Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: 0Mk2ryoob5DvnYiHkYRGz6GNZVN9k0yMLO1Vlp0nJdM=
Subject key identifier: CC:18:FD:69:31:98:3E:C1:39:F9:C6:1D:FF:21:10:D6:66:36:9B:A0
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 019D382E94280742985B74B60E81EC9BCE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 112D
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (hash: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: g1IZyaKTLyRoNmX4hF8BRCKuDy4/5x1ZG3FhLK1/ahg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:28:07:42:98:5b:74:b6:0e:81:ec:9b:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=cc18fd6931983ec139f9c61dff2110d666369ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:73:26:54:04:5a:9e:49:21:16:d0:ee:6c:
e8:93:23:7c:68:03:f8:85:0c:4d:64:b5:f3:f1:6d:
55:89:5a:32:d9:36:4e:28:84:5a:47:26:a6:45:38:
15:f1:17:5f:2b:66:fd:6f:60:d5:a9:ed:37:1b:91:
9d:c3:3f:e5:ad:65:3b:03:be:08:de:8c:0c:cd:ea:
aa:96:5f:dd:63:19:f1:08:99:4b:c1:5b:b8:86:0c:
6f:f1:bf:a0:2a:06:c7:3c:8e:85:c9:4c:0a:27:63:
fd:32:3f:b1:d1:97:c1:00:a6:04:43:61:2f:55:b7:
11:fa:4c:10:e6:6b:08:6b:e0:35:a5:17:09:21:00:
74:54:87:59:1e:c3:fc:6e:1a:a2:32:43:c9:f4:6e:
38:d6:7c:fc:8b:58:f5:c0:0d:2e:d5:a0:62:e8:9c:
8f:f5:a4:a5:53:8e:39:bd:79:b3:11:43:c3:21:63:
71:32:28:9f:7c:45:ae:51:1c:f7:04:d5:b3:cd:65:
83:39:7c:69:be:75:53:cd:b0:ce:00:14:6a:ba:c1:
57:16:0f:3f:69:9e:d7:1f:5e:d3:ea:4d:85:09:ce:
04:c6:60:3d:18:93:9e:66:36:79:64:97:cc:c3:9b:
1f:55:4f:ed:42:a4:9d:3b:b2:0d:9e:d9:9d:75:35:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:FD:69:31:98:3E:C1:39:F9:C6:1D:FF:21:10:D6:66:36:9B:A0
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:80:1e:cb:17:19:ac:e0:0d:5c:26:ee:92:e4:09:38:a2:
ba:bb:f1:39:a4:aa:0e:32:7b:67:22:b9:c8:27:e7:51:16:a7:
3d:71:7d:8b:18:51:01:ac:47:c4:70:b2:22:fc:f1:26:12:2d:
89:df:0e:a5:b0:26:b9:8a:23:58:26:ea:24:19:6d:15:42:0d:
47:29:7c:44:66:9d:87:25:22:5f:80:a9:30:44:82:68:b0:9f:
d2:43:1f:94:b4:bc:86:16:e3:58:6a:98:a9:92:9c:c2:63:52:
65:91:0d:b0:fd:fb:c2:0c:de:73:92:05:bd:d4:22:0b:b3:f4:
e8:38:78:d8:d2:bc:0e:d2:f9:b4:84:92:37:06:2c:a9:c0:6a:
29:d9:07:4f:dc:b8:9b:c0:91:28:5e:b0:b2:dc:19:ec:28:49:
3e:69:b7:0b:1e:db:ba:11:d7:f6:fc:e6:34:cc:ea:50:e1:84:
da:18:30:5e:4d:d4:39:dd:a3:23:31:91:ad:dd:05:c4:ee:d8:
09:00:0f:95:8f:34:ec:1d:15:9b:0e:b5:07:ee:7e:01:23:ea:
66:74:24:bc:da:40:a9:22:d7:b3:3d:0c:be:33:54:ba:23:6d:
9c:ec:af:9b:76:43:6e:4d:ab:64:0f:6a:68:90:4b:e3:18:7f:
a7:af:65:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpQoB0KYW3S2DoHsm84hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDAwYjgxZTllZDRiMmE3MDJhMWVmNWY4NTJlMGU3Njll
ZTEwZTIwHhcNMjYwMzI5MDYwMTA5WhcNMjYwMzMwMDYwMTA5WjAzMTEwLwYDVQQD
EyhjYzE4ZmQ2OTMxOTgzZWMxMzlmOWM2MWRmZjIxMTBkNjY2MzY5YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnNzJlQEWp5JIRbQ7mzokyN8aAP4
hQxNZLXz8W1ViVoy2TZOKIRaRyamRTgV8RdfK2b9b2DVqe03G5Gdwz/lrWU7A74I
3owMzeqqll/dYxnxCJlLwVu4hgxv8b+gKgbHPI6FyUwKJ2P9Mj+x0ZfBAKYEQ2Ev
VbcR+kwQ5msIa+A1pRcJIQB0VIdZHsP8bhqiMkPJ9G441nz8i1j1wA0u1aBi6JyP
9aSlU445vXmzEUPDIWNxMiiffEWuURz3BNWzzWWDOXxpvnVTzbDOABRqusFXFg8/
aZ7XH17T6k2FCc4ExmA9GJOeZjZ5ZJfMw5sfVU/tQqSdO7INntmddTVZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwY/WkxmD7BOfnGHf8hENZmNpugMB8GA1UdIwQY
MBaAFLUAC4Hp7UsqcCoe9fhS4Odp7hDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYt
ZDQxZTAzNTkyMzM1LzEvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wZGY3ZjMtYTQ5Mi00ZDZmLWIzNmYtZDQxZTAzNTkyMzM1
LzEvdFFBTGdlbnRTeXB3S2g3MS1GTGc1Mm51RU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC6AHssX
GazgDVwm7pLkCTiiurvxOaSqDjJ7ZyK5yCfnURanPXF9ixhRAaxHxHCyIvzxJhIt
id8OpbAmuYojWCbqJBltFUINRyl8RGadhyUiX4CpMESCaLCf0kMflLS8hhbjWGqY
qZKcwmNSZZENsP37wgzec5IFvdQiC7P06Dh42NK8DtL5tISSNwYsqcBqKdkHT9y4
m8CRKF6wstwZ7ChJPmm3Cx7buhHX9vzmNMzqUOGE2hgwXk3UOd2jIzGRrd0FxO7Y
CQAPlY807B0Vmw61B+5+ASPqZnQkvNpAqSLXsz0MvjNUuiNtnOyvm3ZDbk2rZA9q
aJBL4xh/p69lqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:36 2026 by rpki-client