Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: tFd43SsWn3CfmVILvv2slOrZw35K8sJOhdX2QyEV0SQ=
Subject key identifier: 44:36:44:58:1E:86:12:EC:3C:F3:E8:7B:C1:69:D0:3A:E8:5C:FD:79
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019E2B4C71CBCF05E544DA0A1174257BFD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 1914
Signing time: Fri 15 May 2026 11:01:30 +0000
Manifest this update: Fri 15 May 2026 11:01:30 +0000
Manifest next update: Sat 16 May 2026 11:01:30 +0000
Files and hashes: 1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: i4NYLfU+GS7cE9RfYZQ3ztE4uWcMroeogZiUvli9Jew=)
7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:71:cb:cf:05:e5:44:da:0a:11:74:25:7b:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: May 15 11:01:30 2026 GMT
Not After : May 16 11:01:30 2026 GMT
Subject: CN=443644581e8612ec3cf3e87bc169d03ae85cfd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:d4:e7:75:4c:8a:07:ec:68:c7:bd:3f:eb:
f6:42:d2:81:4f:2a:28:f9:87:f0:b7:4d:ed:a3:a1:
29:68:85:64:dd:e1:02:b8:f8:72:12:f3:10:19:7e:
db:c5:91:44:36:fd:9c:4f:32:59:1c:85:04:b4:b1:
31:98:44:f3:6d:9a:a8:b2:6f:ee:dd:3d:c1:f8:1e:
84:02:ff:7c:86:57:d8:68:8b:a3:90:8d:66:a8:c8:
b3:39:02:25:87:93:f2:76:00:7c:47:5b:92:b8:d8:
fb:19:65:3d:c7:8a:df:99:45:30:be:8b:30:01:4a:
89:42:08:c3:6a:b1:06:be:e0:df:ce:d4:82:9f:2b:
65:c2:5a:da:0c:64:8b:eb:c9:cd:24:fb:84:ab:16:
98:d8:61:d7:84:d9:76:7f:81:2a:03:08:ba:32:24:
37:8b:ed:d2:02:e4:c0:7e:7d:ec:41:1b:e6:1c:a2:
dc:2a:d3:77:ba:90:7f:92:b8:01:9e:b7:c2:e9:80:
8e:83:26:eb:c9:3f:3e:25:e0:b8:48:b1:5b:ac:4a:
91:c3:f0:92:17:af:ee:04:55:35:12:b7:22:b3:a1:
ea:a9:ac:73:a1:bc:c4:4e:36:d1:a3:fa:64:74:b0:
6f:95:32:8f:0a:3e:51:af:f8:26:2e:d7:00:5c:af:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:36:44:58:1E:86:12:EC:3C:F3:E8:7B:C1:69:D0:3A:E8:5C:FD:79
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:55:1c:10:22:b6:4b:91:9a:36:2c:68:d0:0f:ef:2b:49:1c:
0a:bf:a8:e4:e7:b0:aa:f6:05:81:51:49:ff:28:1b:58:78:05:
d1:c3:2c:e0:a4:5a:c2:c0:f0:00:29:c6:10:68:76:45:3e:65:
0f:f2:fc:46:24:b4:8e:2a:52:52:52:c3:a5:0e:5e:ba:9a:30:
fb:3d:75:c7:6d:a0:f0:ae:90:2c:a0:e2:7c:e1:93:6d:4e:31:
75:9f:fb:37:af:c7:70:8b:02:7d:7d:86:b2:92:11:dd:13:f3:
7d:f5:f7:a0:d6:5a:92:30:a4:2e:01:21:d7:dd:b1:6b:13:ce:
4f:73:ae:32:ad:8a:05:17:50:93:80:6b:22:91:43:e4:05:85:
0e:f1:28:55:cd:df:d0:ae:3e:34:95:51:81:6b:69:56:fb:f5:
e8:54:ea:af:ae:be:05:e8:b0:13:6a:d2:da:37:36:eb:f3:01:
c4:37:85:c6:d1:cb:21:ce:86:a7:26:87:f6:54:b2:a6:85:5e:
b1:78:7d:9e:94:a1:31:0d:14:65:c7:01:d3:8e:3d:9b:2e:cc:
8e:2b:a1:75:40:88:2b:ed:7b:47:3c:11:50:e1:8c:f5:4c:f6:
47:65:46:c4:27:33:7a:5d:37:7a:b1:98:53:54:ac:1b:ec:24:
80:71:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:00:11 2026 by rpki-client