Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: gqn3N21X8IG7Czn8AfaLqIPb7pecvxmIraPEOkbqPxQ=
Subject key identifier: AE:BD:49:8F:1C:72:11:28:7B:85:BF:4C:16:0F:55:64:96:E1:1A:80
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019FAABE45D880180B41C6F852E5AD545E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 22:00:23 +0000
Manifest this update: Tue 28 Jul 2026 22:00:23 +0000
Manifest next update: Wed 29 Jul 2026 22:00:23 +0000
Files and hashes: 1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: C8QpKbTX0zvfrb5OpfymivwalxQmW6PkpR/Hl1Snb38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:45:d8:80:18:0b:41:c6:f8:52:e5:ad:54:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jul 28 22:00:23 2026 GMT
Not After : Jul 29 22:00:23 2026 GMT
Subject: CN=aebd498f1c7211287b85bf4c160f556496e11a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:48:bf:fe:3b:55:0a:57:21:27:c3:a5:90:
61:89:18:ca:d9:31:6c:86:c4:5b:c3:41:d3:87:5a:
52:bf:29:09:8c:92:08:c5:4d:42:ef:df:a8:ea:b3:
69:1b:0e:5d:ab:7b:1a:8c:03:8f:15:79:02:3f:dc:
51:98:95:51:09:9b:33:7d:ee:03:3b:03:3e:15:ae:
9f:ba:82:8e:15:1c:77:30:33:08:df:af:57:8c:db:
19:58:94:85:db:4d:ed:27:ee:3e:b1:08:e6:d8:e5:
21:11:2a:c4:33:53:f4:55:63:17:25:b8:13:f5:46:
1b:63:a7:fd:ae:fb:e8:00:b7:b5:16:db:fd:a5:a4:
8d:dc:58:e5:a2:70:de:ce:97:c5:28:87:ad:24:1a:
ae:b6:49:82:8d:51:bd:76:c4:52:9b:73:98:ab:d0:
7d:95:67:ee:09:98:e0:41:f6:1b:2c:f6:28:d4:ba:
0d:a6:27:dd:a5:8e:d8:a9:c3:99:1d:55:63:9f:4e:
d9:ed:58:79:ab:df:28:6d:4f:53:c2:ce:f3:8d:9f:
7c:ae:e4:7d:70:d8:59:af:30:1b:d6:43:f8:af:7f:
22:c9:4b:c7:d0:14:9c:2a:cb:ae:cb:45:96:8a:f1:
7e:b0:59:88:74:bd:db:c0:c8:29:8d:9d:61:3e:9e:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:49:8F:1C:72:11:28:7B:85:BF:4C:16:0F:55:64:96:E1:1A:80
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:3f:09:d7:8f:7a:63:07:95:c2:9b:3a:fe:b8:b6:ba:8e:
1e:b0:75:b9:e0:da:67:6a:d3:ca:89:86:75:c9:2e:9d:01:20:
2b:2c:da:7e:83:5c:e9:f7:22:01:9d:d0:8b:79:19:86:1f:34:
48:21:cd:74:c5:ed:dd:32:af:5c:08:56:d1:fd:bd:03:ba:54:
51:32:40:1f:b0:a8:70:ec:85:d8:9c:e2:31:26:1a:dd:74:c0:
47:5c:0f:89:f9:f3:9b:5c:33:8c:cb:3a:c3:51:88:af:dc:68:
73:53:fe:d7:77:39:c5:47:6b:37:b5:9d:4b:e2:bc:2c:14:b5:
ef:42:0f:f0:e4:92:e1:b1:21:62:e9:85:a2:c7:a7:7c:4f:55:
b0:b7:c7:e2:e0:d3:1b:e9:54:5d:f0:ef:5a:b5:11:2c:3f:71:
27:af:e6:60:bb:66:db:7f:43:48:b2:f6:d1:65:e3:6c:16:5b:
32:72:7e:a6:26:e4:8c:6b:92:66:71:ea:3c:58:ae:c4:df:61:
00:b3:85:8c:cb:cf:4d:9f:3a:f4:63:06:43:a8:dd:50:85:cc:
2f:80:3a:05:a6:96:ca:7f:5b:ca:2c:80:28:e3:a2:99:13:7d:
bb:66:33:5c:3a:8d:5f:d6:78:d2:44:b5:ac:57:a1:1a:be:7b:
ad:db:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:03 2026 by rpki-client