Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: rvoZLZykKfjK9cX+FnpyP6YhE9oOm5As8JVqRhff6NA=
Subject key identifier: 8C:BC:E0:F6:77:22:76:E1:F7:53:B6:FD:B8:79:13:52:3E:C9:CA:FA
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019FAB2CB1D0996BD94BB70FA46FC3E519A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0BC0
Signing time: Wed 29 Jul 2026 00:01:00 +0000
Manifest this update: Wed 29 Jul 2026 00:01:00 +0000
Manifest next update: Thu 30 Jul 2026 00:01:00 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: bhYjN8sqq8e4yQSQeoeYivfmaBgYCChw7iRpSp3n/Nk=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:b1:d0:99:6b:d9:4b:b7:0f:a4:6f:c3:e5:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 29 00:01:00 2026 GMT
Not After : Jul 30 00:01:00 2026 GMT
Subject: CN=8cbce0f6772276e1f753b6fdb87913523ec9cafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:9f:45:c0:41:a0:2c:88:49:19:ba:03:27:
ab:0b:d8:5e:dc:e1:e6:6a:a1:70:c9:f3:51:08:c4:
09:63:c6:ce:1b:51:64:a8:32:4e:2f:b7:9a:37:bf:
d0:3d:85:01:61:cd:e5:ab:39:c0:0f:e8:10:0c:5f:
52:23:9f:41:8a:6f:9a:ef:0a:24:3d:2a:9f:f7:20:
64:07:52:4b:14:af:e7:7b:ea:52:36:d0:8c:2a:16:
e4:fd:42:f2:07:72:33:9c:4d:f1:8a:d4:2a:07:93:
1b:65:77:09:28:64:4c:e4:54:46:af:42:f0:ab:2d:
90:4e:d1:2e:44:3a:dc:b7:11:07:db:75:fd:18:c7:
19:1b:30:84:0c:e0:77:1a:0a:19:a8:8e:a0:56:12:
34:34:42:86:47:2e:82:29:b7:8a:e8:11:e1:29:94:
01:8d:c8:40:fb:f5:5e:60:e9:34:ca:5b:5c:9e:15:
9c:67:39:e3:2a:08:19:ee:c1:f8:ba:da:50:df:d4:
9b:c8:59:5c:6f:4f:48:76:74:d6:2e:f9:f7:16:41:
36:a4:86:b5:49:04:b9:3f:96:66:26:d2:bb:7f:ee:
fb:96:31:25:0d:86:22:a9:17:be:89:e6:01:05:81:
dd:18:9d:ab:17:b1:bb:62:9f:ee:e8:44:3d:45:5b:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BC:E0:F6:77:22:76:E1:F7:53:B6:FD:B8:79:13:52:3E:C9:CA:FA
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:ff:f8:ec:a3:cc:4a:3e:ce:1d:7c:03:c2:c3:08:a1:5a:
bc:21:1f:d5:c6:e8:8e:51:77:5d:5f:14:71:be:a5:3f:1c:b1:
f0:8c:fd:d7:1e:50:94:47:ff:dd:b0:2b:24:1c:dd:c3:14:ec:
e0:38:45:e3:46:40:53:dc:18:76:cb:5f:fb:68:c4:26:fa:87:
0d:94:a5:6f:ad:e3:50:54:bc:e4:e8:46:ce:c9:a7:83:28:5f:
e8:c8:32:3d:f1:07:b6:e5:53:1c:3d:15:14:31:bd:18:fa:87:
e9:fc:66:0b:5f:68:84:c1:99:09:ed:9d:74:86:ba:83:18:55:
10:9a:d0:61:87:7f:69:73:bd:54:ea:71:17:35:46:b2:24:09:
6e:40:fb:a9:c3:96:f9:2b:9e:2d:19:9e:0e:d2:d2:85:f3:ba:
64:9b:44:40:6a:45:07:05:5b:b9:d4:af:22:89:5b:72:43:a9:
54:e4:65:0b:e5:a0:09:1a:60:4a:2a:d9:3a:45:0b:69:23:c5:
db:a9:d7:64:b2:71:2a:aa:60:00:f9:7d:f1:e0:dc:ee:b3:cd:
7b:67:49:d0:62:b4:33:2b:39:37:73:41:0e:19:f9:1b:b0:e4:
02:b6:a2:2b:96:15:70:35:c8:7b:ad:0c:9a:b8:77:55:a9:2a:
37:7b:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:52 2026 by rpki-client