Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: N8PA0THE5qAFnNMYeWNuaHYY2gPng5Twfid3vMSR3AI=
Subject key identifier: 5D:24:30:D2:8B:2B:15:2B:D2:25:97:29:AB:3D:2C:55:5A:64:CF:FC
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019EB5E939BB2F0840383E31BFC5FD60B5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0B41
Signing time: Thu 11 Jun 2026 09:00:21 +0000
Manifest this update: Thu 11 Jun 2026 09:00:21 +0000
Manifest next update: Fri 12 Jun 2026 09:00:21 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: LBtcKxZKH0fqeyyMLFEe83UYWQ4YS27MlfvfFY4dtWQ=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:39:bb:2f:08:40:38:3e:31:bf:c5:fd:60:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jun 11 09:00:21 2026 GMT
Not After : Jun 12 09:00:21 2026 GMT
Subject: CN=5d2430d28b2b152bd2259729ab3d2c555a64cffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:e7:90:fd:63:0a:f1:8d:3b:ab:75:3c:97:
87:da:59:d1:53:55:9d:fa:46:0f:84:58:36:61:ba:
b0:67:b1:02:a7:73:43:40:fd:9a:41:0b:62:89:e3:
85:c4:85:d3:f3:dc:f7:73:7c:30:a5:3e:6e:98:77:
91:84:e9:0e:74:d8:4f:7d:92:f4:bf:23:0c:d0:2c:
89:63:f7:5f:a0:78:8f:35:9b:d6:d8:41:33:03:8c:
8e:85:6d:f8:35:8f:cb:5c:e5:49:ae:87:9b:8a:b9:
6e:cb:6b:bd:f7:b4:d2:2d:30:ba:a0:a9:ea:58:07:
d5:db:01:f0:33:be:6d:49:15:b1:e4:7d:c5:13:0a:
eb:b3:eb:a4:b4:5f:38:0f:29:91:f9:70:bf:61:2e:
83:b2:05:60:a9:f6:3e:fe:fe:5c:df:69:3e:c9:e1:
f0:57:71:c6:ae:99:1b:eb:9b:6c:65:8f:47:73:da:
4f:ff:45:17:09:00:4f:24:50:2f:fa:21:04:b1:d4:
f4:94:04:0c:86:7d:cf:c0:c8:ec:61:91:cf:88:fa:
ce:87:3c:b4:a4:93:e8:24:66:07:ea:4f:70:38:af:
50:7a:36:b6:ec:65:83:78:09:40:48:c9:61:fe:e2:
96:f4:4d:45:21:f7:8c:f1:fb:96:1b:81:14:c9:fd:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:30:D2:8B:2B:15:2B:D2:25:97:29:AB:3D:2C:55:5A:64:CF:FC
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:86:41:2e:e3:44:6b:c1:83:bc:f3:63:87:93:02:84:30:
75:f6:3b:e8:e7:d0:dc:86:ce:71:ba:5d:ff:37:17:0f:76:c6:
3c:9a:5e:be:33:53:85:2f:64:71:59:bc:e3:b1:4b:c7:fd:e6:
07:50:e1:5a:0b:4a:8c:ef:aa:97:f0:eb:8e:c3:1a:87:5b:d8:
9d:80:ad:50:79:fa:b5:e5:ab:9f:b9:33:78:de:ba:ec:f0:24:
f4:24:82:9f:22:ed:fc:a0:39:b2:08:ba:ab:da:5d:f9:a1:f3:
a1:a1:a3:70:6f:41:31:12:bc:fa:ba:80:e3:51:f6:6d:98:fb:
9b:b7:4d:4e:4f:20:be:aa:30:67:86:02:d3:ad:3a:eb:7b:e7:
87:43:f7:3a:b5:70:a5:2b:2a:18:b9:48:c4:a7:a9:20:4c:8c:
ac:45:07:cf:fd:af:3e:7e:3d:0a:47:69:1d:e3:ba:b1:59:cd:
17:bc:27:2a:87:be:3b:7d:40:15:9e:11:64:1f:bd:16:c2:23:
ca:8b:fe:49:f3:75:1d:58:66:29:27:e2:9b:b0:70:d8:2c:ac:
65:2d:ed:ec:f2:44:df:67:23:3b:e5:93:cd:1f:0f:c7:62:95:
42:ea:0d:fd:70:3b:1f:73:c1:d4:ce:55:cb:9a:a0:72:68:a4:
d2:d0:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:13 2026 by rpki-client