifest this update: Sun 01 Mar 2026 17:00:29 +0000
Manifest next update: Mon 02 Mar 2026 17:00:29 +0000
Files and hashes: 1: 94Ul-dlVcZRF2dJCBpIs9n3-IPM.roa (hash: sLcPFuMyvVZeg7LZhaj49iRvaozRs1nQsDsfofbM+sY=)
2: tqSX68eR3kMxUAM94t2_pIYQw1c.crl (hash: lH9VKFBe5Juf+RRrAjj/53kyHhvUhEkg4S9Y8fjku3Q=)
3: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (hash: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:26:b2:06:43:76:eb:cb:26:72:fc:7c:5a:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Mar 1 17:00:29 2026 GMT
Not After : Mar 2 17:00:29 2026 GMT
Subject: CN=5ec501955416b5a60e9d279364ea1d67f7fceb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:73:6a:18:0d:ce:29:54:56:a5:31:04:1e:
18:c0:d5:9c:ee:f8:bd:0e:e1:42:17:0d:51:9c:37:
80:71:f3:43:4d:97:c4:a3:8e:98:1b:bf:97:ba:67:
5f:41:ff:c2:aa:92:40:bf:8b:0e:68:07:67:4b:72:
ad:cd:1f:8f:27:07:a8:4c:f3:70:1d:e5:84:d5:37:
07:5a:ee:00:5e:99:a8:02:4a:9d:cf:46:d1:fb:6c:
fa:a1:f6:fc:c3:f2:5a:97:a1:25:18:e7:5a:ba:31:
2e:0a:09:6a:8b:e0:3f:4a:95:e1:f6:ce:42:76:2d:
cc:1a:35:ba:5b:7e:e0:0f:88:4b:41:2f:40:1b:dc:
f4:38:b6:3d:d5:88:d5:24:26:bf:dc:94:3d:38:d1:
6e:6d:67:c4:c8:9e:01:13:ae:c4:d6:a4:a5:a9:e2:
76:c7:77:21:64:67:dc:4b:14:38:80:f0:bb:0d:fe:
33:79:22:cf:6e:f2:47:e3:d4:98:4f:82:78:cb:b5:
13:10:ae:eb:8c:fe:ea:ab:6e:c8:a0:5a:b1:9d:4c:
8f:bd:ea:7c:74:02:38:5d:3c:07:18:07:14:59:93:
04:c7:4f:cf:1a:5b:32:89:30:97:c9:64:ff:92:b0:
5b:38:a5:58:37:f7:57:a5:d5:8e:64:6e:16:ec:a1:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:01:95:54:16:B5:A6:0E:9D:27:93:64:EA:1D:67:F7:FC:EB:23
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:37:6d:79:b6:1a:19:00:74:20:29:65:6d:3b:ce:a4:dd:9d:
df:7c:7a:19:53:36:f6:33:9d:d4:7a:29:bb:a8:7c:0f:6c:8b:
c6:72:08:1b:4d:55:fc:5e:7b:1d:d4:c1:db:ef:cb:cf:8d:54:
e7:7c:3f:f7:c9:f1:b4:4e:c5:aa:93:8b:3f:cb:48:5a:ef:01:
40:15:95:a2:f7:5f:12:d8:0e:f5:77:c7:90:fe:6e:45:71:f5:
34:94:3a:d6:38:3c:75:2b:f4:6a:28:53:32:bd:51:30:b6:5d:
0b:23:dd:b6:bf:07:a7:fb:b7:25:07:20:a8:fd:8d:f3:59:d9:
92:e1:db:3a:5b:c3:7a:9e:b6:07:29:ad:83:ed:87:b8:3b:0d:
ba:14:d0:b7:95:0a:39:5c:da:6d:34:48:79:bc:8f:b5:06:90:
9d:fd:22:6d:ec:cc:84:68:6e:ec:b5:e4:7d:3e:34:52:a4:22:
83:0b:b1:10:a6:1c:13:07:58:7d:d2:9d:c5:90:79:71:e0:70:
91:cb:c5:3d:e7:aa:ba:d7:96:4f:b9:79:57:08:b9:e5:f9:bc:
d8:e4:56:ca:5a:ed:60:03:b6:93:c8:cc:54:25:4b:b1:13:48:
5f:27:dd:cc:86:95:d1:31:0e:5d:17:d5:0a:d4:82:53:a8:79:
e4:70:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:39 2026 by rpki-client