Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
File: tqSX68eR3kMxUAM94t2_pIYQw1c.mft (raw, json)
Hash identifier: lgfu3c0j2qCvIV1xHwA6/yDrEYc37km5xiJfKZwZ4B8=
Subject key identifier: A4:17:D4:52:E9:F2:69:F1:B3:76:6F:DC:4F:91:AD:F1:5E:C0:B5:1E
Authority key identifier: B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
Certificate issuer: /CN=b6a497ebc791de433150033de2ddbfa48610c357
Certificate serial: 019DD98B1B582655C703F333BBB835037A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
Manifest number: A9
Signing time: Wed 29 Apr 2026 14:01:05 +0000
Manifest this update: Wed 29 Apr 2026 14:01:05 +0000
Manifest next update: Thu 30 Apr 2026 14:01:05 +0000
Files and hashes: 1: 94Ul-dlVcZRF2dJCBpIs9n3-IPM.roa (hash: sLcPFuMyvVZeg7LZhaj49iRvaozRs1nQsDsfofbM+sY=)
2: tqSX68eR3kMxUAM94t2_pIYQw1c.crl (hash: 3Pq2mAC81eh1Y+IC8BzNEjhabEF6MdoHA1zMlysq68A=)
3: yeXO6d_hDGwDTU8gNvoJJZMUTn4.roa (hash: srZlOieR12XLOm0zOck7ernWu9ns50OJOZK6R4SGFFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:8b:1b:58:26:55:c7:03:f3:33:bb:b8:35:03:7a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a497ebc791de433150033de2ddbfa48610c357
Validity
Not Before: Apr 29 14:01:05 2026 GMT
Not After : Apr 30 14:01:05 2026 GMT
Subject: CN=a417d452e9f269f1b3766fdc4f91adf15ec0b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:72:99:11:e8:c6:32:55:1c:2c:86:2a:4a:
4e:0b:5c:d9:1e:80:a3:f6:db:ea:0c:fb:86:ee:19:
c9:07:02:72:7b:c9:18:39:56:c6:cb:cc:21:af:b6:
45:75:27:40:62:75:c5:32:58:74:45:26:7a:64:7e:
63:cf:0e:2e:c1:9e:84:9b:d4:b2:93:27:48:a6:55:
9f:45:b5:86:cf:b2:0f:69:7e:59:7f:61:cd:e4:bb:
e9:e4:a1:fb:88:57:56:c6:d8:3d:67:c9:f4:cb:1e:
d8:ab:4d:e8:41:be:2e:c5:07:c0:16:f4:6a:bb:37:
f2:23:9b:54:8d:7f:26:9e:76:72:d3:6e:1b:a3:af:
85:70:a1:d4:9c:18:e0:62:46:d5:55:01:6a:92:1c:
ea:a9:e0:a1:c7:fb:8a:23:73:9c:9a:e1:e7:f2:c5:
d1:61:00:8f:bc:94:6c:04:91:7f:66:ed:5a:89:7a:
98:9c:63:93:c3:d9:6f:96:4a:86:53:96:be:94:8f:
74:67:dc:21:18:4c:3b:d3:4f:68:fa:0c:50:11:74:
df:35:f2:e4:1f:46:7a:fd:f9:60:a3:8d:e0:d4:79:
5c:f0:59:de:8e:0e:c0:d2:54:b6:26:cf:8c:99:6c:
fd:96:fc:52:67:2f:2c:e8:eb:7f:31:82:db:f4:3d:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:D4:52:E9:F2:69:F1:B3:76:6F:DC:4F:91:AD:F1:5E:C0:B5:1E
X509v3 Authority Key Identifier:
keyid:B6:A4:97:EB:C7:91:DE:43:31:50:03:3D:E2:DD:BF:A4:86:10:C3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqSX68eR3kMxUAM94t2_pIYQw1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ce1491-d923-46ea-a2f1-51be2fcd5c8d/1/tqSX68eR3kMxUAM94t2_pIYQw1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:50:35:4a:c0:6c:15:1d:0b:ae:07:42:9f:cd:05:ae:5e:
34:b7:76:47:89:67:a9:cd:0c:d7:84:14:be:16:58:07:aa:92:
1a:23:64:46:58:6b:f7:32:f3:48:f4:58:0b:e7:b6:6e:5d:e6:
e1:c5:00:b7:d5:fc:5f:c3:bd:d3:45:60:51:76:cb:16:1c:59:
11:12:d2:c5:48:71:4c:9a:b3:49:06:87:f1:2d:83:1a:d4:3f:
4d:2b:a8:da:57:fb:66:a2:e6:85:76:6b:b6:b9:77:2a:94:79:
06:56:33:23:ac:72:9c:9c:11:63:9f:f3:57:a4:38:b3:93:58:
9c:4c:5c:a6:a2:03:0e:26:f3:45:e8:c9:9a:11:c5:f6:9a:d8:
f1:c4:2a:8d:c6:0b:54:30:09:cb:0a:d9:7e:c8:4b:f8:4e:94:
2f:33:c5:2c:3c:21:86:19:10:e7:d0:e6:86:e8:c1:d4:57:02:
96:82:7b:0a:d2:8e:26:d3:c1:ba:a9:18:ec:09:0d:7c:1d:de:
55:bf:e5:cb:2e:f0:87:c7:75:91:51:6d:f6:28:e2:1c:d8:05:
ce:04:21:7c:cb:b2:77:ec:00:92:17:64:8b:ab:90:05:27:c9:
1f:3e:86:35:ed:81:62:4f:38:83:34:ad:e7:21:2a:8f:00:db:
94:8b:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:16:06 2026 by rpki-client