Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: bbpig5R9dd+8yOwsruLKO2Wl6UO+478eJtKOhiWtN14=
Subject key identifier: FC:A7:0B:25:86:A5:11:6A:CF:87:78:8B:54:7B:5D:97:FF:EF:2B:8D
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019CAAFD4A20B50F86879AB7E70C6FCA86B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: NdDN6DqEXKuW9VRtkmnDwdjDD3jMdYKPC0wNv6jrH70=)
7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4a:20:b5:0f:86:87:9a:b7:e7:0c:6f:ca:86:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=fca70b2586a5116acf87788b547b5d97ffef2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:c6:dd:7b:27:9d:f2:de:0c:36:ec:df:03:
92:db:03:44:fb:25:29:ad:66:13:22:ed:8b:90:36:
c2:17:51:df:fc:b3:81:94:f0:05:d1:82:14:87:3c:
ee:a4:ba:9a:e5:86:cd:f8:e7:78:33:77:55:8c:d4:
3f:8a:b0:16:f3:76:17:67:a3:60:de:ba:41:7a:ac:
3f:e1:5e:23:bf:b9:08:1e:a7:45:e0:8c:dd:8a:b5:
92:ca:62:26:bd:6e:2e:b0:d2:dd:79:92:21:60:51:
d6:82:1d:5e:a5:c3:e6:c7:76:19:70:f7:d5:6f:8b:
d4:4b:e4:8d:c7:30:0e:cf:1a:b0:d8:17:bd:db:85:
3b:21:f4:8d:a8:19:aa:9f:ae:fe:37:89:9a:3f:e4:
52:86:da:13:c8:53:12:85:2b:31:f3:bc:41:21:1e:
03:24:03:32:47:20:cd:00:7a:51:a5:d2:54:13:6a:
63:0f:fd:2a:f0:31:75:97:4f:50:b8:a4:b9:95:9d:
58:f8:14:e7:a0:89:78:d7:b7:c5:79:4a:b2:ab:c9:
61:3f:41:2d:cd:88:22:1c:ef:ef:de:7a:cf:8e:61:
d9:bd:06:b6:8d:3b:10:74:cc:14:4b:63:b3:88:7c:
29:cc:41:31:4e:b4:17:b6:90:0f:e5:96:8c:25:48:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:0B:25:86:A5:11:6A:CF:87:78:8B:54:7B:5D:97:FF:EF:2B:8D
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:99:8d:c7:b9:5b:89:cc:c6:28:b1:1c:3c:57:f6:10:b8:fd:
2d:6c:0b:87:d2:a8:1b:ac:06:26:46:5b:b9:42:5a:78:8a:c5:
96:c9:22:dc:7a:81:eb:bf:4a:9f:8c:71:07:04:9f:f2:6f:4d:
cb:18:d7:30:43:86:2b:90:8a:42:aa:41:ba:fe:33:a0:99:32:
9d:bb:02:15:cf:ea:87:73:c3:f8:1d:df:9c:0f:58:a1:ec:8a:
f6:09:29:8c:00:dc:42:8c:cc:08:92:47:a4:8e:e6:0a:90:4d:
89:b3:06:6d:b1:3a:65:5f:00:de:68:bf:94:22:aa:be:fd:f4:
6d:dd:75:9c:a2:7e:c7:4b:14:4c:8f:66:2f:b6:4a:df:31:6d:
36:59:c4:03:02:6d:73:be:14:8e:e0:a4:8a:07:eb:99:17:fe:
5d:44:cd:57:ef:7c:ae:1d:92:e5:e3:47:4e:08:22:50:67:d4:
9a:91:ce:6b:ff:6b:ec:0b:c0:55:b0:ec:75:a7:0a:21:33:3d:
54:2d:8c:d9:7d:3a:b0:cc:7f:6a:5c:46:15:9a:49:3b:9a:03:
0f:de:9b:49:ed:a0:f0:fb:ae:bb:dd:ad:b7:0e:da:0d:2c:d5:
3c:e3:e5:f1:27:1f:87:e1:8f:2e:15:32:5a:d6:06:5d:9a:b5:
e2:5a:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:02 2026 by rpki-client