
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File: tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier: TW7YxCN1Nw/3Jkol4Mjsjf9KmxTQ4jdaakgSrgDKJt4=
Subject key identifier: 3F:40:01:A1:56:A7:CB:F1:5B:C5:19:3A:7F:11:99:3C:FE:BF:23:ED
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer: /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial: 019F13E5D29382EB767375C183BEBB54307A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number: 1597
Signing time: Mon 29 Jun 2026 15:00:56 +0000
Manifest this update: Mon 29 Jun 2026 15:00:56 +0000
Manifest next update: Tue 30 Jun 2026 15:00:56 +0000
Files and hashes: 1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: NG7GbGbuSY03JwFgp4O/f3RhbPtBAcIR9BUn5TxNY5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e5:d2:93:82:eb:76:73:75:c1:83:be:bb:54:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
Validity
Not Before: Jun 29 15:00:56 2026 GMT
Not After : Jun 30 15:00:56 2026 GMT
Subject: CN=3f4001a156a7cbf15bc5193a7f11993cfebf23ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:9c:4d:cb:91:a0:e3:d4:b1:16:63:90:77:
a6:64:af:53:07:08:46:14:8d:63:51:bd:f2:d1:1e:
90:56:97:6c:ee:e4:0b:3b:13:6c:23:e9:2b:a5:df:
76:f3:5d:47:2c:19:99:be:e8:41:df:49:e3:56:20:
4c:41:e1:f1:fb:08:4c:67:11:74:3f:4f:14:b5:f9:
33:2d:1e:47:0b:47:1b:f1:94:cf:b0:ff:e8:5d:47:
40:a1:55:f1:ef:d3:01:d1:e6:d7:0b:d7:0d:cd:81:
52:62:43:52:e7:e2:db:06:d0:2f:e1:9a:7c:23:93:
a8:cf:b0:84:06:3a:79:bd:80:92:a4:4c:3f:df:f8:
a2:7f:1f:c3:71:68:b1:51:2d:fa:c0:49:75:17:2e:
37:a7:d2:bb:7e:09:83:49:d2:43:57:48:75:fc:82:
76:b6:c3:95:a9:a9:fd:6e:ae:84:c1:43:fa:89:6e:
87:e2:ce:24:0e:ea:45:f8:f8:76:7b:21:e8:65:21:
ac:6b:d1:1a:44:a1:c6:53:1a:01:b9:c4:1b:e6:6e:
cb:87:d9:bc:53:94:1d:1c:99:ff:24:ad:75:9a:6e:
5c:a1:96:fa:bf:97:3e:f6:2f:3e:13:49:9f:1b:fc:
2c:3f:4e:21:eb:7d:65:0d:35:d5:89:21:a2:a2:d3:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:01:A1:56:A7:CB:F1:5B:C5:19:3A:7F:11:99:3C:FE:BF:23:ED
X509v3 Authority Key Identifier:
keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:48:80:35:9f:6e:e0:55:2d:cd:63:54:31:d2:b8:0d:ca:e7:
79:46:b0:21:9b:0b:d7:88:95:af:d3:2e:26:c1:fe:a1:b7:d2:
19:af:ad:a6:85:17:9f:df:2c:e3:84:84:09:61:cf:c6:82:6e:
4c:89:c5:46:54:86:41:e7:72:ec:d9:a9:79:92:a4:c3:1c:f1:
a0:00:c2:72:5b:dc:41:4f:c0:fd:60:b8:a4:70:c3:a9:b4:fb:
50:42:45:d4:f2:0d:85:3f:06:c8:7e:3f:59:34:5e:9a:66:a3:
ef:67:2a:77:e5:01:34:09:c8:74:47:24:e4:19:03:94:99:3c:
bc:54:c8:c0:c9:b6:b2:4d:13:e2:43:68:e1:b1:f7:a4:a2:7e:
b6:7c:42:9e:8a:41:ed:19:b5:b3:c1:1b:7d:6d:2a:6e:29:cc:
1e:2f:9e:18:ce:b6:3b:37:31:06:b1:14:66:14:2e:86:6e:e8:
fa:d9:ea:46:83:6d:98:29:b8:9f:b8:cf:97:99:94:93:ee:63:
83:02:e6:2c:79:cb:48:72:18:6b:db:c1:5f:4f:b3:74:0a:4d:
e1:f7:c7:49:7f:f6:99:63:a4:b5:e7:8d:28:5d:9f:7c:b4:1a:
cd:8a:13:6e:3f:32:07:f5:80:6a:72:a0:f4:d1:1c:e2:cb:19:
1b:95:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 21:05:32 2026 by rpki-client