Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: /w//yFcSlNPdi+agYGvNwP8y77maWqacVMUGSvSSOU4=
Subject key identifier: BA:43:15:3B:BB:80:E0:B7:B8:82:BD:44:0F:74:0D:DC:58:56:B9:77
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 019D37C040408C964930282FBB2937AC32CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:39 +0000
Manifest this update: Sun 29 Mar 2026 04:00:39 +0000
Manifest next update: Mon 30 Mar 2026 04:00:39 +0000
Files and hashes: 1: LgGfCw5P6EPS02odz9L5gtFB9CY.roa (hash: TMsWFDEHJPQcP7QFpiFpw7haPOsCTPLSZXPOO1J1hGg=)
2: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: wAolpaTcciL2VKz3B0MjkjxPAYu8ilUCm/kvGAY31NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:40:40:8c:96:49:30:28:2f:bb:29:37:ac:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Mar 29 04:00:39 2026 GMT
Not After : Mar 30 04:00:39 2026 GMT
Subject: CN=ba43153bbb80e0b7b882bd440f740ddc5856b977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:8d:cb:9e:22:c4:7e:07:70:ce:63:83:75:
2f:70:e4:13:8b:18:e2:a9:6c:87:01:7b:28:d6:8f:
c4:7e:4b:08:61:bd:0f:0b:45:96:68:0b:a4:97:19:
f9:ca:da:36:3a:0f:ab:57:fb:d3:f0:c5:3f:49:a4:
27:26:af:79:3d:d9:f2:96:ed:4f:89:57:8e:9d:a6:
b7:fc:ea:b6:2e:ee:a1:ee:c2:19:15:9e:e1:c8:5a:
53:9b:22:77:21:5e:84:00:7c:e9:f1:34:5d:fb:13:
3c:ca:ed:ab:46:25:78:dc:d5:67:9c:d6:d9:4d:99:
f2:75:85:bc:a8:af:34:bc:de:cc:e1:af:b7:77:84:
42:3a:6e:e6:39:a0:ea:47:2f:3e:1a:e0:a1:60:12:
e4:51:13:e0:d8:0b:e7:1f:3d:dc:38:df:ab:c3:31:
bf:0c:db:f0:05:80:31:57:92:0a:76:81:3e:33:c7:
de:1d:28:2e:40:a7:b4:57:2b:4d:4c:16:0e:7a:bf:
d5:85:56:38:4d:60:ba:5f:97:a8:6b:7f:3f:0a:fb:
fe:3c:bc:4c:26:78:8e:43:74:7b:5e:26:40:e2:ed:
01:fd:df:b0:96:75:3a:bd:4d:89:32:65:71:19:bf:
7f:a2:cc:41:1b:93:fc:e1:da:ea:11:d1:c7:c7:e0:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:15:3B:BB:80:E0:B7:B8:82:BD:44:0F:74:0D:DC:58:56:B9:77
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:01:d8:ff:5b:9d:24:f1:f7:41:a6:ea:11:ef:b4:5a:6e:a5:
55:5d:be:9d:e1:35:37:0c:38:65:15:28:1f:29:f4:03:5f:ba:
87:eb:56:1f:02:29:2e:d5:52:13:2c:59:f6:b8:83:69:8c:cf:
49:c0:12:0c:cf:04:4e:bb:3a:6e:81:52:b2:30:ca:88:c5:19:
b1:0a:85:77:da:9a:f9:cb:50:6c:47:6a:ab:cc:3c:a6:10:8f:
cd:54:e3:89:16:83:05:1f:d5:ae:c0:20:18:7a:fe:09:93:39:
e1:7d:25:8e:e9:c5:74:3e:f7:a7:91:25:d1:1d:1e:af:72:fc:
e1:cd:48:11:cb:69:ca:60:0c:43:27:ea:77:05:23:b3:fd:73:
48:7a:68:81:68:20:6a:f8:66:e5:84:d5:46:27:7f:71:ce:4b:
bf:64:81:e7:68:4a:84:4d:13:13:fd:64:d3:60:2c:61:02:ce:
10:3b:d6:30:3e:3f:50:0c:71:76:cc:ee:d7:ac:51:0f:2d:eb:
0d:d8:a5:04:9b:32:9a:8a:5a:28:56:c9:ef:b2:dc:07:07:9c:
0d:e0:d0:b0:a5:bf:f3:c3:dd:cc:b0:bd:b9:c0:70:2b:69:22:
56:95:72:b8:14:c3:3f:34:d5:17:fc:16:31:58:4c:b2:7d:ea:
e1:a4:e1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:13 2026 by rpki-client