Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft (raw, json)
Hash identifier: VPDJ57gQs32vUEHR6aG5gR/el/eh0VRmQGoZXmXWLNs=
Subject key identifier: 1E:4F:77:BD:F5:C6:67:FF:1F:04:A1:B7:1A:4F:AE:96:64:1F:59:74
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 019D37F79229119FD3BBA3522FE7F9E2AD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
Manifest number: 0FEB
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: 5shtjSwYY1wV6rWlUfcIKGn6yqo.roa (hash: VOmUNnvEDlqDrfQ2raf9GqtN9WB6Ae56gIOAstRWDXQ=)
2: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl (hash: OkZxqMZi8lpL9wdKV6XpHXnc8Nog8CMkONLXVjXBQ+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:92:29:11:9f:d3:bb:a3:52:2f:e7:f9:e2:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=1e4f77bdf5c667ff1f04a1b71a4fae96641f5974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:e4:c5:4c:dc:ab:c7:6b:85:24:16:0f:00:
05:93:0c:53:89:c9:0a:cc:ae:c2:63:ff:c1:75:f1:
f2:d4:75:4e:a6:e1:a2:99:60:f1:39:71:0a:97:d1:
82:4a:fd:03:4c:22:c3:d9:e4:cf:aa:5f:e4:6e:68:
86:79:43:70:e1:c2:25:a4:32:85:e6:ce:dc:32:a5:
f6:e8:6f:ba:e1:ce:4d:19:63:5f:36:32:f2:c2:1c:
1a:9d:62:e6:95:a8:ff:22:a0:4f:49:81:98:6a:5d:
d1:18:3c:9a:f2:a8:68:46:d4:30:06:3b:1d:48:50:
d3:c7:15:20:c8:92:84:61:55:b6:63:24:18:d7:52:
7f:6c:11:e5:3d:cd:c5:7a:03:47:8b:b3:31:33:fc:
d2:a2:7e:3e:c1:36:7e:2d:8d:7c:0c:08:1c:21:cb:
2e:9d:b2:ee:7e:cc:bd:5c:49:a8:e2:27:a6:ba:9e:
9e:d7:b4:6d:51:32:64:da:f3:a2:d9:aa:bd:60:30:
b3:47:4b:7b:68:91:f6:dc:c1:c4:c0:b0:9b:57:ab:
78:28:0f:d3:37:f6:b7:58:47:fd:7c:e9:d2:35:ea:
35:9c:c0:38:b6:93:4e:83:c8:d7:6d:c7:a1:de:c8:
5b:81:49:10:2f:52:72:d2:46:f5:31:3e:7d:da:10:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4F:77:BD:F5:C6:67:FF:1F:04:A1:B7:1A:4F:AE:96:64:1F:59:74
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:69:2f:fd:16:54:bc:ad:c7:83:c2:07:8a:f0:3d:ce:b8:
c4:51:56:d1:98:5c:74:71:50:65:f0:5f:f1:78:4a:0e:1a:be:
ab:a5:7e:fe:03:7a:f8:0a:01:0d:f8:f4:38:b7:82:ae:92:b9:
f8:7f:03:ab:74:6e:ae:84:b9:c6:54:03:f3:ae:48:24:4d:05:
ef:ad:aa:16:9e:39:dc:50:61:2e:b4:01:06:5b:2b:5a:39:c3:
73:99:8d:d9:8c:8b:6c:03:38:84:57:68:b1:1c:83:0d:55:6a:
37:08:0f:ba:2b:43:47:5e:1e:77:54:ab:82:8e:af:14:0d:45:
0b:7f:dd:08:2d:17:4e:84:21:3a:57:4c:42:0e:24:8d:ee:92:
e4:3d:8f:4a:10:36:4d:35:16:e2:91:1c:6f:ea:98:ce:fd:07:
fc:01:4f:c1:69:e5:85:1a:aa:a8:24:22:a3:fb:cd:26:6a:d3:
6a:15:cf:f9:6f:0f:dd:54:80:e7:56:dd:6b:ea:94:5a:24:4a:
e4:4f:36:6c:f8:ca:69:39:ca:5e:3b:db:d2:1c:bb:7b:e1:7a:
b6:84:10:05:4d:f7:6c:1f:72:ea:a8:08:7f:bc:2c:84:df:65:
42:38:2a:01:ae:ce:c1:67:98:2e:6b:22:16:a6:5c:37:64:93:
2a:27:a0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client