Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: 5Nq8u7HmI8oT3ZAHXovMc4nR3tL75sZdA/fLu5VnvQs=
Subject key identifier: F7:C8:18:0B:0C:70:05:08:9F:6A:79:92:E0:2C:CC:DF:ED:5E:88:12
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019FAAF5E0ED32C20977D0296AAAF3615245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0CC7
Signing time: Tue 28 Jul 2026 23:01:08 +0000
Manifest this update: Tue 28 Jul 2026 23:01:08 +0000
Manifest next update: Wed 29 Jul 2026 23:01:08 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: NEcT4d0MMG9rVUzEbW1tvN313YCmiQFOWIcj3eQrW1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e0:ed:32:c2:09:77:d0:29:6a:aa:f3:61:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Jul 28 23:01:08 2026 GMT
Not After : Jul 29 23:01:08 2026 GMT
Subject: CN=f7c8180b0c7005089f6a7992e02cccdfed5e8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:0d:00:ed:8d:7e:60:00:c0:c2:09:08:20:
53:61:4a:2e:6f:08:ab:f1:ea:86:23:d0:c5:d5:3f:
71:23:7e:d6:10:76:36:09:d5:ff:94:e9:88:5e:99:
a4:ce:16:1c:6a:8c:b7:92:06:7a:26:91:7a:9b:29:
7b:bc:d8:8e:8e:2b:9f:ef:d4:d3:b9:68:83:ea:41:
a6:d8:ee:76:b3:08:79:76:ec:26:25:1a:f2:78:8c:
90:4e:55:0f:a8:b2:97:3f:a1:aa:fb:d5:5e:9b:c1:
a7:f2:96:03:81:e9:f1:eb:6f:9b:90:81:64:ca:11:
23:59:2d:06:b6:64:01:a8:e3:2e:8d:1c:75:23:f3:
7f:06:74:62:df:1d:f2:fa:6e:fc:1f:34:c8:82:4c:
87:5b:77:37:c3:6a:40:44:4f:50:4f:4a:bc:4a:ae:
7a:f6:90:10:af:dd:58:b5:63:f7:32:6d:6c:f8:0d:
cc:a6:27:c0:ec:14:4f:74:40:7f:d1:ce:b3:c6:54:
a6:7f:f8:81:e5:a6:62:0c:2d:4d:e5:16:40:c3:33:
64:bb:c5:59:27:c7:8a:99:d5:40:3b:e7:fe:27:28:
e8:8c:8e:e9:10:e0:14:af:91:2d:0a:f0:75:a6:2f:
89:ee:32:dd:30:d3:cd:87:2c:aa:92:14:ed:aa:83:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:18:0B:0C:70:05:08:9F:6A:79:92:E0:2C:CC:DF:ED:5E:88:12
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e4:50:69:da:f1:32:0c:5d:89:c8:0d:34:c2:61:04:0e:9e:
b6:b2:64:5d:a5:00:44:b3:65:85:eb:de:4d:82:76:67:5a:73:
f3:0a:1f:ca:01:a7:62:af:aa:f0:2a:cf:ed:f9:43:3c:49:6c:
ab:05:1f:19:8a:52:6b:c5:94:46:35:34:9c:86:eb:f1:a1:ae:
89:cb:a3:ec:70:cd:56:7d:33:98:07:c0:b9:56:db:85:03:8a:
c0:a3:03:f8:8e:4e:cd:af:16:57:77:7d:8b:ff:0f:01:ea:87:
e6:a5:e2:79:b1:cf:5e:79:cf:91:03:16:46:a1:da:a0:ad:a1:
86:87:5a:d4:51:97:de:fc:b6:8d:b0:ff:c1:33:f8:9d:3e:90:
a4:cb:17:9e:94:7e:27:39:f2:f2:66:90:4c:6d:e6:71:45:ac:
78:ab:72:a1:e7:1e:2c:b2:b4:fe:02:59:cd:16:0d:42:53:80:
06:32:70:1f:7a:2a:08:f9:59:26:ce:18:3b:7e:33:c5:71:02:
51:ee:62:a4:b6:71:bd:7d:4b:95:50:32:44:76:51:8d:3b:67:
b0:87:51:a7:2e:26:b3:ff:9c:28:c7:7f:11:d2:32:1a:e7:45:
cc:8a:3d:b9:47:0a:60:9f:42:70:27:bd:1c:31:7b:53:01:84:
24:71:de:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:27 2026 by rpki-client