
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: euoNfjVchd8/rovA9NhVWog8qAw5hJMqHhxubra7+VY=
Subject key identifier: 80:93:99:FA:8C:D1:AB:C4:8F:0C:FB:CA:79:4C:91:CC:E1:00:B9:71
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019F95805FD064D04E203B99BE8B6364D639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 19:00:46 +0000
Manifest this update: Fri 24 Jul 2026 19:00:46 +0000
Manifest next update: Sat 25 Jul 2026 19:00:46 +0000
Files and hashes: 1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: kt/gj0LbBh1mzSAZeSCed56aYDOIWl5gPpNp03C+9zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:5f:d0:64:d0:4e:20:3b:99:be:8b:63:64:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jul 24 19:00:46 2026 GMT
Not After : Jul 25 19:00:46 2026 GMT
Subject: CN=809399fa8cd1abc48f0cfbca794c91cce100b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:09:1a:33:5d:ce:be:05:04:4d:51:3c:05:
60:ca:da:58:ff:92:69:ec:b0:2a:89:99:12:48:3b:
a4:43:ed:0c:7c:73:ef:88:c7:66:54:e8:44:22:1d:
c0:d5:aa:39:a5:c6:eb:21:2a:61:c1:e0:83:c7:d7:
31:0e:2e:49:5c:5e:d1:a7:48:16:94:31:c3:40:bd:
5e:21:33:a1:fc:a2:fd:e7:c4:d9:cc:b4:b8:9b:c7:
f7:e4:9b:24:a6:ab:2c:5a:70:94:1a:24:c2:fd:cb:
ba:75:5f:05:21:1a:e9:8a:d4:31:a9:2d:30:37:0f:
ec:6f:91:aa:d1:87:b7:ed:3a:8d:bb:9a:fa:65:59:
1a:b2:36:ff:b1:30:f9:35:48:92:4b:45:38:c9:10:
58:44:2f:bb:94:3c:f2:20:8c:dd:e6:ff:50:03:4d:
bd:0d:28:7f:a6:b4:79:2b:93:a0:34:64:69:22:40:
00:42:5a:e2:a0:c9:8f:0d:cb:00:87:b6:87:ad:38:
af:b1:59:ae:fd:0d:e0:51:0a:d9:1d:87:20:6a:d1:
12:60:de:74:ec:1a:ba:c5:12:2e:0b:51:32:4a:62:
da:e2:67:f3:14:35:b6:2f:4a:c7:55:a2:36:6e:3c:
71:1a:7a:97:06:2c:e6:07:d8:d0:17:57:b2:2c:9a:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:93:99:FA:8C:D1:AB:C4:8F:0C:FB:CA:79:4C:91:CC:E1:00:B9:71
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:27:25:fc:27:41:82:55:a2:26:fb:d6:bd:03:5e:18:d8:
32:43:52:3a:37:b0:c8:86:b0:ab:cf:fa:86:bd:6d:70:da:22:
f7:14:df:8e:76:a7:5f:05:37:12:5a:45:01:c1:e0:6d:3c:f4:
a6:52:b7:93:4a:d4:4c:8c:99:6d:a0:f1:01:13:19:1e:10:70:
34:cc:a8:fc:cd:dd:ab:2b:ca:70:c9:f2:dc:8d:b7:63:60:9d:
42:2f:ba:a9:cb:65:dd:94:fe:29:d2:5b:01:3d:a5:e1:cf:be:
e8:80:b1:03:2a:04:10:70:65:00:ee:d9:f0:15:39:a8:bc:1c:
64:f9:33:19:ee:d2:b6:92:fe:76:70:ac:59:3d:c9:b7:ad:76:
07:d9:c0:3a:95:18:bb:ad:c7:96:49:4d:81:41:05:c6:a2:7b:
cf:87:74:05:e2:08:db:b6:9c:25:07:d3:8e:cd:02:ab:38:2b:
ed:f8:80:43:e2:e0:b4:40:c3:79:91:45:c7:f6:3a:41:20:08:
de:bf:11:7f:5b:89:a8:c8:29:bf:8f:5c:b8:99:9c:b2:76:02:
50:37:2f:dd:16:b5:71:69:f3:98:6d:1a:ae:7b:ab:a6:0c:58:
f9:dc:f7:9b:f2:13:6e:32:97:2e:00:84:a5:6e:83:f4:d6:e1:
ef:fe:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:45:50 2026 by rpki-client