Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: 1vvLf7qusBE02oTPQpMYo4XOXwj0dno0QLyzmwLinM4=
Subject key identifier: B3:C1:CD:51:ED:AF:96:95:51:35:C7:4C:EF:68:C2:F9:99:7C:96:1E
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019DCC3D1DB4B2D7612E8C2C6814CD53FE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0AC8
Signing time: Mon 27 Apr 2026 00:00:50 +0000
Manifest this update: Mon 27 Apr 2026 00:00:50 +0000
Manifest next update: Tue 28 Apr 2026 00:00:50 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: dZaE8GxopHEDNeXLNNCRMdfNWjvvQX4ja+/h3isC/AE=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:1d:b4:b2:d7:61:2e:8c:2c:68:14:cd:53:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Apr 27 00:00:50 2026 GMT
Not After : Apr 28 00:00:50 2026 GMT
Subject: CN=b3c1cd51edaf96955135c74cef68c2f9997c961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:28:8f:a6:19:c6:23:89:4f:3a:41:22:89:
cc:49:90:cc:7f:be:e8:a7:a3:02:c3:08:5c:1a:10:
d5:6f:b9:a8:ed:9a:7c:72:c3:1d:65:f9:51:94:23:
35:20:e9:70:48:e5:ba:0e:3d:4b:8b:3f:ae:bf:5d:
ea:24:22:b3:3e:cc:33:26:81:de:9a:c6:b8:b2:7f:
cc:2d:c9:3a:7b:6a:07:c6:cb:34:5d:37:f4:16:84:
47:48:02:d8:d6:0f:53:41:af:6a:bf:b9:1d:69:df:
b2:d6:52:9f:c8:ef:70:81:27:8c:af:e4:33:bc:92:
0b:ce:8d:87:9b:86:a3:c7:9d:03:6f:8c:d5:53:fa:
6b:9a:36:11:56:99:ec:41:a4:5a:0d:52:8c:60:f3:
e1:f2:4c:dd:5a:34:06:5d:bd:9f:0c:84:e3:0c:46:
00:ae:00:7c:b6:dc:d3:53:79:4e:67:7d:e4:4a:4f:
be:06:1d:3e:01:de:a8:c1:a2:48:c0:7c:28:e4:83:
3c:04:63:a0:92:df:ae:c5:56:02:3e:8e:5b:d1:53:
23:1a:f3:9e:9e:4c:80:42:96:6f:95:16:b6:af:06:
9e:6a:53:d0:fa:33:41:d1:6a:e8:b6:15:a5:ec:2d:
a1:db:9e:c7:19:c7:8c:a9:ec:19:b4:34:4f:04:62:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:CD:51:ED:AF:96:95:51:35:C7:4C:EF:68:C2:F9:99:7C:96:1E
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:54:2f:03:30:4c:3b:22:30:9d:88:41:da:0a:80:fe:18:
6f:e1:6e:53:48:d7:95:a6:c4:98:b7:4e:3b:8c:35:c4:90:2b:
e0:64:e1:7b:96:ef:28:c2:40:5f:17:1c:1c:6c:a0:16:81:49:
40:c0:2a:b4:82:eb:96:8b:a8:47:09:ca:38:27:a4:50:23:58:
99:cd:4d:ae:ad:0e:05:1a:31:7f:cd:1f:11:b7:18:22:a8:ee:
34:ba:1b:cc:3c:07:15:0f:5d:71:4a:28:e9:d0:e3:3a:b1:37:
91:f9:a3:06:24:23:2a:8d:19:13:c4:47:fb:57:68:41:84:6c:
9a:6d:ba:f7:20:81:6e:cb:43:47:de:e6:64:ac:63:50:77:bf:
12:9e:3e:3f:0c:7a:0d:39:28:38:0b:82:28:b8:d4:7f:bb:be:
b5:96:93:6b:40:b9:62:da:00:3e:54:75:f0:dd:97:97:70:8d:
ee:cd:f0:f7:f6:a5:99:28:22:0a:f9:90:4a:44:0e:16:70:fe:
85:1e:3b:cf:04:ff:c0:54:a5:c3:a0:53:f9:b4:b0:19:84:d4:
aa:d2:d6:e6:60:c2:e6:d0:b0:11:0a:2c:fc:80:49:78:b2:f4:
fa:2c:3b:47:51:af:19:2f:ce:e4:15:48:be:e9:70:90:92:1f:
4d:98:03:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPR20stdhLowsaBTNU/6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwNDI3MDAwMDUwWhcNMjYwNDI4MDAwMDUwWjAzMTEwLwYDVQQD
EyhiM2MxY2Q1MWVkYWY5Njk1NTEzNWM3NGNlZjY4YzJmOTk5N2M5NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCcoj6YZxiOJTzpBIonMSZDMf77o
p6MCwwhcGhDVb7mo7Zp8csMdZflRlCM1IOlwSOW6Dj1Liz+uv13qJCKzPswzJoHe
msa4sn/MLck6e2oHxss0XTf0FoRHSALY1g9TQa9qv7kdad+y1lKfyO9wgSeMr+Qz
vJILzo2Hm4ajx50Db4zVU/prmjYRVpnsQaRaDVKMYPPh8kzdWjQGXb2fDITjDEYA
rgB8ttzTU3lOZ33kSk++Bh0+Ad6owaJIwHwo5IM8BGOgkt+uxVYCPo5b0VMjGvOe
nkyAQpZvlRa2rwaealPQ+jNB0WrothWl7C2h257HGceMqewZtDRPBGKvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPBzVHtr5aVUTXHTO9owvmZfJYeMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkdULwMw
TDsiMJ2IQdoKgP4Yb+FuU0jXlabEmLdOO4w1xJAr4GThe5bvKMJAXxccHGygFoFJ
QMAqtILrlouoRwnKOCekUCNYmc1Nrq0OBRoxf80fEbcYIqjuNLobzDwHFQ9dcUoo
6dDjOrE3kfmjBiQjKo0ZE8RH+1doQYRsmm269yCBbstDR97mZKxjUHe/Ep4+Pwx6
DTkoOAuCKLjUf7u+tZaTa0C5YtoAPlR18N2Xl3CN7s3w9/almSgiCvmQSkQOFnD+
hR47zwT/wFSlw6BT+bSwGYTUqtLW5mDC5tCwEQos/IBJeLL0+iw7R1GvGS/O5BVI
vulwkJIfTZgDDw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:53 2026 by rpki-client