Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: mekEqk0+06gDuoIGKfxIztev1ZpJznk7EOUYKuo0Wg8=
Subject key identifier: 57:B9:76:D0:DE:66:EE:B3:B9:FE:13:79:FC:70:6A:83:45:A6:3E:1D
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01A1A8CBB20E47B25D940777ED2B24EFCBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0DCF
Signing time: Wed 04 Nov 2026 23:01:24 +0000
Manifest this update: Wed 04 Nov 2026 23:01:24 +0000
Manifest next update: Thu 05 Nov 2026 23:01:24 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: Ri3bHUW3beOVn9l1/l+iyKA6OKGVr8L5NHrNr4lQpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:b2:0e:47:b2:5d:94:07:77:ed:2b:24:ef:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Nov 4 23:01:24 2026 GMT
Not After : Nov 5 23:01:24 2026 GMT
Subject: CN=57b976d0de66eeb3b9fe1379fc706a8345a63e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:63:74:af:cc:e2:29:d8:e5:f8:58:2f:b0:
9a:14:73:2c:9b:8e:cc:de:8b:2a:19:06:47:c5:6d:
c6:31:6b:a3:4d:b5:9d:d2:12:da:0e:9d:d3:da:14:
45:60:f4:34:cf:ca:57:ba:80:4e:58:5c:bd:7b:93:
2f:14:71:66:41:dc:a6:65:db:d2:6c:e1:9e:62:3a:
99:e4:33:e6:ec:5e:57:35:2d:e6:58:54:2b:63:5f:
b9:f3:88:c0:3b:de:cd:f6:7d:82:50:92:5c:8b:34:
02:3c:43:6b:f8:98:40:36:9e:89:16:ee:db:c8:3e:
70:ba:1c:25:5b:fc:10:7d:da:56:34:c0:55:e5:d4:
a2:c0:f9:1f:91:99:1d:a2:13:df:2b:fc:0e:26:c7:
9b:6a:bf:16:23:08:d7:b4:7d:f4:51:d2:72:3e:2f:
ad:3b:ee:e8:44:7f:5e:6d:86:a5:98:e2:25:a2:e9:
2b:f2:44:5b:95:74:34:cd:d6:c1:0a:74:b7:71:ea:
4b:20:9a:33:36:a8:60:9a:2b:ab:73:43:bb:fa:56:
4a:94:36:80:f5:64:4e:fb:2e:19:ba:58:21:22:1b:
dc:e5:7a:09:6a:69:45:e4:e2:be:20:7a:30:85:c6:
44:4b:4c:91:34:fe:f1:60:bf:48:70:c7:00:4e:bd:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:76:D0:DE:66:EE:B3:B9:FE:13:79:FC:70:6A:83:45:A6:3E:1D
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f2:3b:1b:fc:0e:50:fa:cd:27:da:97:0a:3a:fc:c3:f9:e3:
4a:0b:b2:20:9a:f9:f0:b0:7c:c7:49:c4:da:30:4b:7c:a6:b4:
fb:70:1a:79:0c:85:64:a8:b2:dd:a3:23:e0:75:a3:90:2b:24:
c5:f1:2b:00:38:e7:7e:3c:11:17:57:a5:e8:f4:53:19:dc:23:
8b:fd:81:3f:f8:d4:4e:5d:f2:20:1b:6a:e2:16:1b:93:0e:d1:
a7:1a:ac:8a:a4:9d:11:01:a8:97:f8:4f:cf:72:f2:fc:7b:a2:
81:7f:94:49:94:4d:c6:0f:ef:c2:9e:1b:bf:8c:5a:fe:14:4b:
d3:6f:99:0e:61:a2:a3:67:76:42:3d:36:19:27:e4:0c:cf:54:
9e:76:80:b6:4c:aa:3a:35:29:0d:54:77:f6:45:f5:90:ab:9b:
02:9d:fe:86:b1:ab:0a:8d:5a:7d:87:61:1b:da:09:26:98:e3:
22:80:0b:93:fa:5d:00:b1:63:a2:85:b4:79:bd:5b:eb:76:0c:
45:5a:5e:ed:43:7a:d6:17:77:7e:67:e8:ab:37:1e:c2:7e:51:
df:ee:42:01:52:98:fc:bf:ae:52:03:74:03:5c:60:3a:a4:52:
55:b5:44:a0:fa:6c:e1:9b:32:af:1d:f3:15:0a:81:2a:e6:9c:
ff:6b:6c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoy7IOR7JdlAd37Ssk78u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYxMTA0MjMwMTI0WhcNMjYxMTA1MjMwMTI0WjAzMTEwLwYDVQQD
Eyg1N2I5NzZkMGRlNjZlZWIzYjlmZTEzNzlmYzcwNmE4MzQ1YTYzZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+5jdK/M4inY5fhYL7CaFHMsm47M
3osqGQZHxW3GMWujTbWd0hLaDp3T2hRFYPQ0z8pXuoBOWFy9e5MvFHFmQdymZdvS
bOGeYjqZ5DPm7F5XNS3mWFQrY1+584jAO97N9n2CUJJcizQCPENr+JhANp6JFu7b
yD5wuhwlW/wQfdpWNMBV5dSiwPkfkZkdohPfK/wOJsebar8WIwjXtH30UdJyPi+t
O+7oRH9ebYalmOIloukr8kRblXQ0zdbBCnS3cepLIJozNqhgmiurc0O7+lZKlDaA
9WRO+y4ZulghIhvc5XoJamlF5OK+IHowhcZES0yRNP7xYL9IcMcATr06uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe5dtDeZu6zuf4TefxwaoNFpj4dMB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPI7G/wO
UPrNJ9qXCjr8w/njSguyIJr58LB8x0nE2jBLfKa0+3AaeQyFZKiy3aMj4HWjkCsk
xfErADjnfjwRF1el6PRTGdwji/2BP/jUTl3yIBtq4hYbkw7RpxqsiqSdEQGol/hP
z3Ly/HuigX+USZRNxg/vwp4bv4xa/hRL02+ZDmGio2d2Qj02GSfkDM9UnnaAtkyq
OjUpDVR39kX1kKubAp3+hrGrCo1afYdhG9oJJpjjIoALk/pdALFjooW0eb1b63YM
RVpe7UN61hd3fmfoqzcewn5R3+5CAVKY/L+uUgN0A1xgOqRSVbVEoPps4Zsyrx3z
FQqBKuac/2tsoQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:05:00 2026 by rpki-client