Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: Zix00cwDQ1zlFg0gmndRIVP9c2m0hu6+JQv4MULnBN0=
Subject key identifier: 3E:CF:16:D2:08:75:87:46:F0:42:A4:26:5A:9B:9A:E4:43:49:64:50
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019CAE6C08C544139AABF82E4D1092D45086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0A34
Signing time: Mon 02 Mar 2026 12:00:41 +0000
Manifest this update: Mon 02 Mar 2026 12:00:41 +0000
Manifest next update: Tue 03 Mar 2026 12:00:41 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: U3XacB8bW8HPd+nRedLJRxEfD8u6F7ZFA6whs62/UDU=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:08:c5:44:13:9a:ab:f8:2e:4d:10:92:d4:50:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Mar 2 12:00:41 2026 GMT
Not After : Mar 3 12:00:41 2026 GMT
Subject: CN=3ecf16d208758746f042a4265a9b9ae443496450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:b3:fd:4f:32:57:40:6a:21:c4:81:ff:4b:
0f:0a:d4:e1:c1:29:c4:d0:c6:28:04:eb:6a:a3:54:
43:dc:f2:8a:b7:7e:56:c8:2c:b9:4e:73:98:37:b4:
93:ef:37:0b:35:ba:e7:28:ef:86:d7:86:c7:3c:47:
7e:f2:4f:a7:1e:23:11:19:9d:f6:be:aa:bb:dc:e7:
d6:c0:c4:4a:58:2e:f5:72:41:61:a5:6b:b3:1a:e5:
59:58:c3:17:45:1c:05:f1:3a:f0:29:da:d7:e7:6f:
8f:71:cd:a1:4f:1c:e0:7d:f2:31:b1:92:bb:84:3c:
29:d6:59:2f:40:0e:ab:54:67:50:22:ae:d2:9c:6b:
66:2e:73:ce:28:b7:2f:65:06:15:ea:8a:19:77:13:
88:ca:d0:39:c0:da:05:38:10:f4:e0:1e:b7:1c:dd:
e7:0f:d2:71:3c:d7:f8:1c:b4:9e:2a:1d:4a:db:0e:
39:53:6c:45:f2:d1:0f:13:99:0a:ed:ef:5c:75:77:
96:9a:37:d5:ba:88:80:50:05:1c:fd:23:cd:ac:57:
a1:3e:d5:a1:42:48:26:8b:50:73:19:ff:25:87:58:
fa:6f:d7:73:71:9f:03:74:d3:a7:ee:a3:e5:5c:44:
dc:81:ac:6c:57:92:d5:6b:0f:68:11:ac:d8:05:17:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:16:D2:08:75:87:46:F0:42:A4:26:5A:9B:9A:E4:43:49:64:50
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8f:c3:e5:b2:c4:4b:46:31:4d:75:ec:4d:b6:dc:95:51:de:
f6:fe:94:da:34:5f:d5:b4:90:6c:9a:21:5e:b0:4d:70:59:c5:
79:ee:f8:86:c5:2e:e2:6b:1b:3b:82:ed:28:0e:15:b7:5b:44:
3e:0a:3f:c6:c1:d9:33:48:26:ad:80:ee:be:98:33:c7:be:50:
73:d2:12:b7:3f:dc:1a:29:14:ed:cf:8a:03:1a:be:99:c9:3a:
b2:e3:4b:19:13:ba:fe:9b:d6:f2:60:39:96:be:2c:5b:09:83:
8b:21:0a:a8:a2:ac:06:df:e1:28:1f:7f:a1:90:17:4b:d3:de:
32:20:00:87:5c:a9:ca:2b:0d:cd:bb:c9:b7:13:90:53:fb:2e:
6b:d4:cb:47:fd:57:cd:c1:df:a9:8f:5e:4e:4c:2b:f1:93:87:
4c:c0:f4:d4:63:09:49:47:aa:92:3f:78:08:6b:eb:cb:c0:b7:
43:58:ee:a2:34:5e:13:bd:22:6f:b6:a0:de:d5:3e:a7:7a:79:
2a:87:e2:7c:5e:40:82:ed:fc:3b:85:a8:38:93:1f:b1:cc:c6:
1c:64:9e:79:f3:83:68:7b:ef:78:0f:e3:7c:02:0d:f5:72:c6:
1c:3c:81:51:ef:5e:89:4e:e0:86:c3:2b:01:e4:90:f5:17:55:
a9:7d:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:03 2026 by rpki-client