Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: BwgvxThObY/s/yf8/q59+bAJ6jJXyAdPBzo/8at0z8g=
Subject key identifier: 29:D3:1D:32:0C:EF:7F:A9:0B:FA:4A:95:7A:5B:F7:43:BF:01:EE:CE
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019D99D09E52B0872AB519BF0EA75BFF065B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0BB5
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: IbR0+Ws1aFZsppqDWeTazzfO5XHp7q2UudmQA10hG3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9e:52:b0:87:2a:b5:19:bf:0e:a7:5b:ff:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=29d31d320cef7fa90bfa4a957a5bf743bf01eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:8b:43:e1:04:62:22:a4:85:c4:07:d8:fe:
e5:00:82:39:1b:2d:57:2a:d2:dc:5f:5b:d0:ac:11:
4f:2e:12:61:a7:25:9c:4f:1c:a7:52:2c:8c:82:b1:
7f:d3:97:df:2e:23:22:f4:c6:ac:01:bb:3e:41:8d:
30:f3:6f:19:48:b9:90:37:25:61:ee:c2:c5:0f:6a:
35:60:ab:19:5e:f4:5c:a2:b6:18:e1:12:a5:1d:a0:
dc:39:d5:4a:9c:5c:57:07:23:de:7b:2e:13:b3:1a:
24:56:fb:b5:8a:56:0d:23:de:39:74:d8:3f:a4:58:
51:35:a7:e4:b7:53:d0:cb:d9:bf:50:68:de:18:7e:
05:b3:9b:52:2b:12:25:f3:be:56:d8:fd:89:31:ee:
ed:86:21:31:ac:3e:ef:a3:45:70:97:17:11:aa:fc:
a2:6d:eb:50:98:8e:ea:dd:29:6e:5f:35:cd:5b:b2:
ad:61:bb:a2:e4:a1:6a:4f:11:73:e8:ac:bc:53:2e:
79:ed:fb:ca:7d:4f:2c:d8:ef:8a:a9:f0:90:90:25:
dd:87:16:4e:4a:80:4b:be:81:b5:ee:1a:85:2a:9b:
6a:ef:c7:61:f3:75:2b:21:a6:a3:cf:5a:3c:ac:60:
76:0c:1b:bd:2d:08:7b:e4:b1:b1:12:2a:c0:94:9b:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:1D:32:0C:EF:7F:A9:0B:FA:4A:95:7A:5B:F7:43:BF:01:EE:CE
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:c6:ef:c9:0c:74:6f:eb:3a:96:c2:86:3a:64:3a:e5:69:
f2:29:58:85:fb:ba:9e:a6:72:c8:5e:da:9d:56:65:e8:76:12:
4f:54:9d:32:c5:f0:39:9e:4d:27:6c:2f:ea:fb:87:d6:23:1e:
b3:44:f8:c8:44:76:8f:7d:9d:45:49:e1:10:bf:2f:a3:6f:32:
27:0e:85:43:29:c0:b6:4b:89:d2:72:d7:ef:19:5d:0d:30:82:
5d:17:49:82:88:7c:af:f5:7b:00:32:4c:40:be:7d:82:ba:59:
52:54:82:63:ed:e3:40:2c:b8:ab:d5:22:a7:42:86:03:2e:f9:
25:b8:13:11:6c:8f:55:c2:79:ad:f1:90:9e:6d:e7:65:c2:e2:
93:1a:0c:86:b9:29:57:11:0f:ef:7e:8c:00:c0:8e:15:72:a9:
8d:29:62:a6:82:d4:df:5e:ac:a6:36:82:fe:c3:07:c4:ea:9b:
cd:d6:80:a6:32:06:76:03:24:1f:ca:ab:07:cf:fb:4d:99:d3:
0c:c7:17:94:1f:0f:55:c6:3e:81:7b:3d:a0:18:bc:4f:f7:51:
72:c7:07:d8:39:65:d0:00:79:8c:02:61:8b:06:43:bb:35:67:
2c:e8:0a:81:f1:d1:62:1a:68:ba:91:4f:e5:b2:ae:ca:38:55:
59:bc:bb:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0J5SsIcqtRm/Dqdb/wZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYwNDE3MDUwMTE5WhcNMjYwNDE4MDUwMTE5WjAzMTEwLwYDVQQD
EygyOWQzMWQzMjBjZWY3ZmE5MGJmYTRhOTU3YTViZjc0M2JmMDFlZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOuLQ+EEYiKkhcQH2P7lAII5Gy1X
KtLcX1vQrBFPLhJhpyWcTxynUiyMgrF/05ffLiMi9MasAbs+QY0w828ZSLmQNyVh
7sLFD2o1YKsZXvRcorYY4RKlHaDcOdVKnFxXByPeey4TsxokVvu1ilYNI945dNg/
pFhRNafkt1PQy9m/UGjeGH4Fs5tSKxIl875W2P2JMe7thiExrD7vo0VwlxcRqvyi
betQmI7q3SluXzXNW7KtYbui5KFqTxFz6Ky8Uy557fvKfU8s2O+KqfCQkCXdhxZO
SoBLvoG17hqFKptq78dh83UrIaajz1o8rGB2DBu9LQh75LGxEirAlJuJEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnTHTIM73+pC/pKlXpb90O/Ae7OMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJrG78kM
dG/rOpbChjpkOuVp8ilYhfu6nqZyyF7anVZl6HYST1SdMsXwOZ5NJ2wv6vuH1iMe
s0T4yER2j32dRUnhEL8vo28yJw6FQynAtkuJ0nLX7xldDTCCXRdJgoh8r/V7ADJM
QL59grpZUlSCY+3jQCy4q9Uip0KGAy75JbgTEWyPVcJ5rfGQnm3nZcLikxoMhrkp
VxEP736MAMCOFXKpjSlipoLU316spjaC/sMHxOqbzdaApjIGdgMkH8qrB8/7TZnT
DMcXlB8PVcY+gXs9oBi8T/dRcscH2Dll0AB5jAJhiwZDuzVnLOgKgfHRYhpoupFP
5bKuyjhVWby7Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:20 2026 by rpki-client