
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: RcvCHzIuTqgr+CTWjlHYhFIP5eE+rfII01VKoofPm6Y=
Subject key identifier: CB:BD:68:2C:59:25:3F:4B:04:F2:0D:94:5C:A9:BE:B2:99:AA:53:76
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01A0B57623BFC2439EFE71FCD977D317A358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0D51
Signing time: Fri 18 Sep 2026 17:00:13 +0000
Manifest this update: Fri 18 Sep 2026 17:00:13 +0000
Manifest next update: Sat 19 Sep 2026 17:00:13 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: ai9VhbMGb3ZnNID/kihQW2/t/uU7YVQudpmALQV5ig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:76:23:bf:c2:43:9e:fe:71:fc:d9:77:d3:17:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Sep 18 17:00:13 2026 GMT
Not After : Sep 19 17:00:13 2026 GMT
Subject: CN=cbbd682c59253f4b04f20d945ca9beb299aa5376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:28:03:6b:00:05:1e:59:f9:14:dc:6b:ef:
a4:3f:94:46:1b:e0:35:0c:7e:c7:a0:1e:f1:4b:75:
17:7a:01:a4:8a:38:f7:3f:66:b5:1e:aa:af:c4:27:
14:e4:75:dc:24:06:4d:a7:a6:b1:13:0b:4c:37:a3:
c0:93:f6:12:c6:4b:e0:68:c1:e3:93:c7:b2:78:db:
74:4e:86:c2:98:99:d8:a3:32:86:42:18:02:0f:3b:
88:41:c2:a7:98:e9:7c:ae:70:08:60:31:7d:02:4a:
63:0c:e1:f5:32:60:f1:2b:06:fa:6b:5b:4c:d1:e4:
a5:85:9c:d3:1b:0c:6e:79:76:ca:85:60:5d:44:d6:
df:1c:60:80:a6:ac:6b:3c:b0:37:39:1c:41:75:44:
a0:4d:5f:24:5c:77:65:06:c9:6d:d7:39:c1:36:68:
73:b5:e1:aa:11:c1:33:2b:0a:a4:62:46:a6:d0:06:
31:ea:92:0d:e3:0b:d5:14:38:ac:20:49:ee:b8:a1:
a8:39:f2:e5:11:e4:7c:69:a0:97:6b:ae:2f:93:49:
30:a4:74:f4:d0:f5:e0:9a:61:3a:f8:f7:07:33:95:
26:c3:09:b9:25:73:4f:c7:45:83:ea:ea:2f:17:e5:
ca:04:5d:26:d9:85:c1:14:fc:7e:fe:94:86:93:04:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BD:68:2C:59:25:3F:4B:04:F2:0D:94:5C:A9:BE:B2:99:AA:53:76
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1c:c0:a8:0b:7f:52:20:4c:28:c2:62:af:83:c8:c8:29:da:
06:d8:e8:35:2b:93:18:28:20:64:42:ad:ee:c6:43:ed:07:5f:
f3:48:ed:45:3b:64:e0:51:e3:42:d3:46:7a:d2:d7:da:66:db:
ab:23:e5:a5:7e:58:14:11:5b:34:c6:2e:ac:b7:52:15:11:10:
01:32:e2:e8:fa:de:f5:96:b7:ce:e3:3d:89:01:88:fa:91:ef:
b3:97:8c:0c:fa:f4:13:d6:65:8c:13:1e:a1:4f:28:83:5b:3d:
52:4d:02:c4:24:cb:bd:73:4c:69:b9:d8:8c:23:b1:bf:85:96:
b7:65:24:f8:ad:69:5d:d0:c6:f7:b4:92:c3:6a:86:39:c6:e1:
f1:2b:61:1c:27:8c:c6:29:a7:1c:b0:2d:6f:ec:e8:91:3d:79:
7a:cc:e7:99:d1:09:bc:f7:a3:26:c1:3c:fe:09:33:55:cf:fd:
c8:16:e2:80:10:33:1d:9c:7d:15:b7:80:34:2a:d8:44:84:64:
2a:c8:42:72:12:a6:72:5a:b5:00:6f:fd:4f:99:45:93:75:95:
32:79:a9:ab:5b:f0:f1:6f:fb:9f:e9:71:da:9a:ab:60:7c:6e:
6f:ef:71:95:81:e1:15:30:b0:d8:fa:19:51:5e:34:76:09:16:
1e:7e:b1:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1diO/wkOe/nH82XfTF6NYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYwOTE4MTcwMDEzWhcNMjYwOTE5MTcwMDEzWjAzMTEwLwYDVQQD
EyhjYmJkNjgyYzU5MjUzZjRiMDRmMjBkOTQ1Y2E5YmViMjk5YWE1Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36MoA2sABR5Z+RTca++kP5RGG+A1
DH7HoB7xS3UXegGkijj3P2a1HqqvxCcU5HXcJAZNp6axEwtMN6PAk/YSxkvgaMHj
k8eyeNt0TobCmJnYozKGQhgCDzuIQcKnmOl8rnAIYDF9AkpjDOH1MmDxKwb6a1tM
0eSlhZzTGwxueXbKhWBdRNbfHGCApqxrPLA3ORxBdUSgTV8kXHdlBslt1znBNmhz
teGqEcEzKwqkYkam0AYx6pIN4wvVFDisIEnuuKGoOfLlEeR8aaCXa64vk0kwpHT0
0PXgmmE6+PcHM5Umwwm5JXNPx0WD6uovF+XKBF0m2YXBFPx+/pSGkwQpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu9aCxZJT9LBPINlFypvrKZqlN2MB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxzAqAt/
UiBMKMJir4PIyCnaBtjoNSuTGCggZEKt7sZD7Qdf80jtRTtk4FHjQtNGetLX2mbb
qyPlpX5YFBFbNMYurLdSFREQATLi6Pre9Za3zuM9iQGI+pHvs5eMDPr0E9ZljBMe
oU8og1s9Uk0CxCTLvXNMabnYjCOxv4WWt2Uk+K1pXdDG97SSw2qGOcbh8SthHCeM
ximnHLAtb+zokT15esznmdEJvPejJsE8/gkzVc/9yBbigBAzHZx9FbeANCrYRIRk
KshCchKmclq1AG/9T5lFk3WVMnmpq1vw8W/7n+lx2pqrYHxub+9xlYHhFTCw2PoZ
UV40dgkWHn6xMw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:33:19 2026 by rpki-client