Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: b8rmvWphElmfOFcEc//to037YGxUNWNXnx0oxkzf7X4=
Subject key identifier: 97:C2:65:78:49:DF:2B:A1:11:2B:6A:42:81:A0:F9:B4:61:1A:AB:9C
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01A184515D0000FD6354430A22B77C1B854D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0CB5
Signing time: Wed 28 Oct 2026 21:01:27 +0000
Manifest this update: Wed 28 Oct 2026 21:01:27 +0000
Manifest next update: Thu 29 Oct 2026 21:01:27 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: qc73IiSoMWF+rna0NrCyXZ52JRS836a7j/b6+Ux/R5c=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:51:5d:00:00:fd:63:54:43:0a:22:b7:7c:1b:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Oct 28 21:01:27 2026 GMT
Not After : Oct 29 21:01:27 2026 GMT
Subject: CN=97c2657849df2ba1112b6a4281a0f9b4611aab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:a0:41:db:7b:82:32:32:53:a6:0b:60:00:
25:1b:dc:bc:72:4c:c8:c4:bb:e8:ab:a7:5b:15:5d:
89:0f:2f:94:f2:32:25:1d:e5:51:20:66:c6:b0:6f:
c1:a2:2f:9a:c2:4b:a0:2c:f2:64:ac:9d:6c:1d:87:
b1:2e:79:e8:c9:cf:22:1d:52:ac:8e:30:8e:e2:21:
a3:6f:64:47:bd:c5:93:3d:19:a5:39:a7:0e:43:f6:
de:c5:b7:cd:f9:c8:c3:8f:37:13:0e:2e:ad:ed:2e:
b9:26:bb:46:cb:1f:8a:9c:47:2f:c4:f9:25:da:a5:
50:a8:29:c9:42:a5:20:80:1b:d1:c3:62:9a:2c:74:
ab:22:79:5c:28:31:2b:b7:07:37:ed:5c:25:33:34:
73:91:d0:97:2b:63:0f:3c:65:0b:58:11:32:4c:37:
90:92:1f:21:57:b0:8b:db:68:d7:a8:8c:71:fa:fb:
22:d9:37:a5:3d:45:b4:97:0b:d1:79:a3:e7:f5:ae:
cb:7d:26:1e:82:c6:48:f5:89:ad:bd:48:d4:ea:8d:
ea:d6:c7:a8:6c:33:4c:9c:76:c6:d3:04:d1:51:98:
1b:b1:e6:7f:c3:d8:88:7f:fd:55:15:34:59:e3:89:
d1:fe:1a:87:3c:2b:53:1b:d9:15:c6:4f:4d:da:0c:
b0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:65:78:49:DF:2B:A1:11:2B:6A:42:81:A0:F9:B4:61:1A:AB:9C
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:be:50:78:0f:f8:fa:17:1f:d4:d4:7f:3a:49:fc:21:e8:a5:
58:9f:c7:b0:be:81:2f:cc:3d:49:1b:16:d4:9b:56:b6:3f:96:
36:c6:a7:e5:60:2a:d2:69:8a:6c:51:60:22:73:db:21:13:79:
13:cd:46:33:9e:94:9e:77:2e:41:63:39:aa:28:25:04:d5:8a:
96:33:bb:db:61:11:b7:49:cc:95:55:3f:c2:ec:57:fe:0e:2c:
24:cb:58:5e:37:b8:d3:27:4e:06:66:ea:5e:cb:b5:ea:e0:aa:
72:5e:09:69:90:a2:e8:fe:3b:83:52:e1:16:3b:2e:16:ff:f3:
19:ee:8f:da:0e:2e:14:ee:55:df:72:4b:e1:88:53:9b:92:d8:
64:f0:84:c3:d9:37:c3:d0:5f:82:70:b1:a9:b3:57:bf:89:13:
c0:80:38:ce:fb:8d:8b:cb:8a:3e:6d:47:44:fb:7b:fd:74:f6:
a6:e6:4d:b6:fd:51:91:c0:33:db:4b:19:e5:d0:da:9b:cf:a7:
5c:46:6d:dc:1e:48:39:8c:ce:84:96:88:e3:37:98:79:36:43:
a9:e3:72:23:f6:ee:41:c7:75:bf:4b:5b:e4:1c:ed:64:39:63:
80:01:41:70:a7:69:98:a7:a2:24:1c:ca:fe:fa:2f:c3:d5:58:
4b:20:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:57 2026 by rpki-client