Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: uxpHoXlx+562jpjIM6WfUKgFayqO3fMMgq5TcMwFF3k=
Subject key identifier: 7C:9F:64:02:E8:7C:04:4B:F3:FA:1D:E2:DB:0C:FB:13:1F:9E:57:B0
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019D3752FFA5E935F4C1F32DE5644C84237C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0B82
Signing time: Sun 29 Mar 2026 02:01:19 +0000
Manifest this update: Sun 29 Mar 2026 02:01:19 +0000
Manifest next update: Mon 30 Mar 2026 02:01:19 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: eOIJCtzKWajXgeHzzMq0iJ8YPwAI/NRxQHDmE1j8mdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ff:a5:e9:35:f4:c1:f3:2d:e5:64:4c:84:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Mar 29 02:01:19 2026 GMT
Not After : Mar 30 02:01:19 2026 GMT
Subject: CN=7c9f6402e87c044bf3fa1de2db0cfb131f9e57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:4f:55:cc:7c:ea:e3:f2:06:0c:68:4d:95:
14:d0:ff:55:9d:86:fd:b5:4b:b6:f3:8a:13:16:e8:
87:9d:6f:96:73:52:79:be:30:04:8e:39:01:eb:c1:
1a:95:fb:65:f8:d4:c5:26:4e:04:1f:9f:5e:9d:d4:
6f:93:73:71:b4:52:d3:2d:1d:c3:6f:42:37:85:c5:
26:4e:8f:06:d7:37:0d:b1:21:17:56:d9:d5:ec:89:
ea:91:f2:da:bd:e8:59:a7:db:51:d7:8c:63:1f:a0:
34:d3:4c:ea:b7:8d:bc:6c:80:88:cb:f6:5b:43:ed:
6f:8a:c2:85:be:ec:f4:78:62:2a:d1:c1:56:a0:f3:
7e:16:5d:f1:30:be:c9:56:d1:79:1f:4e:a2:55:5e:
cd:d1:6a:72:f8:0f:33:27:4d:c8:33:6c:d3:a1:a3:
01:ef:10:05:5c:c2:88:d6:0a:5c:dd:38:65:23:33:
45:50:6f:85:fe:57:74:1b:2a:7a:c5:0f:79:d2:85:
d2:4e:ca:d4:71:c1:44:e1:fe:4f:5b:dd:31:d8:60:
5f:9b:c7:b5:d0:18:14:84:c6:c8:bc:7b:10:44:a9:
a8:0d:df:4d:34:87:a5:b5:15:52:34:f1:d2:aa:83:
10:33:90:79:44:65:87:3e:c7:8a:6b:74:e5:92:79:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:64:02:E8:7C:04:4B:F3:FA:1D:E2:DB:0C:FB:13:1F:9E:57:B0
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:5a:39:9e:b7:53:db:d1:96:28:a5:9e:95:66:1f:b0:2f:
ef:d7:48:e2:51:fe:e7:04:9e:ec:08:11:77:e0:8b:74:da:e6:
87:3e:d3:06:71:07:99:20:fb:0c:02:34:3e:4e:29:57:67:4d:
27:71:e3:1d:44:6f:4c:1f:4d:e5:90:4f:e2:60:f7:33:6e:6f:
da:fd:6f:21:4f:f9:f3:80:e1:f3:a8:1e:49:b4:3d:31:ca:98:
43:ea:ca:74:05:1d:ae:f4:58:90:81:83:ba:1e:4d:94:f5:ae:
53:2f:e8:48:f2:2b:f9:92:39:44:c9:70:36:50:56:99:0e:90:
89:4a:d0:1a:bd:83:04:e1:24:c6:8d:19:ae:0d:35:1c:f2:aa:
ff:38:7b:93:e8:13:ae:c9:f6:57:b1:e0:a4:d7:08:28:25:17:
a5:fa:5e:7f:a0:6b:03:16:7f:e4:d6:13:9d:7b:d4:8d:26:69:
9a:45:7d:c4:96:67:06:17:8c:fd:80:91:4e:ff:78:fe:fa:f3:
f4:e9:68:64:a6:c7:ce:b0:d6:c3:79:86:1e:57:ac:66:05:e9:
82:6d:2d:e8:42:f7:6a:a3:68:56:f1:82:54:50:e4:dd:24:74:
dc:00:56:6d:3e:7d:99:3c:50:2c:04:fe:4e:1a:5a:0b:ad:67:
58:6b:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:09 2026 by rpki-client