Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: ryuwVavqtzMO7m3j9s+5vvfMS6DprHbd08QMQMNyvKQ=
Subject key identifier: A2:86:57:48:61:97:5A:C2:33:8D:91:73:B7:27:90:9B:02:22:29:2B
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019D9A0706CD1A0FC3572B54323E4A371139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0AAE
Signing time: Fri 17 Apr 2026 06:00:44 +0000
Manifest this update: Fri 17 Apr 2026 06:00:44 +0000
Manifest next update: Sat 18 Apr 2026 06:00:44 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: Y7zQmqdFFe+eel/K7yOUWHMSb9ZhkAZXq1i1e3+ufw0=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:06:cd:1a:0f:c3:57:2b:54:32:3e:4a:37:11:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Apr 17 06:00:44 2026 GMT
Not After : Apr 18 06:00:44 2026 GMT
Subject: CN=a286574861975ac2338d9173b727909b0222292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:37:db:c7:0b:8d:63:f2:29:03:df:5e:a3:
15:3c:5d:27:b8:e6:9d:c3:f1:19:fb:3a:e1:b4:91:
3a:31:85:4c:c9:3d:bf:a6:7f:92:d6:c5:3d:a9:21:
c6:6d:06:92:42:17:af:71:f6:f0:e0:8d:d0:56:35:
05:54:80:1b:af:77:ff:24:90:87:15:11:30:4a:e7:
82:d6:6f:fa:94:bb:1a:94:a6:dc:42:ab:3d:ff:c8:
64:12:b8:cd:5b:eb:87:34:86:a9:f2:a0:1b:6c:b5:
04:b7:86:b0:06:90:a2:c2:aa:aa:1b:11:38:f8:c4:
e0:04:aa:79:0f:47:b7:af:ad:f8:79:ce:f1:13:98:
17:58:4f:b7:2f:2b:4e:3d:f9:22:08:92:ba:fe:1e:
a2:3f:18:76:82:32:f6:66:46:fd:cb:58:06:3b:55:
47:2f:b7:38:ea:39:55:fa:e9:38:a1:91:49:f6:5e:
1b:bd:3e:90:6d:e6:aa:55:ce:87:9d:7d:3f:2e:ab:
09:bb:01:1c:2e:67:a3:c1:db:77:cc:5c:a5:73:67:
50:83:f8:6c:6f:bb:f8:17:6e:7e:59:cd:0b:f9:b0:
46:fa:b6:6f:8e:ef:61:81:1d:53:a1:d7:1f:76:04:
d4:85:6c:22:c1:8a:fc:b6:24:5d:30:6d:99:45:fc:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:57:48:61:97:5A:C2:33:8D:91:73:B7:27:90:9B:02:22:29:2B
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:cc:a0:01:e6:23:2c:27:02:f2:9a:10:d1:de:08:b5:1c:
2c:6e:0b:15:d3:13:dc:dc:f2:ea:a6:5d:cd:95:35:1a:87:f8:
45:20:00:f5:18:53:d8:e8:24:d9:f3:82:fc:34:21:8a:91:36:
4e:d8:66:7e:13:79:53:f2:a2:71:13:b8:f9:7e:32:d9:f9:90:
f4:46:cf:2e:07:3d:cd:20:77:1b:76:eb:57:14:50:2e:d4:8a:
b8:12:73:be:95:d0:74:f2:3c:77:c4:b8:75:5f:5e:cf:ed:e8:
93:68:ea:c3:c4:13:44:76:46:eb:bf:08:9b:81:ab:a8:c1:df:
8e:7a:e8:07:c0:d8:8c:02:e4:ca:6c:0e:d7:65:94:22:be:87:
37:b1:5d:68:ce:48:a1:bc:cb:34:2c:70:89:95:8c:de:59:d5:
fe:16:67:65:57:36:80:94:02:58:83:ae:0c:a7:a6:5c:b7:8a:
fe:48:ef:28:41:db:6a:43:72:55:b5:ac:66:67:45:b8:6e:0f:
96:4c:7d:5b:59:67:04:8e:a4:c2:49:35:47:ae:be:47:1a:9a:
9b:06:60:7f:ab:68:98:13:8c:68:fb:bb:f3:9c:fc:15:91:b5:
1a:5e:37:e9:6d:16:4c:cc:26:60:5d:23:5a:b4:a7:21:78:d9:
80:2c:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:27 2026 by rpki-client