Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: VwzPdpHb9dVAQ7tswHL9L2KuXL2Jnx0+yBqfYlrGANg=
Subject key identifier: 88:60:B7:19:AD:CF:9E:9B:56:CC:E9:66:46:B0:62:86:E3:1D:E1:37
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019F9F9660B90803839BC24DCDC9B437986E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0BBA
Signing time: Sun 26 Jul 2026 18:01:00 +0000
Manifest this update: Sun 26 Jul 2026 18:01:00 +0000
Manifest next update: Mon 27 Jul 2026 18:01:00 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: DwUHRxOFVecA92Lr8z8gz7F4NWWE31URChxELQ/rMzQ=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:60:b9:08:03:83:9b:c2:4d:cd:c9:b4:37:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 26 18:01:00 2026 GMT
Not After : Jul 27 18:01:00 2026 GMT
Subject: CN=8860b719adcf9e9b56cce96646b06286e31de137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:8b:19:79:d0:3f:40:f1:8a:f6:71:ba:01:
5b:64:65:98:08:9c:4a:0c:5d:2b:b2:ea:80:9f:3d:
df:9a:1c:ae:28:fc:e1:68:9f:5d:0d:46:8d:4b:8c:
e8:a1:02:86:ba:b8:a6:f0:fb:eb:33:7d:fd:f1:2e:
04:0e:35:39:58:1a:c2:c1:ca:bc:cb:11:09:d5:93:
d4:5d:16:c3:2d:b0:31:f2:67:3c:3c:d4:26:ac:b5:
3f:e6:e3:9f:24:9b:03:a1:c7:a4:ea:1e:34:2e:43:
23:d8:02:1d:95:f1:4f:d2:e1:20:fc:b5:36:f0:1f:
4e:92:b8:6d:0a:3a:07:8f:3e:cd:2f:42:40:83:3a:
28:25:eb:ea:be:b7:a3:08:98:2c:3f:e1:75:99:5f:
26:a3:85:8d:d3:03:c0:49:06:d1:15:15:6a:29:d6:
01:aa:7f:5b:a2:a5:0f:c0:13:d6:af:7b:ef:5d:66:
b2:47:cc:da:79:10:b9:91:a9:43:14:ef:bd:4f:7e:
0d:ec:0d:d0:01:cc:f6:75:6e:cb:13:1d:3b:7a:c2:
b7:bf:3c:35:88:79:90:e6:3e:a2:8d:6e:55:89:7f:
81:62:28:de:3d:27:5e:f6:fd:94:5c:41:7a:4b:90:
6a:a8:0f:34:e9:98:c4:4e:a5:51:63:fc:c9:39:f0:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:B7:19:AD:CF:9E:9B:56:CC:E9:66:46:B0:62:86:E3:1D:E1:37
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:7b:76:7b:18:69:30:67:c6:8f:b1:83:53:25:7d:c1:5c:
0c:19:c9:f1:fb:16:26:3d:91:65:51:3e:62:fa:c1:71:ef:b1:
2b:31:c3:56:1d:92:d0:01:d6:64:f3:b7:9b:9b:77:cd:39:25:
5b:1a:a2:1b:5a:53:64:8b:2d:5c:21:25:1f:db:98:dd:61:99:
7e:7c:7d:b2:bf:19:43:20:1f:b8:de:0c:be:6d:9b:1c:78:3c:
ba:b0:73:16:ea:c2:ab:4c:4f:46:1e:f2:f8:8f:48:ae:54:f7:
3c:e3:bb:14:68:83:f0:76:0b:44:62:fe:49:cc:e8:49:d1:89:
53:00:62:cf:a6:20:55:9d:7a:d1:00:8f:fb:4f:99:4e:1d:bf:
d9:fb:1e:44:54:15:44:6a:30:90:87:f7:71:55:65:19:dc:7f:
38:9c:5f:94:98:7c:50:0c:f0:05:8a:a1:54:2f:29:95:87:fb:
16:66:6d:eb:df:63:b8:07:36:01:2b:7d:73:0f:dc:f4:d6:7f:
8e:d3:da:74:b4:6e:73:e0:80:38:67:38:dd:2a:6c:16:af:c7:
70:2c:bd:48:d9:32:16:b0:eb:15:90:b1:d9:49:ac:4d:5c:b2:
6c:d1:4f:c7:e9:d6:17:0a:f4:fa:a2:90:32:f7:65:af:57:5a:
48:b3:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:23 2026 by rpki-client