Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: XA7lQkpga+T9OQfIi31dpD4eKTRY+3m3aoQZMZwgCG4=
Subject key identifier: BF:B2:5B:7C:19:5A:2E:25:EC:0F:18:0E:F1:2F:F4:19:0D:A7:71:17
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019CAA58B640BD98DD553C12F0F4D1BD2914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0B39
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: bQ51rZZr+BBvylsG20iHLaIc+7vxmx2WxwqdhBneZ1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b6:40:bd:98:dd:55:3c:12:f0:f4:d1:bd:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=bfb25b7c195a2e25ec0f180ef12ff4190da77117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:f8:78:49:85:d0:46:e9:b7:d6:2e:57:5f:
c7:0d:55:67:1e:b6:70:55:eb:33:22:50:bd:44:54:
64:d1:15:d0:54:4a:cf:26:76:38:56:1c:14:3f:c3:
1c:bb:2b:e9:60:da:8e:aa:3b:cd:3a:08:27:c1:e4:
a0:c0:54:1b:9a:e6:01:14:ae:fb:14:09:3b:96:4e:
2a:41:5a:63:45:ae:14:52:68:4e:2c:b1:4d:a5:aa:
93:d9:3f:61:c8:43:7b:2f:ef:96:04:de:0a:51:72:
72:0a:9e:3c:16:81:b0:9e:9c:06:63:df:41:fc:d7:
9b:47:fc:79:9c:f6:08:eb:f9:3d:70:76:47:e6:27:
7b:5f:fe:c6:65:72:66:1f:a5:88:e2:78:63:29:11:
45:79:01:f3:ae:a9:e9:66:cb:69:d3:bb:ca:7a:e4:
18:48:fd:a2:a7:c5:21:34:38:fd:06:b3:9c:6e:88:
1f:40:3f:10:0f:f3:58:7f:ac:f9:dc:89:46:36:f7:
a0:c9:92:85:b0:ec:57:32:ad:ab:99:77:39:1d:2f:
cc:ca:22:a9:90:cf:d4:c4:d4:3f:8f:23:fa:6a:58:
c6:ec:65:88:81:3f:ea:f2:d8:e2:ed:20:ea:ac:05:
6d:0b:ef:91:09:e3:e0:d2:f1:a0:3d:03:71:15:88:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B2:5B:7C:19:5A:2E:25:EC:0F:18:0E:F1:2F:F4:19:0D:A7:71:17
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:c5:41:cb:42:a1:af:ee:a9:11:89:b1:3a:3b:91:c3:9f:
84:fd:92:f4:84:81:de:cf:63:3e:ee:8f:6a:5f:a1:04:3e:16:
0b:13:41:b6:8a:0f:b9:91:1b:75:de:5e:d6:67:d2:99:16:07:
20:a5:33:84:e7:b6:0b:9e:7f:81:94:dc:e5:de:cc:95:22:9c:
bd:39:f3:ac:52:6f:41:a1:8a:13:d0:e9:04:55:b8:73:4c:bc:
1b:50:86:7e:21:b5:c4:70:40:c6:74:cf:ee:44:b5:f4:6d:be:
1a:e4:a6:bc:fe:3a:8a:70:0c:c0:bb:ca:4f:97:a4:b5:8f:c1:
df:ec:be:51:e4:b0:79:8f:85:eb:62:67:ec:9c:06:ec:a3:83:
dc:de:ed:1f:ac:8e:91:9f:ba:6a:1e:9d:c7:7a:a5:23:23:1b:
d0:e8:36:31:c5:4f:04:6a:f3:06:a4:b6:54:44:f0:09:26:d7:
0a:23:21:06:7c:bc:c3:20:b2:1b:63:c5:16:0c:bf:ce:7b:7d:
f6:35:18:2d:4c:03:89:84:ac:b7:2b:3d:d9:19:84:4a:70:a0:
30:4a:f2:bc:92:e9:8a:2e:00:5f:db:e0:ac:c8:ad:1d:51:8e:
21:3b:0d:88:03:e8:e2:5a:a1:5d:33:bf:4c:a5:49:78:da:81:
af:39:0e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLZAvZjdVTwS8PTRvSkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYwMzAxMTcwMTA2WhcNMjYwMzAyMTcwMTA2WjAzMTEwLwYDVQQD
EyhiZmIyNWI3YzE5NWEyZTI1ZWMwZjE4MGVmMTJmZjQxOTBkYTc3MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HT4eEmF0Ebpt9YuV1/HDVVnHrZw
VeszIlC9RFRk0RXQVErPJnY4VhwUP8McuyvpYNqOqjvNOggnweSgwFQbmuYBFK77
FAk7lk4qQVpjRa4UUmhOLLFNpaqT2T9hyEN7L++WBN4KUXJyCp48FoGwnpwGY99B
/NebR/x5nPYI6/k9cHZH5id7X/7GZXJmH6WI4nhjKRFFeQHzrqnpZstp07vKeuQY
SP2ip8UhNDj9BrOcbogfQD8QD/NYf6z53IlGNvegyZKFsOxXMq2rmXc5HS/MyiKp
kM/UxNQ/jyP6aljG7GWIgT/q8tji7SDqrAVtC++RCePg0vGgPQNxFYiqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+yW3wZWi4l7A8YDvEv9BkNp3EXMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXbFQctC
oa/uqRGJsTo7kcOfhP2S9ISB3s9jPu6Pal+hBD4WCxNBtooPuZEbdd5e1mfSmRYH
IKUzhOe2C55/gZTc5d7MlSKcvTnzrFJvQaGKE9DpBFW4c0y8G1CGfiG1xHBAxnTP
7kS19G2+GuSmvP46inAMwLvKT5ektY/B3+y+UeSweY+F62Jn7JwG7KOD3N7tH6yO
kZ+6ah6dx3qlIyMb0Og2McVPBGrzBqS2VETwCSbXCiMhBny8wyCyG2PFFgy/znt9
9jUYLUwDiYSstys92RmESnCgMEryvJLpii4AX9vgrMitHVGOITsNiAPo4lqhXTO/
TKVJeNqBrzkOFA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:13 2026 by rpki-client