Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: TxyXuw7gst/Iy+YHJ5E99vYevCccfuJVVZLsKj2wSI8=
Subject key identifier: 04:BD:A9:F2:08:2C:5E:EC:C0:3E:92:98:9F:F0:08:FD:54:F9:10:1B
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 019D38D2F852BB081F1525C8003A83F7E5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 1655
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: EsxGV6HNAZhI_jTvKSDp3GvEjeo.roa (hash: 4ivM9pnea86yeynpy0V6DIdtMIbuYViF3rSNVv2i8Js=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: rbtAWqTGcfJk0d8RDcGUX3b29v1dBR5Ug7cV+qnFkUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f8:52:bb:08:1f:15:25:c8:00:3a:83:f7:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=04bda9f2082c5eecc03e92989ff008fd54f9101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:0b:22:59:a6:5e:90:fc:f3:81:53:b1:88:
ca:57:b3:67:c4:fc:64:80:83:54:9c:06:a3:b0:2c:
b5:19:e8:ae:1a:fa:38:e2:b0:0a:d8:ce:b2:71:41:
bf:9f:ea:81:fb:de:5f:be:04:51:a0:f6:ce:1e:ff:
aa:c4:cf:43:54:79:48:ad:59:93:44:26:c7:07:02:
25:e5:bd:30:dd:c9:66:71:d2:67:d5:69:e1:5e:64:
a1:57:32:75:77:0f:57:6b:51:a0:94:6c:e7:52:9a:
89:40:b1:dc:26:7f:64:bd:27:0f:6d:de:34:de:d9:
84:35:d1:f8:bf:6c:a2:0b:1a:a3:79:8c:46:8b:cc:
5e:ae:e7:ee:e7:56:42:86:13:20:fd:f6:48:a6:76:
38:a5:bc:11:d0:bb:b1:d9:f5:24:a6:d0:24:6d:2a:
6f:5e:cd:b2:6a:da:f4:9c:02:f3:59:8b:12:ca:b1:
eb:87:a8:7c:2c:a8:1b:e2:7b:c9:9e:1c:05:bc:4e:
d8:5c:28:34:cd:75:bc:d2:3e:6b:71:87:c2:34:60:
d9:c0:1b:e6:ec:02:bd:a3:d7:88:7e:72:b7:64:b2:
71:7e:c4:59:19:42:5a:83:13:bc:7a:4a:e2:cb:7c:
63:1a:da:31:15:1f:cb:ca:46:09:9f:71:65:ae:7f:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:A9:F2:08:2C:5E:EC:C0:3E:92:98:9F:F0:08:FD:54:F9:10:1B
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:2b:71:86:a0:ac:40:13:71:93:87:ac:43:6d:06:8c:42:
d9:a3:20:83:af:fb:e0:57:76:29:46:be:7b:04:d1:62:9b:ec:
58:bb:0f:1b:3b:13:fa:62:6b:e8:d9:6e:f8:9d:d4:63:57:94:
c4:41:d6:25:7f:f1:54:8a:6a:ac:a4:aa:e3:c2:e6:58:88:f1:
81:1d:25:2b:28:eb:1e:97:98:51:9f:68:8a:b1:61:6c:1f:b3:
8d:4a:cf:7b:d0:7b:17:18:8a:72:01:87:c1:86:5c:6e:30:96:
ba:de:1e:55:94:2d:10:3e:b0:41:cc:33:04:c9:9e:d0:2d:4a:
fd:40:99:09:14:ee:a3:73:f0:e4:94:52:ec:bc:72:60:1f:9d:
89:18:96:dc:50:62:a8:b6:f5:16:f5:08:89:92:3c:de:be:56:
fc:c2:70:b4:68:b5:69:65:96:2e:db:8f:d4:62:b2:a8:df:f1:
78:32:79:d7:96:d2:3e:e9:c8:f3:b8:30:fc:b8:24:a1:c3:8b:
d8:8e:31:5f:56:68:03:a2:0b:53:66:57:b5:16:37:64:3b:cb:
4a:d4:af:45:83:8d:69:79:f6:92:ba:6b:df:6f:70:7c:68:b0:
56:1d:bd:33:f9:7b:a3:dd:60:20:f8:98:04:96:56:aa:81:f5:
f2:a7:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:16 2026 by rpki-client