Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: 8pSGLQOwWhD/yLyvkmKJrh1hNStBccNMa7zEdK2W2zg=
Subject key identifier: 2C:17:CD:4D:F3:78:E8:EF:68:C2:F1:05:F6:10:1A:5C:83:80:D1:D7
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019D9B50854A2AC20D356C8FC6735BB3AD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 1688
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: EsxGV6HNAZhI_jTvKSDp3GvEjeo.roa (hash: 4ivM9pnea86yeynpy0V6DIdtMIbuYViF3rSNVv2i8Js=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: TsIe6MUV6WTE3Pz3/dH9iFtc9aP8mKTBNl8uafmp2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:85:4a:2a:c2:0d:35:6c:8f:c6:73:5b:b3:ad:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=2c17cd4df378e8ef68c2f105f6101a5c8380d1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:2c:2a:af:c8:05:2a:1d:3f:79:ee:90:f2:
07:a8:7d:2c:4e:74:0f:a1:ec:d8:95:a3:f4:15:03:
81:88:4b:64:55:6c:7f:37:10:d4:55:b5:b5:9e:db:
4a:91:38:ca:b2:72:b2:ab:13:4e:dc:3f:20:99:dd:
ae:9b:87:48:a8:38:12:86:f5:2b:74:4e:5c:ef:f9:
46:3d:42:99:c2:87:b2:fd:30:77:41:d8:ee:1c:05:
1c:e2:e3:2d:2b:35:69:da:d2:93:41:7e:be:3c:07:
fb:7b:3b:21:79:11:9e:c8:af:a7:a9:53:1c:dc:d2:
6c:f3:84:ca:f5:ad:6a:39:bd:11:48:f4:4a:3e:7a:
6f:7a:2d:53:f5:57:1c:f2:72:9b:cd:55:21:ca:b6:
56:66:f6:8b:bd:57:8a:5f:ce:e6:05:eb:ce:a2:cd:
74:0e:b7:a5:99:96:c4:d6:d9:63:06:96:b9:34:67:
57:3f:63:bc:f8:f9:a7:5d:b8:f7:fc:19:79:de:e8:
78:b9:a6:13:f5:84:c0:80:7b:10:62:f5:e8:96:d8:
39:8d:4e:04:0f:a4:d2:0b:71:53:89:12:cc:03:9f:
7a:da:ca:52:41:f0:8e:e0:91:5d:64:79:1a:15:de:
0c:bc:ee:a3:bf:ac:84:8a:63:72:b0:76:24:c6:ad:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:CD:4D:F3:78:E8:EF:68:C2:F1:05:F6:10:1A:5C:83:80:D1:D7
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8b:4e:00:3b:6e:55:64:4a:3a:c4:30:f6:46:40:e5:61:1c:
b2:65:64:e9:6c:f2:f2:31:24:26:09:eb:db:d3:3d:41:0d:cf:
bd:fb:2e:de:9f:ff:50:b9:7b:3a:2d:c9:56:83:b5:8e:cc:ea:
e1:1a:dd:85:f0:5b:9e:8a:66:c1:24:9f:84:70:a3:d3:f7:89:
69:11:73:b5:20:84:e7:60:8f:55:4b:86:48:ab:a0:5f:e4:b7:
ea:ea:7a:88:3a:b6:15:35:00:0b:b2:1b:84:38:18:e5:44:a1:
26:ad:ec:98:cd:99:47:c4:29:5a:33:b9:53:73:1c:34:2b:21:
a5:a9:fc:9a:31:02:16:0e:13:aa:e5:af:9a:fd:5f:c6:f4:c0:
e5:72:5c:5a:ef:78:57:30:09:0a:ea:d2:b6:7f:c4:14:43:4b:
7a:20:e1:aa:59:e0:b8:17:ed:3b:db:0f:1f:ed:80:72:01:43:
a8:dd:9c:6d:07:37:3d:f9:b0:74:8a:7e:75:e2:b9:c5:9a:0b:
0d:7a:b3:2d:86:20:39:43:f7:12:b0:e6:9d:0c:93:11:9b:7a:
8c:11:32:5c:a5:21:c8:cb:e4:4c:93:77:d8:98:3f:73:aa:27:
8a:85:56:63:cd:d3:d7:cd:1b:29:9b:e0:06:a7:f4:43:eb:c0:
5f:70:be:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUIVKKsINNWyPxnNbs60WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0
NWU4OWMwHhcNMjYwNDE3MTIwMDM4WhcNMjYwNDE4MTIwMDM4WjAzMTEwLwYDVQQD
EygyYzE3Y2Q0ZGYzNzhlOGVmNjhjMmYxMDVmNjEwMWE1YzgzODBkMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYwsKq/IBSodP3nukPIHqH0sTnQP
oezYlaP0FQOBiEtkVWx/NxDUVbW1nttKkTjKsnKyqxNO3D8gmd2um4dIqDgShvUr
dE5c7/lGPUKZwoey/TB3QdjuHAUc4uMtKzVp2tKTQX6+PAf7ezsheRGeyK+nqVMc
3NJs84TK9a1qOb0RSPRKPnpvei1T9Vcc8nKbzVUhyrZWZvaLvVeKX87mBevOos10
DrelmZbE1tljBpa5NGdXP2O8+PmnXbj3/Bl53uh4uaYT9YTAgHsQYvXoltg5jU4E
D6TSC3FTiRLMA5962spSQfCO4JFdZHkaFd4MvO6jv6yEimNysHYkxq22fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwXzU3zeOjvaMLxBfYQGlyDgNHXMB8GA1UdIwQY
MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt
MzY2YTk3NjFlYTIwLzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw
LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANItOADtu
VWRKOsQw9kZA5WEcsmVk6Wzy8jEkJgnr29M9QQ3Pvfsu3p//ULl7Oi3JVoO1jszq
4RrdhfBbnopmwSSfhHCj0/eJaRFztSCE52CPVUuGSKugX+S36up6iDq2FTUAC7Ib
hDgY5UShJq3smM2ZR8QpWjO5U3McNCshpan8mjECFg4TquWvmv1fxvTA5XJcWu94
VzAJCurStn/EFENLeiDhqlnguBftO9sPH+2AcgFDqN2cbQc3PfmwdIp+deK5xZoL
DXqzLYYgOUP3ErDmnQyTEZt6jBEyXKUhyMvkTJN32Jg/c6onioVWY83T180bKZvg
Bqf0Q+vAX3C+7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:36 2026 by rpki-client