Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: 5R9GO9SOWUn6cE5S3f5D9L2jHGoAe/MOBsul/ZLKh/A=
Subject key identifier: 32:7B:20:6D:EC:93:3A:9A:35:6F:03:E5:6C:45:AB:E5:AE:32:60:1A
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 019D3752E387144BD22032C4134652557222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 02:01:12 +0000
Manifest this update: Sun 29 Mar 2026 02:01:12 +0000
Manifest next update: Mon 30 Mar 2026 02:01:12 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: bF8ZRK7QKgX9qn9p/feNmLhU+bI+DHIb0lqHOiqjnPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e3:87:14:4b:d2:20:32:c4:13:46:52:55:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Mar 29 02:01:12 2026 GMT
Not After : Mar 30 02:01:12 2026 GMT
Subject: CN=327b206dec933a9a356f03e56c45abe5ae32601a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:82:c6:cd:74:fc:bd:9a:c1:5a:e8:f2:d2:
cf:ab:4d:20:cf:9d:10:01:6b:6c:c7:be:3d:36:02:
d5:e8:d3:dd:a4:26:a2:29:46:87:64:e6:d2:86:41:
e6:a6:71:dd:b5:2e:eb:51:44:f3:ef:ff:34:8f:b8:
dc:1e:f1:b6:b2:93:8f:c9:d0:30:4b:f6:63:7b:24:
30:2f:7b:0b:f0:48:eb:07:8c:a8:6f:62:be:40:12:
0b:df:43:e2:85:63:91:70:fe:a6:e9:7b:e2:aa:c0:
21:32:25:ea:6c:e0:89:73:d0:c1:f5:a0:dd:6e:11:
7f:93:4c:fc:53:d9:04:72:dc:a3:81:3c:d6:3d:75:
41:c2:7e:56:82:26:5e:c6:0a:79:42:44:96:d5:eb:
06:49:ae:0f:62:48:ef:69:f5:15:40:60:5d:fe:9d:
25:73:57:bd:be:98:bb:ee:3d:42:18:c3:6f:f9:78:
f9:0a:d2:5e:27:02:7d:f1:40:d4:02:65:a1:79:d8:
07:6b:34:42:33:10:29:02:4f:e5:e6:ed:b5:f5:10:
68:a5:e7:e7:7f:eb:a9:aa:ff:92:6b:53:ba:9d:c9:
75:a2:0c:b9:c1:30:9b:f4:7d:86:95:57:b8:d9:fa:
6e:ec:60:06:dc:72:af:ae:14:6c:9b:dd:2e:cf:ce:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:20:6D:EC:93:3A:9A:35:6F:03:E5:6C:45:AB:E5:AE:32:60:1A
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:68:49:84:cf:e0:d4:8f:6e:8e:e2:4b:5f:5b:a7:c6:b5:c7:
fe:44:2b:cf:8b:9c:6f:79:1e:d7:0d:4e:1e:c4:4b:04:a2:07:
2b:26:15:2e:dd:f6:8d:f3:a1:24:02:a8:26:88:b3:10:a9:77:
0e:95:b7:75:5c:18:51:01:c7:52:cc:6c:81:47:f0:88:b6:97:
11:e8:c6:b1:8e:de:95:17:df:92:f9:69:d1:17:64:3e:da:17:
8d:2c:76:40:3c:93:38:e9:f6:b0:d2:3e:3b:34:34:0e:8c:27:
f4:30:a4:5d:c7:21:35:c6:da:72:85:4c:f6:69:a6:70:d1:a6:
8b:6d:26:00:94:d6:62:88:8f:4d:28:1f:97:d5:23:5e:53:ec:
df:19:cd:a5:99:af:67:fe:c5:b2:ac:15:42:34:c1:c4:d2:e6:
56:99:f4:60:11:ae:1f:72:c2:6b:08:60:96:01:cb:46:0f:9d:
3f:68:06:d6:c9:df:1d:e2:c5:9f:e6:47:86:cb:b4:0b:8a:f8:
b0:92:cf:13:5b:fd:db:26:a0:56:db:ab:37:01:2e:4f:70:7c:
ad:71:26:6a:4f:80:3e:45:e0:fb:d1:42:07:29:1c:63:32:f2:
f2:7f:3f:fc:5c:6c:3e:a3:91:bc:9d:e6:0c:70:cd:22:bf:c0:
bc:c9:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:43 2026 by rpki-client