
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: wsqdZHX3ha5yZyZv+6ewfbb4POu2tBEMSFwgxoHzFHA=
Subject key identifier: A7:46:83:2D:FE:D3:A5:1E:CA:16:EA:0E:FB:83:B1:61:4A:9E:F6:64
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 019D9A74FD3A0292821C7B318ED91012B859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 101E
Signing time: Fri 17 Apr 2026 08:00:51 +0000
Manifest this update: Fri 17 Apr 2026 08:00:51 +0000
Manifest next update: Sat 18 Apr 2026 08:00:51 +0000
Files and hashes: 1: 5shtjSwYY1wV6rWlUfcIKGn6yqo.roa (hash: VOmUNnvEDlqDrfQ2raf9GqtN9WB6Ae56gIOAstRWDXQ=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: q8vNfKPadnwLEqVGJU95p/2CR2eqyJn8UJVw/dTUPBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fd:3a:02:92:82:1c:7b:31:8e:d9:10:12:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Apr 17 08:00:51 2026 GMT
Not After : Apr 18 08:00:51 2026 GMT
Subject: CN=a746832dfed3a51eca16ea0efb83b1614a9ef664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:4b:89:18:30:54:3d:dc:1b:75:90:14:d9:
20:9e:b1:9a:11:c9:bb:01:d9:e9:f8:66:f0:df:59:
2a:09:07:5a:fd:c2:6c:63:3d:77:28:e2:95:3e:60:
2a:c1:a2:a3:a9:c9:e9:66:55:9f:c6:ec:ad:1b:21:
4b:1c:15:cd:37:fb:a8:d4:1f:0c:fe:73:58:33:ff:
36:b2:d3:5a:34:a7:68:77:0a:15:f2:46:6d:79:ec:
57:1e:97:40:d1:4a:b9:c1:c6:6a:fb:99:0f:a0:7e:
b8:98:40:2b:c2:24:fb:d8:01:60:b4:5a:54:34:56:
22:00:5c:95:6a:7e:54:41:62:d3:1f:85:11:f4:45:
04:28:2a:6e:bd:f8:4b:6d:d0:fd:d2:a4:d6:37:3c:
f4:60:21:45:4c:81:da:b9:c6:ab:7a:f5:4a:ae:87:
1c:72:0f:dd:64:31:13:7f:0f:41:5c:e5:1f:8f:7a:
00:d2:34:68:7c:20:10:a6:15:ce:43:b7:89:a0:c3:
78:b4:bd:08:6e:1f:7b:9f:36:fa:95:51:42:88:37:
74:f4:30:a0:a0:60:ae:1a:5e:d5:54:8b:60:85:79:
a3:8e:93:c4:0c:2a:95:bb:fb:a0:64:72:0f:9b:70:
57:05:e0:da:5f:85:65:3c:44:93:e4:61:5f:5c:18:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:83:2D:FE:D3:A5:1E:CA:16:EA:0E:FB:83:B1:61:4A:9E:F6:64
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:5d:33:b8:9f:c8:ff:4b:63:a5:25:ac:88:55:49:9c:fd:
28:27:dc:6e:32:df:46:6d:b4:27:c1:fd:c1:f0:5f:5e:71:6d:
35:59:6f:78:20:3b:06:68:5f:b5:0d:be:90:02:6b:cb:e4:d1:
5a:e7:8c:7d:7f:e5:1d:64:e4:6c:8b:eb:5a:ff:48:57:e7:b5:
be:48:9d:08:0c:b6:b5:ac:bc:2d:98:99:32:77:35:f4:5c:d2:
9e:2a:bb:7b:0a:b2:f5:46:fe:68:fd:47:e2:58:2d:3f:88:b8:
5f:b7:25:3b:89:3b:f8:ca:df:0b:55:85:1c:31:29:41:fa:42:
be:45:5d:bd:93:86:e4:25:29:08:9c:00:36:a4:9d:41:3d:52:
eb:ec:da:6f:d0:ca:36:81:f8:28:f3:6f:15:57:40:e2:eb:e4:
66:72:7a:7e:76:1c:d9:d8:ca:42:72:92:49:f1:3c:c2:a2:ae:
f0:be:28:5e:77:47:f4:57:31:5f:42:a0:be:8a:4a:2c:eb:8b:
18:65:f7:7d:bb:40:58:1b:2a:b1:c2:84:02:57:64:01:d5:b8:
e6:3f:a2:4f:f2:df:85:59:1a:b2:3a:cf:e6:ac:c2:c9:91:2d:
19:e4:75:ef:c8:31:61:87:69:4e:a0:2f:24:de:54:ad:76:cf:
b3:52:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:21 2026 by rpki-client