Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: 0Gzox4aq/CiR6FmtkutZB4gZDbiGa4xSZg42+4A8a1A=
Subject key identifier: 01:4D:CB:26:29:B5:69:36:C5:4A:08:AC:4B:5D:C1:C6:AA:81:F5:ED
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 019FA2295116BF4654FE45AE71ED96FB1F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 126D
Signing time: Mon 27 Jul 2026 06:00:44 +0000
Manifest this update: Mon 27 Jul 2026 06:00:44 +0000
Manifest next update: Tue 28 Jul 2026 06:00:44 +0000
Files and hashes: 1: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (hash: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: +kouwmYAuuFCRadD+Xu3F38nu5Ve5xYLVTPuB2rLFtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:51:16:bf:46:54:fe:45:ae:71:ed:96:fb:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Jul 27 06:00:44 2026 GMT
Not After : Jul 28 06:00:44 2026 GMT
Subject: CN=014dcb2629b56936c54a08ac4b5dc1c6aa81f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:52:83:1c:83:9e:91:98:b2:25:df:7d:8c:
c6:98:e9:47:86:1c:bd:af:60:38:db:e0:79:a0:26:
87:cc:27:db:11:4b:1c:ab:9c:1f:86:fe:e2:5e:34:
97:6f:ee:0c:ab:6f:1f:63:01:35:4d:e5:6c:65:61:
5f:fc:9e:0f:2b:33:b5:64:ce:76:fe:be:b7:8e:41:
f0:fc:f4:4e:b9:c4:00:38:d8:57:00:41:2c:33:d3:
8a:f7:b7:35:bb:6f:18:49:a2:25:03:22:a5:3e:20:
af:a7:65:d1:56:92:65:ed:f7:64:3b:af:e2:5d:13:
94:89:30:80:ab:9c:9c:9b:9e:46:89:54:44:80:fd:
be:3e:32:1d:78:e3:c2:16:87:6e:2f:c4:ca:2c:d7:
97:c4:c6:67:50:f2:b0:22:41:a5:06:5c:22:4c:6b:
48:6f:96:3a:5d:ed:1a:c0:3b:62:ff:cb:0e:42:58:
25:24:92:ed:b1:71:dc:2a:42:e3:a5:90:84:d8:fc:
9c:ec:da:f2:6e:51:87:2e:a0:91:a3:15:99:e6:d8:
99:6c:55:1b:41:0b:12:0b:bf:c9:30:fa:0c:15:af:
e6:40:dd:ef:48:d3:96:57:42:1d:dc:9c:17:1b:da:
73:63:80:a8:62:40:64:79:cd:40:73:a3:dd:2c:66:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:CB:26:29:B5:69:36:C5:4A:08:AC:4B:5D:C1:C6:AA:81:F5:ED
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3e:cf:3a:81:30:ce:ff:40:75:7c:fb:8a:ca:b6:df:16:bf:
34:70:b1:d9:e1:f3:c7:40:b5:5e:0e:53:aa:bc:a5:f0:02:b6:
d1:83:ba:57:b1:15:d2:a3:c2:23:f0:05:f2:a4:85:1f:65:81:
70:d6:1a:a4:e8:5e:87:70:f9:b3:29:da:ce:4c:57:d7:26:7d:
5a:ab:8b:08:14:ef:c1:45:2c:2b:40:c7:c0:22:6a:42:8c:a5:
e7:29:cc:46:31:e0:55:28:07:a2:22:40:6f:0d:7b:37:b2:a9:
0d:96:7f:f9:8c:c2:92:bd:cf:12:31:47:09:3a:f6:af:22:00:
d1:b6:b9:b8:34:a5:05:b1:6f:12:b8:4b:70:06:e4:45:c0:84:
63:f5:73:97:89:81:3f:c8:77:cb:a0:0c:d9:30:ed:24:16:4b:
f1:fa:60:8a:0c:a9:82:fd:03:da:66:31:ba:e0:ce:c6:c3:ba:
a8:08:ad:fb:02:6c:a3:02:cd:6f:85:12:d6:7e:96:9d:02:32:
54:4d:0f:90:b4:13:6c:58:f0:fb:74:af:f4:57:79:cd:92:15:
48:0b:00:38:2a:e5:d2:b3:4f:03:b5:d8:dd:49:cf:df:e0:88:
6f:d8:d5:56:76:a3:52:ab:71:57:5c:e8:74:da:14:4c:c1:b1:
1c:b7:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:22 2026 by rpki-client