Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: YtGrIwBAhan+6PdhrXP6nvd30n3N3lbVxBGriagElto=
Subject key identifier: C0:C8:96:42:BA:6F:9E:09:67:F8:9D:64:6C:76:64:DB:13:55:D3:5B
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019CAE35847AEF168CC5F0E1A8889638E396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:01:08 +0000
Manifest this update: Mon 02 Mar 2026 11:01:08 +0000
Manifest next update: Tue 03 Mar 2026 11:01:08 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: IQNxKrAqhzBi36NXisSb42UsnRDvbKBK6J7Emg2Ql10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:84:7a:ef:16:8c:c5:f0:e1:a8:88:96:38:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Mar 2 11:01:08 2026 GMT
Not After : Mar 3 11:01:08 2026 GMT
Subject: CN=c0c89642ba6f9e0967f89d646c7664db1355d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:cb:c6:1d:fe:76:35:de:ea:98:05:4a:e5:
2c:ac:87:02:86:ab:34:23:c5:cd:e1:4f:52:25:64:
42:2d:67:8e:95:ba:0d:36:08:98:bf:39:3b:88:72:
43:3b:d1:ed:67:19:ef:c9:42:08:f7:04:b4:a7:4f:
1a:93:79:5a:10:d8:22:79:72:a6:ea:19:c6:c9:67:
5e:2c:92:a5:38:19:53:32:f3:e3:29:bc:bd:45:74:
26:e4:3a:0b:dc:e3:f9:b8:1e:74:75:d7:77:0e:b8:
f2:32:de:f3:dd:e6:78:ef:20:0f:b4:5c:36:b2:bd:
8f:5f:8b:31:95:b7:78:10:29:30:98:7e:43:3b:f7:
da:61:a6:7c:df:9f:a3:5f:ac:e0:52:60:f6:2f:ea:
ad:1c:6e:f2:04:31:c3:b3:47:46:f5:e6:e5:c5:15:
28:9e:6b:96:22:e1:0c:aa:4d:92:2d:4f:70:07:dc:
9a:a1:6a:c9:b7:1a:7c:92:c5:a9:14:5d:70:72:ed:
ff:61:b5:9a:20:c1:2c:8e:bb:df:d0:b2:6c:7b:41:
7b:6b:4c:e5:5d:76:8a:38:35:b1:97:86:7f:ea:a2:
5c:f4:47:bc:be:0e:45:94:88:26:07:63:90:8c:ac:
aa:5c:60:a1:2c:42:68:9b:b4:2e:39:44:ab:3c:b3:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:96:42:BA:6F:9E:09:67:F8:9D:64:6C:76:64:DB:13:55:D3:5B
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:1c:e1:06:cc:a6:4d:f1:d6:00:12:b5:51:1d:cb:6c:aa:
ed:e8:e9:31:24:2a:bb:a7:5d:af:28:26:74:02:41:81:96:e3:
30:0e:a3:65:68:95:d8:6a:d4:10:1b:3e:7a:a0:fb:7f:83:5b:
fc:e5:d6:c6:c0:d3:a4:11:3d:77:15:3a:76:e6:e0:18:09:2c:
10:19:ac:70:b4:0a:0d:fe:3f:95:a2:6d:69:0e:67:14:98:1a:
1d:43:b2:d2:a0:4d:f5:15:34:ad:63:72:17:da:34:6a:ad:6b:
34:47:2d:e8:2d:cb:09:b5:31:03:a3:73:cb:39:e4:91:41:fd:
0a:85:99:50:48:68:78:5f:74:70:17:31:50:73:38:32:d0:dc:
70:36:ad:e7:8c:ca:27:45:68:36:f2:6c:3b:6a:00:a6:36:23:
7b:4d:f1:39:2b:0b:74:65:41:98:07:9a:15:52:5a:15:39:fd:
b8:92:3b:fb:a6:41:83:9e:28:55:54:6b:74:dc:ce:7f:45:ba:
e8:6b:b3:94:3f:75:f6:ac:0f:96:2b:55:39:b6:e8:79:7d:1a:
61:c9:c0:d0:da:65:8d:d9:d3:e2:86:20:10:69:85:44:9f:ce:
48:3d:f5:4e:cc:02:d8:ee:4c:54:9b:37:d7:f6:5d:4a:35:ae:
3e:69:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:54 2026 by rpki-client