Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: Dc9Uwp0rsneSkNRSjZsK17Eqrq/rjBVkSuOJmOCZJZQ=
Subject key identifier: 1A:3D:06:79:83:0C:C3:FD:A6:12:0A:CE:A0:5C:D6:13:CE:8B:64:DA
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 01A174DDDE355652CFE837CF5AFC8F479A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 21:00:59 +0000
Manifest this update: Sun 25 Oct 2026 21:00:59 +0000
Manifest next update: Mon 26 Oct 2026 21:00:59 +0000
Files and hashes: 1: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (hash: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=)
2: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
3: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
4: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: VFpxnw5rKm7j6cD+oXlAWC+/e+FLYpR8iRRmaSYk5cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:de:35:56:52:cf:e8:37:cf:5a:fc:8f:47:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Oct 25 21:00:59 2026 GMT
Not After : Oct 26 21:00:59 2026 GMT
Subject: CN=1a3d0679830cc3fda6120acea05cd613ce8b64da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:6f:78:24:5d:24:36:f0:9c:ba:c7:f5:8b:
32:c6:8a:fd:e3:3e:b0:5e:d6:d9:fb:ff:0a:5e:91:
12:14:8f:54:75:16:05:b1:b2:8c:b8:ea:bc:da:3f:
6b:75:f5:15:0f:5e:f0:24:39:5b:39:f6:24:10:fd:
73:0f:07:80:ba:f3:22:21:84:f8:64:88:be:6e:6f:
82:b4:c7:1e:ce:c8:be:e1:87:05:cc:ea:be:7c:68:
81:93:6f:2c:04:0b:33:ed:30:04:b3:12:c4:3c:34:
74:d9:8b:2b:f9:32:f6:c4:03:4c:be:17:ed:a3:72:
2b:1a:ea:a6:96:27:8f:26:a0:90:35:ec:5d:ca:9a:
af:aa:f6:ea:f7:1b:6a:81:1d:0a:2a:a3:f9:8f:3e:
83:35:a5:b7:4d:41:88:42:77:c9:fa:40:09:f1:2e:
68:46:08:0a:8f:eb:36:78:1e:f0:f1:69:bb:5d:e8:
53:30:68:4a:ce:6e:04:d7:a0:17:72:4e:46:87:10:
cb:f4:33:c9:83:f2:99:e5:46:59:03:c4:51:e1:f9:
b0:cf:30:32:bf:54:7a:71:78:ae:df:99:8c:37:95:
47:d5:2a:a4:59:83:3d:42:07:86:de:34:e7:77:79:
0d:c8:ce:f5:40:33:54:34:61:a6:2b:8b:f3:5e:43:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:06:79:83:0C:C3:FD:A6:12:0A:CE:A0:5C:D6:13:CE:8B:64:DA
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:4b:79:a5:04:5c:d5:8a:5b:4f:47:a5:f9:3a:ec:ca:ca:
08:f5:cb:49:1b:d5:78:5d:78:a0:c6:34:70:8f:aa:c0:db:f5:
cf:68:37:d7:41:57:f6:11:21:38:f4:b6:c1:47:24:a9:a7:a8:
74:87:a7:db:d0:d9:24:3d:0f:e8:34:b2:90:57:35:9c:05:5c:
e4:e5:f5:f6:eb:90:de:2b:0f:6a:71:b8:70:62:10:96:fd:25:
36:73:bb:8a:47:14:34:7d:82:45:29:07:6b:00:bd:4e:dc:27:
b4:67:35:2a:2b:16:0e:05:e0:c8:df:e3:dd:25:38:3a:8e:e9:
31:59:ac:56:63:d7:90:66:78:06:f5:d1:a1:5d:5f:9f:86:6a:
bd:c3:ff:f1:01:4d:89:dc:a0:2b:a8:1c:d5:4c:08:e3:d1:ce:
18:ff:ab:e3:89:88:93:67:8a:cb:ca:84:56:89:24:55:21:de:
48:94:25:2f:80:8e:32:31:d4:3b:d9:2e:d6:0c:0e:2a:0f:0a:
42:57:75:2c:df:6b:f7:19:2e:ff:3c:2e:f4:a4:10:3f:53:e4:
84:e0:1e:59:d4:3a:a4:2e:93:48:01:73:03:c7:36:fc:fa:6f:
34:94:e1:7c:29:38:8b:1e:01:d8:be:da:85:7c:2d:20:9c:0a:
62:04:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:45 2026 by rpki-client