
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: fOnTi6DoQDgatJNo8wgAXYfJCltmC05CoW7sMOCYx1g=
Subject key identifier: 1D:34:5C:2F:BB:55:2A:C6:15:8F:13:16:CF:64:FE:14:A0:0C:F4:CA
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019FCBCB1061AE1AF8E3EDC12CC18DFC2FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0CD8
Signing time: Tue 04 Aug 2026 08:01:50 +0000
Manifest this update: Tue 04 Aug 2026 08:01:50 +0000
Manifest next update: Wed 05 Aug 2026 08:01:50 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: L/mUTe9VrnHhPzehk6OaDm52PY756B4eIiU/rB8qSvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:cb:10:61:ae:1a:f8:e3:ed:c1:2c:c1:8d:fc:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Aug 4 08:01:50 2026 GMT
Not After : Aug 5 08:01:50 2026 GMT
Subject: CN=1d345c2fbb552ac6158f1316cf64fe14a00cf4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:7f:b9:3e:d4:3d:7e:48:c6:ac:7a:b8:50:
27:fc:45:73:63:c1:93:e9:e2:43:22:49:cf:16:ce:
a2:95:37:c5:ab:67:56:5e:37:ad:3c:7d:27:65:ab:
9c:73:52:27:04:8b:39:28:9c:49:a2:09:12:5a:81:
a4:31:b0:0a:a8:51:ad:23:5f:84:98:07:42:f1:52:
34:2d:8b:32:87:7f:ef:b0:99:5f:d4:37:fb:1f:d8:
d1:82:4e:69:9a:57:2e:67:0a:1f:e4:46:48:50:b4:
a7:2f:1a:ca:01:0b:8f:c4:ab:ee:4e:4b:11:6f:d6:
59:16:cd:c5:81:e8:6e:ef:10:4f:8d:39:11:02:1c:
0d:53:a0:d6:df:63:75:fb:d9:6c:6a:e2:c4:d6:16:
60:68:52:b8:27:51:3f:46:86:22:05:c2:c1:f9:87:
ce:34:15:8a:a9:3b:98:da:0e:4c:df:c9:b9:1b:b6:
f5:31:48:61:6c:c7:06:c0:8a:0c:93:b3:79:dc:da:
4f:2c:4b:94:68:e6:02:fa:c1:97:e6:7d:2c:41:57:
e6:f5:12:8c:93:21:80:a2:34:7c:b4:f0:d2:31:f1:
5d:85:a3:af:2a:38:db:cb:e6:e2:e2:ac:5e:36:ab:
17:d2:9a:00:8c:8b:7c:3d:78:80:dd:fc:3e:3a:23:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:5C:2F:BB:55:2A:C6:15:8F:13:16:CF:64:FE:14:A0:0C:F4:CA
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:fd:8c:5a:57:57:9b:ee:3d:0f:71:76:ed:ee:61:d4:48:
bb:77:2d:12:0a:9c:c3:ba:e7:d8:91:28:8f:2b:08:4a:38:92:
28:53:c9:10:2c:9e:8d:e5:e0:37:ee:a4:31:e2:df:b4:65:75:
ff:3e:30:35:6c:b6:c3:5f:42:18:38:a4:a5:a4:1e:92:63:5d:
70:49:2a:d9:8e:96:28:08:ab:f2:90:89:b9:f8:cb:47:14:8d:
16:94:c4:ea:b6:b6:1a:6d:00:63:35:74:af:11:5b:06:27:53:
c5:04:ea:a1:fb:6c:ac:f9:71:f6:63:ac:fb:8c:38:28:ae:f3:
8b:11:de:c1:3d:29:c5:dd:d4:3d:cd:c7:ed:1e:0d:2d:c6:2b:
e5:07:ea:dd:3e:f0:92:16:42:8e:59:70:7c:c0:51:c3:1b:3b:
2d:c7:18:4c:2a:d6:e5:53:42:a9:85:27:57:26:e8:71:ef:c3:
75:ff:5e:10:f2:ac:24:6f:53:76:0c:b1:74:7a:76:a1:62:bc:
c3:db:6a:d8:0d:b6:d3:9e:5d:98:ce:b0:33:1f:d2:de:c9:79:
a0:6d:ff:3a:cf:9d:ba:63:25:8c:98:d4:70:cd:02:ee:16:eb:
a8:2a:97:84:98:b8:1a:a4:c9:1e:b3:18:fd:8b:37:cc:d7:50:
6a:e3:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:00:50 2026 by rpki-client