Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: GdobAAQewGW/riNpf5S8Qd5NvPhMTk1LCqSK5fxAEAU=
Subject key identifier: E7:A1:35:6C:00:AF:87:A6:A3:B4:DA:3B:2C:73:EF:BF:86:0B:D0:04
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019CE290C140037DADC5D665E6582F115D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0A4F
Signing time: Thu 12 Mar 2026 15:01:03 +0000
Manifest this update: Thu 12 Mar 2026 15:01:03 +0000
Manifest next update: Fri 13 Mar 2026 15:01:03 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 4t/uNOIFpRAdTyymwF9SbjLZBe0raztZ7iVRi2Hwsyc=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:90:c1:40:03:7d:ad:c5:d6:65:e6:58:2f:11:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Mar 12 15:01:03 2026 GMT
Not After : Mar 13 15:01:03 2026 GMT
Subject: CN=e7a1356c00af87a6a3b4da3b2c73efbf860bd004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:82:b3:83:d4:df:86:4f:a8:36:13:e0:da:
51:8d:c3:e6:9f:4c:e0:93:af:19:79:08:ea:60:1c:
a5:8f:88:d2:60:13:d3:4b:aa:ee:25:1d:b0:8a:f7:
09:db:e4:ba:4f:4f:6f:03:f0:b8:69:09:a8:54:9b:
56:26:33:d7:1f:14:0a:98:86:0b:b3:22:80:7d:af:
69:3c:95:b3:d3:99:ee:88:3b:1a:bd:d5:ff:50:93:
00:4a:1f:14:59:a7:b8:0a:07:5c:8a:d0:af:f1:31:
00:44:35:c4:40:79:82:07:72:9d:f8:0f:ea:24:f1:
19:ea:aa:f2:bf:2a:a3:1e:b8:93:7f:c8:a2:1d:6b:
d9:b1:44:e8:f4:4c:9b:3e:e6:8a:de:7f:68:a2:9b:
02:0a:a3:2d:82:78:90:c9:e2:2b:58:2f:19:71:05:
e9:88:9d:dc:70:3f:95:d0:66:8c:d9:48:82:64:1d:
10:17:24:b0:25:fd:bb:c3:46:05:e4:11:c3:3b:3a:
ff:78:7a:ab:03:1b:6e:c1:b1:5c:ab:49:12:3a:6b:
ef:66:05:b0:20:ff:fe:1a:16:b9:e6:50:11:29:8a:
ec:55:8c:af:43:26:c6:25:79:65:8d:50:ce:35:0e:
31:9a:e7:fa:24:70:62:4f:b1:16:96:67:e9:df:0f:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:35:6C:00:AF:87:A6:A3:B4:DA:3B:2C:73:EF:BF:86:0B:D0:04
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fd:36:4f:fb:99:91:af:97:c8:c0:87:95:1d:be:24:e3:7e:
b2:88:a5:8a:02:94:bf:0c:bf:a5:ce:1e:3e:16:54:de:2c:7b:
7a:0a:40:87:81:73:20:3f:10:9c:9f:07:89:d3:bb:84:ce:78:
7c:7c:e5:63:5c:b4:68:bd:b0:47:c3:1e:32:38:43:29:4f:47:
fb:a8:64:0e:20:9f:7f:9d:cb:42:f5:13:e5:42:fd:7d:28:99:
b8:bd:b3:29:c9:d7:5b:2d:e8:1a:51:f8:f6:60:68:57:25:cf:
4f:02:cb:d4:48:8d:20:d6:1c:bd:9b:70:5f:62:7f:4e:fd:7c:
c1:71:0f:2e:11:dc:10:11:00:7c:2a:34:86:ac:74:9a:8e:1c:
98:84:16:a8:c0:d3:c8:b3:60:f6:46:c3:a6:bd:f2:2a:12:87:
6f:39:0b:f6:1d:6f:1f:f9:cb:28:4c:0b:b8:14:bf:08:56:9d:
00:f3:2d:82:af:88:7e:9d:a6:0f:95:e7:2b:14:1f:ee:28:41:
e5:73:8c:be:90:78:24:bf:9c:23:2e:8e:ab:e3:27:40:36:1c:
7d:18:07:d3:20:81:ed:ac:0a:04:f2:22:99:7d:cc:60:2d:bb:
56:14:ba:90:36:f6:d0:69:1b:5d:52:82:5d:ae:b4:e1:69:07:
a3:8e:85:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzikMFAA32txdZl5lgvEV0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwMzEyMTUwMTAzWhcNMjYwMzEzMTUwMTAzWjAzMTEwLwYDVQQD
EyhlN2ExMzU2YzAwYWY4N2E2YTNiNGRhM2IyYzczZWZiZjg2MGJkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXKCs4PU34ZPqDYT4NpRjcPmn0zg
k68ZeQjqYBylj4jSYBPTS6ruJR2wivcJ2+S6T09vA/C4aQmoVJtWJjPXHxQKmIYL
syKAfa9pPJWz05nuiDsavdX/UJMASh8UWae4CgdcitCv8TEARDXEQHmCB3Kd+A/q
JPEZ6qryvyqjHriTf8iiHWvZsUTo9EybPuaK3n9oopsCCqMtgniQyeIrWC8ZcQXp
iJ3ccD+V0GaM2UiCZB0QFySwJf27w0YF5BHDOzr/eHqrAxtuwbFcq0kSOmvvZgWw
IP/+Gha55lARKYrsVYyvQybGJXlljVDONQ4xmuf6JHBiT7EWlmfp3w9e7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOehNWwAr4emo7TaOyxz77+GC9AEMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav02T/uZ
ka+XyMCHlR2+JON+soiligKUvwy/pc4ePhZU3ix7egpAh4FzID8QnJ8HidO7hM54
fHzlY1y0aL2wR8MeMjhDKU9H+6hkDiCff53LQvUT5UL9fSiZuL2zKcnXWy3oGlH4
9mBoVyXPTwLL1EiNINYcvZtwX2J/Tv18wXEPLhHcEBEAfCo0hqx0mo4cmIQWqMDT
yLNg9kbDpr3yKhKHbzkL9h1vH/nLKEwLuBS/CFadAPMtgq+Ifp2mD5XnKxQf7ihB
5XOMvpB4JL+cIy6Oq+MnQDYcfRgH0yCB7awKBPIimX3MYC27VhS6kDb20GkbXVKC
Xa604WkHo46FLg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 23:13:15 2026 by rpki-client