Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: annPEjKPaQO7ykL1xjNbzwog/DrHacst7tr6kLxn66Y=
Subject key identifier: 96:6C:07:E0:BA:AA:ED:50:02:7A:80:C6:67:1E:83:08:BB:52:A8:B9
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019D9886630806B546CDCC33019C32095AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 23:00:37 +0000
Manifest this update: Thu 16 Apr 2026 23:00:37 +0000
Manifest next update: Fri 17 Apr 2026 23:00:37 +0000
Files and hashes: 1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: /EYc0iyVYXmriPB2j1Or7if1A0T01Vb3vF3BT2QD3jY=)
7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:63:08:06:b5:46:cd:cc:33:01:9c:32:09:5a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Apr 16 23:00:37 2026 GMT
Not After : Apr 17 23:00:37 2026 GMT
Subject: CN=966c07e0baaaed50027a80c6671e8308bb52a8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:e0:5a:5d:ce:92:9e:ab:ad:c7:8e:c5:95:
45:c0:1b:0e:f5:81:d2:88:03:d3:6a:a0:50:84:21:
bc:d1:68:b7:d8:89:56:5d:73:17:88:2b:86:c4:e4:
b5:d6:d1:25:ec:d7:ad:ab:8d:96:01:26:04:24:a4:
04:a1:93:d4:73:86:82:1c:d8:12:83:a8:66:5a:2c:
43:e6:db:95:97:76:a1:ed:e7:87:2e:e7:1e:70:8d:
86:8d:82:55:ad:b2:11:bc:f7:76:de:70:d9:98:01:
d7:2d:7d:26:d5:b4:4e:74:48:8f:de:7f:84:0b:39:
84:67:94:6b:72:c3:b0:e7:c2:20:ee:2b:80:8c:7f:
17:9b:8d:45:33:50:a3:5c:3e:f9:f3:db:b6:b5:fb:
07:1d:02:e7:3e:c5:21:76:0c:e8:fa:8b:2d:c1:ff:
4e:0d:a6:ef:b0:3a:18:8b:10:a3:89:99:c3:92:e7:
d3:6a:77:de:49:d0:ea:2f:b2:13:c7:ab:f4:85:98:
e1:3a:b4:f1:47:cd:4a:7d:1f:f8:ae:5f:de:12:72:
7a:ae:c6:88:7b:4f:55:c0:41:dd:6a:bc:4f:09:d3:
2c:27:1f:5f:4c:cb:f4:0a:9d:e1:f6:41:e5:f0:0c:
07:e1:a8:72:01:e2:16:7d:f9:4a:84:c7:4c:8b:29:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:07:E0:BA:AA:ED:50:02:7A:80:C6:67:1E:83:08:BB:52:A8:B9
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:74:dc:9e:ac:a0:45:b5:c8:5e:2a:1e:43:b0:44:22:61:55:
d8:19:68:28:18:b0:60:f7:52:8f:ac:9d:39:d5:1e:8d:26:dc:
34:e0:f2:7c:89:7c:d2:d6:76:9f:f1:d2:94:a6:15:6b:ba:39:
e0:5c:58:fc:11:ea:7c:06:59:e0:d2:e3:1f:72:cd:9d:3f:35:
b6:21:99:a1:4f:3d:f9:f9:27:e4:54:6f:4b:f7:7c:10:35:37:
97:b9:93:41:d5:21:1a:d9:a7:22:c9:be:69:4a:37:8a:89:df:
97:46:2c:be:54:30:5f:47:5f:93:36:54:0a:8c:59:f5:3a:0a:
4f:89:a5:e1:fd:0c:77:8c:7f:e9:1f:33:54:57:8a:c9:44:24:
94:21:3c:14:f6:99:c2:f6:1b:e8:c7:4e:14:a9:61:65:4f:9a:
03:f2:68:c3:aa:80:05:d2:a4:2e:f7:93:4a:0d:03:d7:20:7c:
f5:ad:48:1e:2a:04:d9:57:ce:6a:ad:93:f5:89:1a:b9:9b:34:
5a:d4:85:7a:9f:17:5b:b0:96:84:bf:ed:97:3a:c8:0c:44:ed:
46:b2:aa:f2:af:54:d7:29:12:13:41:be:cb:ae:c0:be:90:41:
d1:f9:b3:df:68:2d:c8:31:91:7b:e2:8b:ac:d3:0d:82:ba:8d:
92:94:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:11 2026 by rpki-client