Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
File: tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json)
Hash identifier: n129rVoQQajZ4hCtNQCFH5y5ChN5H6mtK7GDtT2iwZs=
Subject key identifier: D3:CA:07:CC:56:9B:72:12:00:E6:FB:74:31:70:F1:40:9F:B2:A4:CC
Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7
Certificate issuer: /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
Certificate serial: 019D390A53D81837AE514EA6947CC7964270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
Manifest number: 031C
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: Oi4i4ArTYX2bzJDgdOmJ8wfG-Qc.roa (hash: 3SqbbSrad4TWe7DkRtPVNoNwj8sBMXzmlo9+pJyqPD0=)
2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: MnsyS0NOv8bwfUNpIJTJsMZ02f30ENfAIdU1ai6YSfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:53:d8:18:37:ae:51:4e:a6:94:7c:c7:96:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=d3ca07cc569b721200e6fb743170f1409fb2a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:c7:59:af:b7:0f:c7:06:67:9f:1a:65:78:
d2:3b:69:14:2b:8a:c3:b9:ec:c9:8a:6b:c1:42:fc:
72:35:29:3e:50:92:a1:7a:a9:55:bc:e7:f3:ae:13:
58:69:e1:b7:94:b0:79:4d:67:25:3e:9c:3e:3c:f9:
06:86:6e:b2:eb:3f:48:7e:27:71:3f:f6:63:9f:63:
9c:30:6c:4e:18:ca:2d:aa:b5:65:78:b4:13:d4:c0:
8b:20:1f:51:eb:2b:0d:77:ff:97:c6:cd:af:43:93:
eb:bb:05:e7:6d:d7:57:a0:f7:eb:93:f8:91:41:c6:
48:0c:b9:d0:af:73:ed:cb:33:51:9c:eb:ec:cd:f8:
48:4f:f9:78:8c:d7:36:3b:dc:a0:95:31:91:30:9f:
a1:be:87:eb:41:ed:85:8b:f8:14:1e:47:ac:6e:4f:
7f:92:b7:6c:e1:65:4f:62:ce:bb:6c:42:43:d1:b7:
19:ad:3a:25:a5:82:93:51:87:65:83:7a:71:be:6c:
38:ba:c2:fe:a0:d5:cd:62:76:4f:14:6e:2c:e2:e1:
3d:81:65:fc:25:ab:f6:48:dc:4c:b2:00:88:9b:04:
8b:57:ee:83:bd:6f:b7:30:36:d5:db:71:49:f8:fd:
6c:c4:eb:f8:b9:58:02:e3:ae:76:f4:ab:3e:ef:fb:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:07:CC:56:9B:72:12:00:E6:FB:74:31:70:F1:40:9F:B2:A4:CC
X509v3 Authority Key Identifier:
keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cf:43:4b:39:73:e2:92:00:59:fe:78:68:3f:dc:9f:88:cc:
06:bd:ee:63:62:cc:ac:83:5e:99:24:11:ac:19:1b:a9:dc:62:
05:d5:e9:e7:03:0f:77:27:9e:7d:27:34:cf:4d:76:dd:43:95:
a4:c7:7f:c8:9a:f2:dc:d9:65:68:92:38:44:24:72:8b:0a:5c:
9e:47:1a:97:55:7e:70:2e:4d:b4:05:b1:2c:28:44:cc:21:58:
f5:c9:ed:20:e8:42:ef:e4:7c:24:ac:54:5b:35:9d:f6:c2:02:
72:1f:69:14:b0:b1:d0:6a:fb:0c:00:c0:9c:9e:4c:9e:8c:5c:
40:cb:70:42:1d:09:8a:09:ea:ad:4f:0c:d7:a0:9d:b2:f0:a6:
f9:01:a5:96:41:48:8e:fd:32:10:9b:8b:23:f6:53:81:ef:cf:
3b:2d:bb:88:6f:47:66:14:41:12:dd:9f:14:bd:ce:ed:49:10:
05:3c:d6:ac:77:ea:22:0c:e1:c9:54:15:af:ff:b4:c1:3d:ab:
14:11:3b:78:8d:ac:1e:a8:f3:cb:70:ae:a1:cd:73:a0:6e:d6:
a0:8e:c2:c2:6a:8a:32:ef:62:b1:78:47:21:ce:58:42:97:42:
21:8c:31:38:8c:f9:1a:32:72:16:27:b6:45:cc:33:f1:0c:6f:
90:55:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:26 2026 by rpki-client