Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: IRiF7JmxL2Sc1ntSZ7Xxf8p9jszxofomGQ+Pbuny8L4=
Subject key identifier: B2:9F:66:85:A7:C3:91:F8:FE:12:EA:AF:CA:47:40:D9:6F:4C:E8:BD
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019D389BFA22B188AE58FD3943B8F11D796C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 1630
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: jnIp51smAd2xFUIMrnRfMQ3GAZHyTJ6s/UggJbEd7Is=)
2: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (hash: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fa:22:b1:88:ae:58:fd:39:43:b8:f1:1d:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=b29f6685a7c391f8fe12eaafca4740d96f4ce8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:18:e0:d2:10:68:58:50:59:b6:5c:ba:10:
db:9a:c4:3b:35:ef:2f:c2:52:d4:73:32:3f:78:13:
c2:7a:ca:df:04:be:71:35:60:09:eb:12:6c:65:b3:
fb:fb:16:5c:a9:bf:6a:6c:02:9b:c3:c1:a1:3c:7a:
e5:b4:9e:64:28:fb:f8:68:3c:af:8c:0f:a5:11:33:
58:80:99:4e:1a:15:da:bc:4c:82:d2:20:5a:ee:34:
0c:e9:4b:07:10:f9:1c:b2:16:8a:6a:f5:d3:7f:ee:
f5:1e:2c:fd:d5:b2:b0:43:00:69:32:f1:6e:e5:9d:
c1:6f:2a:20:b2:96:47:b0:11:52:87:0d:63:d9:7b:
03:5c:5d:d9:7c:5f:c5:50:9d:df:7a:e2:7d:66:5f:
1f:7c:f0:17:1b:e0:46:82:94:60:a4:e7:0a:e6:da:
7e:fb:fa:9e:b5:6b:7d:4d:41:de:b6:33:41:2f:59:
44:ce:48:b0:86:39:d3:9f:ae:e7:39:69:d1:96:18:
4d:f6:e2:3b:45:d5:fc:ef:13:40:c5:fe:30:1a:dc:
bd:78:54:71:53:f7:b4:d1:49:a4:06:5f:c8:e3:33:
7f:aa:63:ae:4b:9f:97:ec:78:c0:06:77:6b:38:fd:
7e:6e:04:0a:1d:97:e4:4b:d3:f8:74:c4:fb:18:85:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:66:85:A7:C3:91:F8:FE:12:EA:AF:CA:47:40:D9:6F:4C:E8:BD
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:98:b0:83:1f:5a:7e:b8:5f:20:6d:65:b7:9a:73:23:57:42:
32:ca:97:24:3f:f8:b3:b2:8f:5f:0a:4f:e3:ec:86:02:77:c2:
9e:1a:cd:d2:6f:cb:98:a0:5b:f3:95:64:28:b4:62:bc:67:6a:
3e:ae:1a:a9:7f:09:3b:e6:89:f2:1d:0a:50:45:b8:e7:af:28:
0d:d5:55:42:2a:14:8f:21:ca:5a:12:13:9b:2d:8e:bb:8d:33:
76:75:b8:b2:a6:3b:48:37:3e:18:6f:c8:42:c0:2b:17:fa:93:
e8:3e:20:e1:64:3a:a6:78:cf:1d:1a:4a:04:d8:2f:df:7e:b3:
83:d2:29:c7:51:61:4b:ce:e7:39:44:4e:01:ce:e0:0e:9c:78:
c3:ed:ce:e6:f6:61:f4:0f:35:5c:cf:2e:f3:a5:dd:31:cd:f6:
57:dd:76:12:fe:43:63:91:0e:bc:a1:80:74:d9:a6:d5:eb:7b:
82:f4:72:32:35:d3:26:d3:99:72:c5:8d:07:44:78:ee:a6:ad:
03:2d:e9:0f:f6:b5:66:cb:2a:dc:3f:b9:59:9f:ab:69:1c:cb:
b8:c3:73:e9:6d:cd:5a:ec:a9:93:6f:4d:5d:0d:8b:24:66:d2:
d5:57:7a:e7:63:51:1a:b6:1d:8d:56:77:73:33:2c:00:46:68:
39:bf:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:06 2026 by rpki-client