Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: WdR/xaxdUjtfnZZT6gFELRikQsw0L4faXuj+RyhGB/o=
Subject key identifier: 53:57:FC:A9:7C:09:10:B5:D0:B8:15:C8:E8:8E:6C:F2:76:C1:4F:D3
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 01A17D3C444893112BBB3CD41A8B0C07BDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 1363
Signing time: Tue 27 Oct 2026 12:01:03 +0000
Manifest this update: Tue 27 Oct 2026 12:01:03 +0000
Manifest next update: Wed 28 Oct 2026 12:01:03 +0000
Files and hashes: 1: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (hash: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: OpuQ2oLkoStiOkCP+HQmcuroRqDSUKlchNyPjTLjLRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:44:48:93:11:2b:bb:3c:d4:1a:8b:0c:07:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Oct 27 12:01:03 2026 GMT
Not After : Oct 28 12:01:03 2026 GMT
Subject: CN=5357fca97c0910b5d0b815c8e88e6cf276c14fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:00:29:f9:ac:fa:85:0e:36:dc:bc:ff:eb:
6d:c0:be:b0:29:79:fe:d5:6d:1c:c6:46:de:88:ea:
9f:73:48:ad:ba:6b:c8:9e:70:22:4e:ea:80:60:10:
11:ce:a1:23:6c:83:5c:5a:08:19:c2:8f:90:f5:8e:
57:b8:a4:86:bb:89:f1:9c:25:73:44:9d:aa:ba:df:
52:6c:f5:a0:46:4c:67:3b:dc:0a:19:f2:bc:22:9e:
f4:83:f4:bb:33:d2:89:8d:eb:1c:50:76:8e:00:ea:
99:01:77:f8:9f:4e:b5:63:63:c7:d5:f0:f3:7d:16:
df:74:80:15:f4:31:79:37:5b:38:38:59:92:c3:0a:
d3:05:7d:eb:8a:50:0e:ee:69:54:f7:70:34:04:96:
53:e3:89:ba:9f:77:00:06:83:76:10:eb:ff:e3:6f:
0d:62:81:89:5b:42:cb:98:32:73:99:3b:34:18:c7:
1e:28:a5:c4:b5:9c:3b:91:7e:17:86:c2:97:95:a2:
89:db:bf:69:38:d1:2e:1c:f7:61:0f:d2:c8:a8:7b:
0f:89:11:c6:3a:a5:27:a2:5a:35:c4:c0:d8:46:16:
ed:63:5c:7f:88:50:48:16:7e:fe:d3:00:48:37:92:
90:6f:89:f2:ca:4e:05:f1:47:96:a6:e1:0f:bd:e9:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:57:FC:A9:7C:09:10:B5:D0:B8:15:C8:E8:8E:6C:F2:76:C1:4F:D3
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c7:ad:d9:ec:d8:24:83:3d:ba:69:16:8f:17:44:42:7a:6c:
c6:88:b5:ff:d2:a5:41:09:78:9e:e8:72:2d:73:f6:de:c4:cc:
79:be:2b:e5:b4:10:94:12:21:a4:17:77:65:c5:37:25:1f:a9:
df:7a:0d:92:66:18:c9:15:6f:43:87:5a:f6:99:9e:72:0c:dc:
76:85:15:29:35:94:14:23:24:5e:f9:5e:de:a5:4c:b7:4f:ab:
50:fa:24:8e:50:35:09:42:2f:c7:6e:01:79:29:b4:c8:db:e9:
8a:e7:fb:62:60:66:04:5b:cb:c0:9d:10:ac:7c:9e:b8:f6:09:
51:39:41:7c:ae:e8:91:76:d7:66:ce:52:d2:df:e0:3d:43:1c:
5d:fc:a1:c4:e0:80:fe:37:0a:7d:c8:57:eb:68:35:ac:f6:4e:
a0:6a:77:2e:5a:65:4a:e6:c1:15:0f:26:9e:b7:01:27:38:8d:
08:95:3d:d8:2a:8a:24:01:b6:2c:17:1e:9b:28:b1:89:15:38:
8f:99:c5:64:44:05:c1:a3:d6:70:02:02:8f:da:73:23:c3:96:
d0:12:11:4a:18:87:bd:d8:fe:26:8a:bc:ae:a4:5b:ef:f3:11:
a5:de:cd:5f:b9:6b:43:26:1b:e3:bf:9f:3e:7d:59:56:4c:6e:
c4:77:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:34:05 2026 by rpki-client