Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: 8PHFnI8gHbklgTXxKViZsQj6ZvPHWDM8TJab5lKdhgc=
Subject key identifier: 68:FB:1F:2C:3B:2D:14:AC:37:09:89:AD:8F:79:B7:22:CA:5B:12:FD
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01A0EDAF189B3337DD4C7362725D08BB978C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0C67
Signing time: Tue 29 Sep 2026 15:01:10 +0000
Manifest this update: Tue 29 Sep 2026 15:01:10 +0000
Manifest next update: Wed 30 Sep 2026 15:01:10 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: M0xiLDgW54ss4X1p/+zwfxklp6KPcwDnt0mBiCpldoU=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:18:9b:33:37:dd:4c:73:62:72:5d:08:bb:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Sep 29 15:01:10 2026 GMT
Not After : Sep 30 15:01:10 2026 GMT
Subject: CN=68fb1f2c3b2d14ac370989ad8f79b722ca5b12fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:3b:b8:dd:a3:7a:61:47:9e:2d:22:aa:0c:
97:ee:97:7e:f2:29:b9:58:8a:a2:5f:96:d0:cd:e1:
f4:e9:7f:59:ee:3b:7c:a3:bd:90:f4:17:26:17:97:
0e:af:7d:46:f4:29:73:7c:19:ff:ae:21:f9:db:3c:
4c:c8:f9:6b:c3:c1:7d:ca:60:0f:47:49:4a:fa:b3:
91:75:6a:72:57:45:b8:6b:05:d2:08:a4:6a:76:b4:
6f:cc:88:4f:a3:03:56:8c:a5:2b:60:de:e5:2a:0f:
cf:70:95:83:80:14:a9:cd:1d:a1:94:80:32:6f:aa:
a8:0f:df:5a:2a:ac:28:a4:fe:aa:ce:e5:6e:60:5c:
7a:89:13:f6:2f:eb:fb:f3:3a:0c:c4:f3:ca:56:45:
db:60:2a:86:46:33:02:30:c2:d7:35:2f:d3:96:8e:
2c:94:86:aa:e2:28:7c:81:6a:d0:b8:8a:ed:60:72:
5a:0d:b8:15:3b:90:f1:7d:69:c3:51:d0:60:11:9b:
cd:e4:cd:ab:66:90:ea:1b:17:f6:7c:a9:a5:20:14:
d4:e6:71:f3:3e:ca:a5:1e:c3:b3:40:a9:7d:7f:b5:
05:cc:76:de:f9:8d:31:27:1c:ae:4f:d8:2b:e8:4d:
2b:18:e0:df:da:36:f0:40:37:01:ef:6d:26:0e:7a:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:1F:2C:3B:2D:14:AC:37:09:89:AD:8F:79:B7:22:CA:5B:12:FD
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:83:44:e8:05:42:4f:44:ef:12:22:e4:c9:1e:ff:43:e0:
89:53:7a:75:9c:36:91:b9:33:55:84:5f:b6:a1:cf:f2:04:b7:
e1:e4:3e:fb:6e:15:d5:24:ce:6e:83:fd:39:d1:3d:59:a3:85:
7c:1b:ff:e9:4c:69:2b:50:26:d5:ed:83:3a:31:44:f7:20:7f:
90:e9:35:c8:5a:74:7a:27:b0:b9:37:18:bd:49:8e:af:09:40:
9b:f3:8d:57:03:7a:81:df:03:4e:0f:70:f9:e3:c9:ac:05:9a:
d5:80:50:71:8b:38:19:ae:04:cf:20:ba:25:a0:c8:9f:7a:24:
c4:fe:47:a0:af:1c:b3:cb:a7:b0:65:a1:f6:01:51:c8:7b:76:
44:9b:61:85:c4:ed:54:38:a0:fc:02:a9:a2:44:2f:40:97:40:
e8:ae:d3:4b:c4:be:cc:1a:eb:70:4c:7b:2f:4e:c1:9e:85:8f:
4e:a2:6f:b5:28:2c:87:0f:a8:d1:f1:d0:28:77:c6:2d:0f:95:
7f:d3:9e:ba:23:63:5f:36:a6:0f:91:c7:eb:94:fa:fa:e2:66:
ae:af:56:eb:1f:61:bd:b5:59:f3:96:36:fb:91:c4:a2:f0:3d:
b0:4c:d0:e6:8f:86:76:ef:c3:3f:bd:dc:44:da:12:ef:8e:5f:
ce:ed:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:47:15 2026 by rpki-client