Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: iZtROsZQzTe/y5CvulvI2VCsXqTFzK78KtabuB3pvH4=
Subject key identifier: B7:89:C2:AD:63:53:BF:58:D1:22:D1:72:26:7E:FA:32:ED:3E:63:09
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019D3A1CEE48A27CADF7B9CABFF78222452D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 0AC0
Signing time: Sun 29 Mar 2026 15:01:07 +0000
Manifest this update: Sun 29 Mar 2026 15:01:07 +0000
Manifest next update: Mon 30 Mar 2026 15:01:07 +0000
Files and hashes: 1: 0UGDI8RA4ikQpQTFcofCBOI7pok.roa (hash: 0Yi/SCqGm10A/qaehmQPolk2SyxaZrDlQqK63HLj7qA=)
2: lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa (hash: r9UOMYxpKdYi63IObP/C5aZuW6pYv6q+dCCfoqFrtSU=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: elfCDCXXnuqBPIWp0P/XObyAkTtOALog2sbFfPbAHic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ee:48:a2:7c:ad:f7:b9:ca:bf:f7:82:22:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Mar 29 15:01:07 2026 GMT
Not After : Mar 30 15:01:07 2026 GMT
Subject: CN=b789c2ad6353bf58d122d172267efa32ed3e6309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:ee:39:0c:50:67:29:3d:29:68:a6:8c:9d:
89:7d:9f:b6:8f:6e:1c:3d:00:34:a7:52:d8:51:3a:
68:8b:ec:82:df:d0:81:d2:fc:de:48:af:22:b0:04:
b0:69:ff:d5:52:7c:bd:1b:e2:a8:ce:b7:53:89:86:
0a:0d:de:fe:97:75:cf:79:3c:6d:1e:1f:54:12:fe:
05:3e:fc:8c:bc:84:66:d0:6b:f8:74:c1:0a:df:9b:
51:7f:d6:46:e9:c5:15:ec:d1:24:5b:a1:ef:d8:13:
be:a8:64:55:04:97:5d:d8:ce:9b:ce:98:97:d5:3f:
43:be:3b:52:04:c3:82:3c:d8:ee:31:37:c7:c0:4d:
36:c6:a6:30:cf:0f:5a:64:c6:d8:c1:c5:94:34:87:
e0:40:f2:3a:e2:27:07:ef:12:ee:a2:d3:1e:a5:bc:
9c:b2:22:60:f3:48:d5:c2:98:de:63:07:4c:41:f9:
27:df:ff:30:47:88:6e:15:97:b1:aa:5a:1c:d2:31:
52:57:e8:60:d0:80:c5:86:ce:99:8b:03:7d:a1:9f:
0f:0a:5c:b6:3f:b1:f7:e2:1a:e7:7b:28:a1:71:90:
f7:ad:fe:7b:df:7b:b8:18:5e:20:52:9d:15:ac:37:
ae:6a:a0:a6:cb:9d:b2:35:e3:7e:24:80:32:67:12:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:C2:AD:63:53:BF:58:D1:22:D1:72:26:7E:FA:32:ED:3E:63:09
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:1c:0d:ff:6b:46:75:a0:ce:6e:2e:63:e3:fd:3c:5a:e7:
52:4e:d7:50:56:51:1a:a4:f2:bf:f2:44:6e:13:39:26:5e:76:
ef:20:8f:63:96:9d:5b:7d:85:fc:74:aa:c2:de:08:e8:ed:6a:
78:c5:6a:ba:90:57:cd:3f:75:f9:bf:3d:2c:3a:36:4e:18:0a:
d1:ab:6d:18:18:03:4e:fb:c4:d6:c1:95:72:98:af:f5:51:eb:
16:27:de:a2:da:5b:55:9e:a1:aa:6b:b2:24:49:09:03:44:2f:
82:0b:76:0f:e6:28:2e:a2:33:24:2b:c9:41:82:30:9c:fe:63:
44:d2:be:29:65:45:ff:7d:44:2f:a8:22:99:62:d7:c0:08:ad:
9a:fb:4a:3a:d9:fb:db:9e:04:13:00:19:93:7a:80:7c:62:d3:
46:71:94:03:24:fc:38:96:0a:fc:4d:19:3a:32:2e:00:32:40:
ee:a7:1d:b3:cc:0f:94:10:e0:17:4e:fa:be:f4:13:8e:22:ce:
65:c7:4e:1f:43:bc:db:93:7c:3e:cd:52:0b:24:54:3a:e4:e9:
4d:a4:5b:8d:15:6b:3a:dc:d5:e0:a4:3d:b5:49:a9:aa:54:51:
3e:f2:57:f4:d5:f8:e3:08:be:e6:79:92:d9:79:f6:81:4e:b4:
4b:bc:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:57 2026 by rpki-client