Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: dS/ql/srffszgFeStD0/l/LZsAWse3/nrHWLQXEKaIE=
Subject key identifier: 7D:43:C6:3B:20:6E:30:E3:70:7B:4A:34:61:96:7D:D9:EA:BD:F1:36
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019CAC7DE8FF0E0200DEA50E45C7C8CE7558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0A33
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 8MpgD5FWr/RLCfRdpsEUwpRgfMoasxfA5b0QAMSi850=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e8:ff:0e:02:00:de:a5:0e:45:c7:c8:ce:75:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=7d43c63b206e30e3707b4a3461967dd9eabdf136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:ba:4e:2e:ff:0f:1d:43:95:ca:32:05:ee:
c9:8e:0c:c0:76:f6:3a:51:29:d6:80:9c:27:d8:5e:
a8:13:89:6f:6b:3f:f0:70:e2:83:5c:06:dc:39:bf:
84:74:c4:d3:19:f8:3a:a2:20:f3:ed:4e:21:f1:8f:
f7:bd:4d:a9:53:c7:81:3f:8a:02:18:98:1a:79:18:
a7:9b:50:dc:9b:fc:e1:a9:e5:80:03:10:d1:8e:d5:
22:fd:7d:1f:f7:53:a1:90:34:9a:78:c8:8f:1e:43:
22:a5:43:cc:81:b6:22:8b:07:bc:24:03:46:b8:43:
9a:25:c7:44:cb:f3:2b:1c:62:fb:13:ed:6c:b4:10:
c1:2b:1a:5a:37:93:08:aa:36:ed:f9:e2:72:1f:ae:
af:ad:a4:8c:17:e5:e6:09:cf:c0:86:44:9c:b1:6d:
14:2c:93:8a:24:3f:fa:9d:14:6c:93:6d:ca:43:b3:
64:4c:51:88:b4:16:e6:29:e9:41:b4:b9:85:dc:a7:
77:c9:c6:68:88:53:b8:aa:5f:cb:6b:38:9f:d2:f9:
e7:8e:36:c7:7b:f8:8e:e9:f6:2b:b5:5a:96:36:bb:
6b:87:26:65:2b:b9:d4:8f:f5:1f:b2:c6:5e:21:03:
b8:a7:fa:1f:5d:95:d8:1b:fd:b7:2a:e5:3b:4b:22:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:C6:3B:20:6E:30:E3:70:7B:4A:34:61:96:7D:D9:EA:BD:F1:36
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4c:58:86:e8:12:79:28:48:7f:b0:f1:08:06:80:b6:c7:ff:
75:13:41:4a:55:80:7b:2e:05:99:96:09:78:6a:bd:b4:11:62:
ae:e1:32:1c:e4:af:14:b5:d9:5a:dd:c6:7b:39:a1:75:2e:38:
a6:bf:7d:84:64:80:57:64:6c:cb:24:7f:ba:81:1b:e6:60:98:
a2:a7:ff:ff:33:08:11:04:e0:19:f5:19:79:34:2a:f6:c4:aa:
8c:50:56:3b:ce:67:ba:5a:4c:de:30:54:2b:f3:5b:06:a5:ed:
87:83:c5:58:2f:07:62:78:ff:ac:d5:4f:db:08:b3:04:e8:97:
58:3c:69:c2:ce:d6:ca:6d:3a:60:70:b2:4b:ec:3b:5f:18:1f:
f0:cf:95:be:96:55:55:8b:fc:8e:a9:2c:4b:7c:ca:95:34:1a:
29:05:89:be:bd:7a:6d:6e:b6:04:58:af:5b:a4:a1:84:16:d3:
c3:1f:76:f7:b0:5b:7d:06:36:90:7e:18:87:ed:9c:28:2c:a6:
34:ae:3c:5a:54:2a:31:ab:fc:b4:5f:19:0d:9b:0f:9a:d6:92:
63:5d:2c:d3:90:f7:78:da:87:e3:6a:13:62:e8:bd:46:f3:b0:
9f:05:d7:38:0f:f8:c2:0d:ba:3e:d5:44:d5:4d:40:7b:03:f5:
5d:90:24:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfej/DgIA3qUORcfIznVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwMzAyMDMwMDU4WhcNMjYwMzAzMDMwMDU4WjAzMTEwLwYDVQQD
Eyg3ZDQzYzYzYjIwNmUzMGUzNzA3YjRhMzQ2MTk2N2RkOWVhYmRmMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16O6Ti7/Dx1DlcoyBe7JjgzAdvY6
USnWgJwn2F6oE4lvaz/wcOKDXAbcOb+EdMTTGfg6oiDz7U4h8Y/3vU2pU8eBP4oC
GJgaeRinm1Dcm/zhqeWAAxDRjtUi/X0f91OhkDSaeMiPHkMipUPMgbYiiwe8JANG
uEOaJcdEy/MrHGL7E+1stBDBKxpaN5MIqjbt+eJyH66vraSMF+XmCc/AhkScsW0U
LJOKJD/6nRRsk23KQ7NkTFGItBbmKelBtLmF3Kd3ycZoiFO4ql/Lazif0vnnjjbH
e/iO6fYrtVqWNrtrhyZlK7nUj/UfssZeIQO4p/ofXZXYG/23KuU7SyITrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1DxjsgbjDjcHtKNGGWfdnqvfE2MB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokxYhugS
eShIf7DxCAaAtsf/dRNBSlWAey4FmZYJeGq9tBFiruEyHOSvFLXZWt3GezmhdS44
pr99hGSAV2RsyyR/uoEb5mCYoqf//zMIEQTgGfUZeTQq9sSqjFBWO85nulpM3jBU
K/NbBqXth4PFWC8HYnj/rNVP2wizBOiXWDxpws7Wym06YHCyS+w7Xxgf8M+VvpZV
VYv8jqksS3zKlTQaKQWJvr16bW62BFivW6ShhBbTwx9297BbfQY2kH4Yh+2cKCym
NK48WlQqMav8tF8ZDZsPmtaSY10s05D3eNqH42oTYui9RvOwnwXXOA/4wg26PtVE
1U1AewP1XZAkow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:48 2026 by rpki-client