Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: 6nGc5aV8gCPU+n1P/TCrojFP/GDt+BzKM89bXL9zECU=
Subject key identifier: B4:4B:01:54:30:97:A2:E1:05:39:7B:6E:A3:FF:B9:50:FD:CE:27:84
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019D2628552AE4A3E615A90CAD2B938B73C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0A72
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 30edjYb7tGqLe+qkJY/2JqgeKGaHcDFhaq9AoQfFSB8=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:55:2a:e4:a3:e6:15:a9:0c:ad:2b:93:8b:73:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=b44b01543097a2e105397b6ea3ffb950fdce2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:30:86:ea:08:50:8d:d0:f7:53:48:20:74:
ec:3e:99:b4:29:ee:05:31:61:6f:76:11:ae:f3:fa:
aa:c3:a4:af:4f:d9:c0:13:bd:bf:05:de:79:12:15:
56:7f:98:8c:17:43:a3:e7:97:2c:62:07:95:ef:df:
16:46:ea:f5:db:ce:ac:9b:da:19:ca:bd:08:cb:de:
87:e1:23:14:6c:71:72:f1:d7:21:09:89:80:7e:0a:
71:8d:63:d5:2a:27:ae:f5:d5:e7:4e:7b:8e:1d:49:
69:9d:ec:ea:3c:9e:bf:eb:bb:6a:e1:a2:8c:d2:a2:
dc:a0:92:b7:2a:e4:94:6e:a7:c5:ea:2a:97:cd:da:
80:da:29:ea:30:5b:07:e0:aa:22:d6:90:44:b5:1d:
ee:69:0a:08:b8:6b:16:0d:42:fc:71:ec:c2:1a:63:
3c:92:1f:89:19:12:25:4d:91:c7:87:79:5b:98:c3:
de:63:3a:ed:f9:32:d7:75:78:94:6e:35:b3:32:42:
2a:1e:2f:f7:02:d1:25:4c:14:0e:56:40:43:ce:e0:
90:dd:87:f7:ce:ef:40:d1:64:c6:a5:3a:5b:47:74:
3e:67:3c:f0:40:7f:ea:a2:04:d1:eb:87:14:12:0c:
ad:76:dd:85:76:0d:e2:60:d3:3c:4b:95:71:d4:36:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:01:54:30:97:A2:E1:05:39:7B:6E:A3:FF:B9:50:FD:CE:27:84
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1e:92:5f:4c:e1:47:1d:a3:39:5f:e1:56:03:7e:a7:a2:c4:
5e:94:6d:67:8b:2c:71:69:5a:00:ea:ac:fb:b2:69:63:84:6a:
27:62:d5:8c:ba:1d:5c:5a:e4:00:da:48:19:bd:44:61:24:47:
c3:ea:29:ca:f6:e4:d8:b5:43:a7:93:14:2a:c9:7c:31:3c:cb:
56:50:1e:c3:d7:79:40:aa:67:44:8c:c6:a1:e3:ab:f8:a2:92:
e5:e9:02:46:f9:9b:aa:ee:aa:d0:3f:82:f1:fb:27:00:19:54:
17:d7:44:56:d8:b1:b5:fd:a1:f9:0b:ef:af:bb:7c:21:d1:22:
d0:25:e2:84:29:e0:77:40:50:f7:ce:4f:4d:72:b7:67:b2:46:
dc:7a:11:7d:3e:3d:c3:5b:91:6b:5e:3f:3d:f7:e5:e7:3e:64:
85:0d:b9:10:83:ec:d7:5d:76:40:82:50:22:fb:dd:dd:8f:3a:
bd:69:5b:bd:16:10:23:35:b1:b9:e9:9c:7f:cf:92:04:24:a9:
9b:02:8b:0b:41:ee:8a:18:b4:65:91:cf:6d:40:b3:a3:0c:b7:
f0:c0:57:0d:15:2f:b4:0f:d5:58:68:04:84:8b:4b:7f:e0:c2:
35:93:11:59:31:9e:36:73:3f:20:69:be:c8:3c:e3:f0:1a:0e:
34:39:5e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFUq5KPmFakMrSuTi3PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwMzI1MTgwMTEwWhcNMjYwMzI2MTgwMTEwWjAzMTEwLwYDVQQD
EyhiNDRiMDE1NDMwOTdhMmUxMDUzOTdiNmVhM2ZmYjk1MGZkY2UyNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNMwhuoIUI3Q91NIIHTsPpm0Ke4F
MWFvdhGu8/qqw6SvT9nAE72/Bd55EhVWf5iMF0Oj55csYgeV798WRur1286sm9oZ
yr0Iy96H4SMUbHFy8dchCYmAfgpxjWPVKieu9dXnTnuOHUlpnezqPJ6/67tq4aKM
0qLcoJK3KuSUbqfF6iqXzdqA2inqMFsH4Koi1pBEtR3uaQoIuGsWDUL8cezCGmM8
kh+JGRIlTZHHh3lbmMPeYzrt+TLXdXiUbjWzMkIqHi/3AtElTBQOVkBDzuCQ3Yf3
zu9A0WTGpTpbR3Q+ZzzwQH/qogTR64cUEgytdt2Fdg3iYNM8S5Vx1DaMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRLAVQwl6LhBTl7bqP/uVD9zieEMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmR6SX0zh
Rx2jOV/hVgN+p6LEXpRtZ4sscWlaAOqs+7JpY4RqJ2LVjLodXFrkANpIGb1EYSRH
w+opyvbk2LVDp5MUKsl8MTzLVlAew9d5QKpnRIzGoeOr+KKS5ekCRvmbqu6q0D+C
8fsnABlUF9dEVtixtf2h+Qvvr7t8IdEi0CXihCngd0BQ985PTXK3Z7JG3HoRfT49
w1uRa14/Pffl5z5khQ25EIPs1112QIJQIvvd3Y86vWlbvRYQIzWxuemcf8+SBCSp
mwKLC0Huihi0ZZHPbUCzowy38MBXDRUvtA/VWGgEhItLf+DCNZMRWTGeNnM/IGm+
yDzj8BoONDleLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:48 2026 by rpki-client