Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: x/ukFNuH3WpoZGSuBaxjoH4oMTvw6ObaQUAuKDkURFk=
Subject key identifier: 8C:EA:56:83:DD:FF:72:BA:96:76:31:D3:7B:17:58:4E:4C:CC:FC:E0
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019EC1800495A12E2843252F79F20FC6606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0B47
Signing time: Sat 13 Jun 2026 15:00:52 +0000
Manifest this update: Sat 13 Jun 2026 15:00:52 +0000
Manifest next update: Sun 14 Jun 2026 15:00:52 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: FMp3XHk14/+2R85gxR93p8IDqY11mIetkiO2UpM31KY=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:04:95:a1:2e:28:43:25:2f:79:f2:0f:c6:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jun 13 15:00:52 2026 GMT
Not After : Jun 14 15:00:52 2026 GMT
Subject: CN=8cea5683ddff72ba967631d37b17584e4cccfce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:c9:28:0f:d1:d9:33:9d:15:26:3f:9f:f0:
eb:55:5c:e7:0e:08:10:c1:30:61:6c:0f:87:af:34:
6c:a9:d8:d8:2e:34:30:57:4d:a0:fe:77:75:36:d7:
8c:49:84:d0:eb:8e:1d:41:5f:93:7e:a5:35:ca:88:
0c:42:81:0a:60:d9:77:b7:8f:28:b3:ae:f9:51:35:
0f:98:f5:ab:3f:35:68:26:34:bf:12:b5:0c:29:7f:
0d:c9:79:6d:31:a9:29:2b:1f:06:bf:c0:de:6e:58:
72:27:89:7f:d2:33:65:13:b6:d6:37:e5:43:2a:a6:
bc:11:88:14:e8:16:9e:86:d8:45:a2:e8:2c:7a:8c:
92:02:33:76:20:be:a2:8a:e4:70:46:00:e3:3e:f0:
85:78:a8:e7:af:2b:a3:72:5a:e1:8e:a1:4a:c9:2f:
19:7c:3f:95:9a:42:f7:38:ad:34:20:66:cb:25:0b:
bd:fa:26:85:96:24:f6:99:19:2d:45:33:e3:df:1d:
58:cd:6e:5c:cb:9d:ce:65:b6:99:d2:5a:1d:41:ec:
7e:e8:cb:fd:ee:1b:af:2e:aa:a1:1e:2e:e2:52:79:
33:8f:39:bc:a6:b7:66:6a:e3:1a:36:5a:81:93:0a:
2c:67:33:1e:4c:e0:1a:9a:f0:37:21:1a:e1:b2:cb:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EA:56:83:DD:FF:72:BA:96:76:31:D3:7B:17:58:4E:4C:CC:FC:E0
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:28:5e:d0:7b:be:5a:be:ff:00:32:eb:60:cb:cf:7b:49:56:
02:86:92:9a:a6:8f:e0:ac:a1:f2:10:10:d0:3c:18:4d:7d:a1:
cb:45:fa:f8:b9:cd:cd:52:6d:32:d3:11:15:85:61:ce:b6:9e:
ba:bf:4b:f7:6e:bf:7b:51:39:a8:19:62:00:e7:e7:de:3e:be:
ac:ab:33:cb:37:92:cb:e5:fb:f2:43:a2:6e:ba:73:35:33:c9:
1b:b4:8e:71:7f:52:0d:57:22:ad:24:c1:90:6e:b8:4b:48:84:
75:74:0f:38:ca:83:2e:6b:b0:c8:7a:14:00:32:9a:82:08:bc:
60:e4:ac:58:e7:24:67:3e:13:34:5f:ee:1e:be:f2:50:3e:8a:
12:69:bf:be:e5:1a:d0:1e:d3:af:49:55:fe:db:77:45:79:25:
30:03:a4:f0:83:c8:ec:de:dd:bd:80:f5:46:b7:90:32:c7:cc:
2a:4a:d0:f2:7f:a9:a3:27:8e:d5:a6:91:90:95:30:3f:ad:2f:
55:01:f8:9b:b5:be:ea:e5:01:b8:12:ef:54:01:ca:e4:83:db:
62:db:40:c0:a7:ea:d7:6a:77:5a:fa:02:47:07:53:d5:b2:34:
ad:17:6e:9d:2c:c9:c8:8d:b9:38:68:b1:0d:1b:f9:19:20:14:
04:88:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:34 2026 by rpki-client