Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: lx+/i4XYcwsoVtKGpwxPBTWBwegxyUxskpfXg9eTUHY=
Subject key identifier: EF:FE:B6:A8:97:C6:47:AD:4E:91:27:08:65:76:14:60:CB:A7:EE:64
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019CAA213CBF4E5D137BA1898CF60021FDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:00:30 +0000
Manifest this update: Sun 01 Mar 2026 16:00:30 +0000
Manifest next update: Mon 02 Mar 2026 16:00:30 +0000
Files and hashes: 1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: j1EIzS26At0+tcj9KG/O00e4JXh9CDdJvTiwcp8Ou1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:3c:bf:4e:5d:13:7b:a1:89:8c:f6:00:21:fd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Mar 1 16:00:30 2026 GMT
Not After : Mar 2 16:00:30 2026 GMT
Subject: CN=effeb6a897c647ad4e91270865761460cba7ee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:79:40:a5:62:a4:dc:7e:a9:7d:ba:2a:cb:
5c:e7:3e:79:08:0c:57:79:a2:3b:03:06:5d:24:05:
6d:c2:7c:76:7b:fc:e2:00:42:d1:6c:92:4e:40:fa:
ca:48:07:69:5e:d2:74:cc:dd:d7:b5:8e:6f:be:af:
d5:6c:56:8e:b6:bc:d8:23:94:e1:8c:c4:60:4e:98:
07:09:82:fb:36:72:86:54:75:34:3c:dd:e6:46:75:
ec:01:8c:1d:2a:4e:4e:d4:1a:c1:f7:6a:ea:11:ec:
19:ad:11:7b:82:8a:69:d0:a6:95:a1:aa:03:4d:be:
cf:76:43:cc:72:9e:ba:61:0a:a4:c2:8d:3d:7d:75:
82:df:5e:75:6d:76:f0:5c:ca:95:c6:50:6c:26:82:
8b:bd:b8:3f:7e:3d:12:47:84:39:b8:00:11:82:87:
cc:21:98:9c:53:4a:32:30:79:e7:ce:2c:1f:b3:79:
20:28:45:17:19:b1:44:84:15:07:7e:87:6f:7f:03:
b1:c3:39:78:b7:a6:16:8d:0e:1d:fb:d2:3e:ef:99:
79:c6:63:12:05:90:ae:4f:2e:5e:c7:09:44:77:45:
5b:7a:02:94:53:b1:e1:8c:96:b3:30:81:76:61:1e:
bb:e0:48:6e:5a:30:30:b2:f7:cc:ec:09:e7:41:5c:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:B6:A8:97:C6:47:AD:4E:91:27:08:65:76:14:60:CB:A7:EE:64
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:0b:ef:d2:03:a0:1c:5f:73:d2:41:aa:41:7c:ff:72:0f:
46:44:ab:03:fa:e9:ea:ea:32:01:5e:b0:20:4d:2b:38:36:83:
9f:b8:91:31:52:89:c0:37:9e:2d:14:06:3f:ca:ef:61:e9:fd:
bc:8f:22:c1:71:17:0f:79:8e:33:f6:53:50:1c:0d:a6:aa:b4:
ec:1e:24:8b:5f:10:29:82:32:02:3a:33:f0:65:dd:74:d4:7a:
3f:8b:74:f1:84:2e:2c:0c:88:7d:93:ab:79:84:50:d4:94:7e:
c9:dc:ba:48:7b:c9:53:f3:0a:6c:d0:49:dd:76:04:82:f1:55:
86:84:de:5e:04:6b:04:24:8f:bf:cf:7c:f6:89:6a:fb:42:99:
97:a0:16:e0:c4:96:ed:0a:60:28:32:13:d1:91:64:db:c2:3c:
d4:cd:d2:6b:33:81:b8:1f:a0:74:f8:27:9e:8b:33:a5:c2:1c:
56:f1:da:f2:64:48:93:41:e5:e5:c6:06:93:7f:bd:18:32:f2:
ba:e6:92:ad:ca:1c:af:13:a7:43:a8:ed:b0:8c:da:52:8a:7e:
2a:6e:39:4a:f2:04:68:d3:5f:55:ee:40:dd:83:fe:29:57:6f:
7a:72:b7:74:88:28:13:c5:d8:4a:db:9a:55:c6:71:8f:14:d1:
12:a9:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:37 2026 by rpki-client