Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: EqM8t+XXVTb+qc/DGGFiEnqeRwYTbJpKL83p6Io5ygE=
Subject key identifier: 65:08:FB:C2:BD:BF:E1:3B:93:6F:F7:9D:B2:B2:59:3B:4C:19:8B:60
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01A0C2FB65EA7165ECE89489A0022828BCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0D58
Signing time: Mon 21 Sep 2026 08:00:50 +0000
Manifest this update: Mon 21 Sep 2026 08:00:50 +0000
Manifest next update: Tue 22 Sep 2026 08:00:50 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: ng3BenVwX04Fzv+X/NpK47/WlIgqyeHD+04frddJNZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:65:ea:71:65:ec:e8:94:89:a0:02:28:28:bc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Sep 21 08:00:50 2026 GMT
Not After : Sep 22 08:00:50 2026 GMT
Subject: CN=6508fbc2bdbfe13b936ff79db2b2593b4c198b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:dd:99:a0:5f:f2:ac:23:40:69:e3:42:2b:
f2:18:e1:4f:d6:c9:e4:65:15:a1:4c:2e:92:ad:7f:
fb:63:8e:5c:54:1b:45:66:19:39:93:0d:da:c1:d0:
95:34:1c:63:bd:14:03:35:28:6b:8e:c1:3a:01:14:
0f:89:82:e0:3e:75:f2:ce:d7:3c:2d:cb:6f:3d:f0:
66:ba:3c:72:8a:9e:5c:cd:49:ae:b1:3a:1b:d3:73:
ff:83:b7:bd:73:ab:28:e8:cf:6e:f0:18:87:d4:7b:
14:c0:4f:bd:4d:8a:4f:e5:ef:2c:a3:90:43:89:fb:
d6:c1:31:19:4d:ab:fc:41:77:c2:72:60:f7:ce:76:
b4:8f:ba:e1:81:b3:06:36:c8:ac:6b:21:8c:e4:fb:
86:56:13:a7:4e:8a:4c:04:c9:32:d6:95:f2:69:52:
ad:42:71:98:01:f9:b9:6d:66:42:cc:58:a1:84:5c:
df:78:25:08:06:00:36:cd:ee:34:5a:02:be:0e:39:
6d:10:ce:49:80:e0:36:43:d9:a0:ad:c2:3b:3b:c4:
df:7e:cc:0d:f1:23:d8:59:d1:d1:12:34:87:0c:86:
7b:dc:62:76:e1:ea:bb:d5:0b:b5:3f:d3:5a:52:41:
95:78:4c:22:56:09:5d:cb:90:01:65:79:5f:f4:b7:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:FB:C2:BD:BF:E1:3B:93:6F:F7:9D:B2:B2:59:3B:4C:19:8B:60
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:24:b3:9d:a6:24:f3:2e:af:1e:6d:aa:22:c3:1a:be:0c:
be:9d:a9:ca:e7:66:6a:17:62:28:6f:1f:e0:aa:c2:fd:48:6a:
00:a9:ab:1b:42:cf:fa:56:ef:67:57:23:d3:1a:cf:4d:ae:f6:
2a:f1:5f:6c:c3:86:89:dc:a5:27:25:4a:3e:f8:43:3a:eb:65:
4a:30:d3:df:45:f6:6b:6b:c7:89:8d:31:cc:77:70:3f:46:84:
82:fd:35:99:69:ce:2e:fb:f7:55:f9:73:04:de:b0:c5:4a:79:
78:b3:17:cd:e2:98:52:2b:da:47:95:29:a0:e0:ce:37:1a:38:
71:35:70:00:f5:a7:97:0e:45:91:4b:88:ef:d5:db:bc:ff:ba:
13:dc:01:92:9e:f8:fc:a1:d3:c1:34:da:86:63:dc:8a:be:0e:
83:e1:77:88:08:ca:01:e5:c1:a3:4d:b4:bd:90:64:82:e4:ae:
6a:8c:19:5e:ee:6f:6f:af:df:99:04:3e:f1:57:1a:e8:f6:89:
a4:42:30:5b:01:1a:51:a4:66:43:cc:13:03:c6:1c:23:96:06:
bf:dc:c4:d9:35:54:18:f2:07:f7:88:d4:3e:7b:14:ca:f9:ee:
2b:2d:c0:eb:d2:b3:68:29:2d:83:c8:1a:b7:62:20:d6:b1:ff:
30:a2:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:59 2026 by rpki-client