Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: QPIY8gCl8qoKwNVaaK798xHcuzDCWpHR3bVWv6F//xU=
Subject key identifier: C5:69:B9:EA:AF:89:A3:F5:23:A8:40:6C:FF:FE:E7:8F:03:D6:3D:40
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01A089429BDFC09887A067E7BA9E6562C7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0C33
Signing time: Thu 10 Sep 2026 03:00:38 +0000
Manifest this update: Thu 10 Sep 2026 03:00:38 +0000
Manifest next update: Fri 11 Sep 2026 03:00:38 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: wqwaX3zcIKoPbHDsCT9DRMyJNzNA7VGoXCvbJqwzzJw=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:9b:df:c0:98:87:a0:67:e7:ba:9e:65:62:c7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Sep 10 03:00:38 2026 GMT
Not After : Sep 11 03:00:38 2026 GMT
Subject: CN=c569b9eaaf89a3f523a8406cfffee78f03d63d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:db:d8:1d:d0:3a:72:c2:7b:0d:e8:17:1e:
d8:e9:41:ee:4a:65:c4:4a:b7:78:26:7f:b4:7d:ad:
e1:46:95:ff:99:cd:02:9a:9a:4c:d3:25:8e:06:ef:
62:87:c8:63:6b:01:55:55:a6:9f:5e:34:ef:07:3a:
a3:49:62:4f:c1:fc:92:a0:38:33:99:02:2d:0b:dc:
58:03:22:79:5b:d4:1a:3d:00:59:1f:16:a5:6a:1d:
b3:ae:0c:75:d4:6a:66:c7:17:da:c0:2d:a6:8c:98:
bd:90:87:bb:aa:ac:c4:5a:92:c2:c4:38:2d:1a:0a:
29:22:a5:db:b9:b4:9b:61:45:7d:da:e5:4c:d3:f3:
e4:3c:40:2a:a9:78:01:ff:82:c8:4a:c6:e6:bb:2c:
38:23:ee:20:10:4b:8f:b8:80:fc:ff:8b:73:53:95:
a2:86:48:33:86:a8:3e:47:d1:f7:3b:8e:ff:52:8d:
14:ed:01:f0:86:80:b6:14:25:49:16:75:47:7b:c6:
e6:b2:be:01:b2:6d:0b:3a:7d:d3:80:63:7d:f7:3c:
31:a8:5b:b5:0d:78:f3:d6:c3:a5:99:37:cb:c5:67:
9b:3f:34:80:67:67:cf:d4:54:91:0e:fc:4a:e5:ee:
33:97:e4:e6:fe:0a:0a:26:67:f8:c7:6b:1c:80:2c:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:69:B9:EA:AF:89:A3:F5:23:A8:40:6C:FF:FE:E7:8F:03:D6:3D:40
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:60:18:94:de:66:47:0a:7e:ae:10:e4:5e:2f:5a:ad:d9:9b:
d2:be:81:06:66:60:98:34:2a:27:7a:ae:89:d9:97:c7:f6:02:
9d:ca:50:cc:6a:cf:c6:df:41:36:05:48:ca:62:a5:c7:80:a1:
23:40:84:a8:64:e5:c6:3a:93:54:b1:44:a8:9c:18:80:96:57:
97:ba:ee:9b:ff:b6:be:13:23:ea:d2:bf:26:fa:63:e4:34:15:
7d:f1:fc:48:33:9d:49:67:d5:4b:1e:47:20:fc:a9:5f:00:b7:
55:14:b6:b0:e7:b7:5d:6e:27:5f:37:09:ee:44:9f:b3:45:d7:
b3:72:f6:ae:26:ba:21:ec:13:e0:a8:c4:4b:4c:c6:7b:df:0b:
af:9d:07:93:ae:b6:b5:eb:3b:5d:16:f0:e4:6e:e2:a2:cb:4f:
9e:eb:5a:2b:59:c3:93:fd:ac:f6:c2:31:92:28:77:49:c4:4c:
b2:a0:dd:9b:a8:5e:87:07:a3:87:4b:c5:59:8e:b7:39:c6:44:
10:75:14:12:38:64:71:3c:4f:20:e1:7f:a9:1b:5f:81:67:48:
30:9d:35:e0:b9:63:de:96:79:4a:19:77:96:e2:3e:8d:68:27:
fa:5e:c8:ae:10:c4:75:ec:70:41:d0:c5:e0:17:8f:f6:08:a0:
8a:a0:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:27 2026 by rpki-client