Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: Mkv2QPmwmQRRiLBARNoGcIuBIVo0zfRNSCu9cQZZLQo=
Subject key identifier: 39:23:78:37:61:C3:F3:D3:2A:61:14:89:BD:A1:A5:FD:61:FA:60:9C
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01A0E7E3F61E68F939C00AF687B91993197E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0C64
Signing time: Mon 28 Sep 2026 12:01:11 +0000
Manifest this update: Mon 28 Sep 2026 12:01:11 +0000
Manifest next update: Tue 29 Sep 2026 12:01:11 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 7SOoMcuNoYVbKdoirdoiNNC/SfJKq2+GnKqVsuJF8T8=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:f6:1e:68:f9:39:c0:0a:f6:87:b9:19:93:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Sep 28 12:01:11 2026 GMT
Not After : Sep 29 12:01:11 2026 GMT
Subject: CN=3923783761c3f3d32a611489bda1a5fd61fa609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:f4:ba:46:6a:1c:bc:88:ec:c3:df:44:c8:
99:26:6b:68:ec:95:6e:62:97:b2:f6:9d:28:e7:92:
ba:a5:b7:3a:8b:5a:cf:12:37:11:26:e9:b8:59:8d:
30:ab:98:35:db:5e:b2:1f:bd:5b:a0:2b:00:3d:57:
5b:c3:b5:42:3c:72:59:83:d5:80:ca:d7:f9:5d:e1:
88:23:f5:22:f8:d3:54:f9:e5:fd:c7:db:fd:94:ed:
68:56:e5:5f:73:0e:8e:1d:fc:ee:a2:bd:b3:a3:6a:
18:e6:04:ff:ad:7c:62:58:dd:2c:0e:19:af:96:03:
6a:7f:11:2f:89:18:15:b1:97:ac:c6:ea:79:b4:ef:
ef:a5:5d:02:31:1a:91:9e:49:de:4d:cb:71:bf:68:
f3:26:ba:90:0a:e6:16:13:6d:be:91:49:78:71:04:
33:81:36:86:2e:93:56:58:47:72:3a:ab:99:7d:ae:
60:4d:2b:f6:64:54:ef:4a:c4:47:c5:9e:f6:84:f2:
bc:0c:55:33:75:29:c6:e8:c6:bd:5a:ee:ac:a4:14:
98:27:9c:22:23:3a:1a:39:00:16:0c:47:47:39:10:
47:5b:ea:a5:5b:a8:82:d1:f2:97:4c:1a:94:a7:ba:
7b:6b:b3:4a:63:65:49:6f:bc:13:a0:4b:95:92:f6:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:78:37:61:C3:F3:D3:2A:61:14:89:BD:A1:A5:FD:61:FA:60:9C
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:64:fe:35:f2:1b:30:8b:b9:9d:a4:b8:b2:35:ef:34:7d:78:
0c:c4:b9:f3:f8:7f:5c:f6:49:c4:17:f9:4b:e3:eb:6e:a7:b3:
fd:a6:0e:ac:13:6d:21:23:94:55:98:f7:d9:48:b3:b0:d4:cb:
18:c6:6e:1d:c4:72:de:98:12:14:6f:43:43:45:68:b1:4e:8a:
ef:39:5c:5f:fd:eb:a8:4c:3c:73:ba:d8:14:36:cd:4e:0d:50:
51:ee:a1:b1:cd:4f:66:1e:6e:bb:7b:3d:37:0f:6f:e7:d7:86:
1f:f5:5e:d3:20:e7:f6:f8:94:8c:6a:19:f7:48:08:19:a2:22:
84:da:fc:c0:e5:12:17:94:be:ae:8d:75:75:9b:30:16:ae:8e:
12:11:66:54:37:33:62:df:bd:3a:1f:c1:53:65:3b:12:73:2d:
50:c4:47:e3:10:50:eb:fe:a5:97:50:af:ba:70:4a:ec:b6:50:
1b:e4:d6:76:2f:b5:4f:43:c4:f0:ca:3c:42:42:32:8d:a3:84:
10:f2:f1:e3:aa:13:86:93:b0:76:cc:1f:40:f6:7e:dd:86:2e:
44:86:37:6e:32:39:f4:28:a9:cd:ed:7d:34:19:37:0b:02:e1:
cf:9d:2a:39:64:5c:e1:69:01:1c:a7:ae:f0:ca:65:b1:ff:15:
49:c1:49:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDn4/YeaPk5wAr2h7kZkxl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwOTI4MTIwMTExWhcNMjYwOTI5MTIwMTExWjAzMTEwLwYDVQQD
EygzOTIzNzgzNzYxYzNmM2QzMmE2MTE0ODliZGExYTVmZDYxZmE2MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSL0ukZqHLyI7MPfRMiZJmto7JVu
Ypey9p0o55K6pbc6i1rPEjcRJum4WY0wq5g1216yH71boCsAPVdbw7VCPHJZg9WA
ytf5XeGII/Ui+NNU+eX9x9v9lO1oVuVfcw6OHfzuor2zo2oY5gT/rXxiWN0sDhmv
lgNqfxEviRgVsZesxup5tO/vpV0CMRqRnkneTctxv2jzJrqQCuYWE22+kUl4cQQz
gTaGLpNWWEdyOquZfa5gTSv2ZFTvSsRHxZ72hPK8DFUzdSnG6Ma9Wu6spBSYJ5wi
IzoaOQAWDEdHORBHW+qlW6iC0fKXTBqUp7p7a7NKY2VJb7wToEuVkvbBgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkjeDdhw/PTKmEUib2hpf1h+mCcMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmT+NfIb
MIu5naS4sjXvNH14DMS58/h/XPZJxBf5S+Prbqez/aYOrBNtISOUVZj32UizsNTL
GMZuHcRy3pgSFG9DQ0VosU6K7zlcX/3rqEw8c7rYFDbNTg1QUe6hsc1PZh5uu3s9
Nw9v59eGH/Ve0yDn9viUjGoZ90gIGaIihNr8wOUSF5S+ro11dZswFq6OEhFmVDcz
Yt+9Oh/BU2U7EnMtUMRH4xBQ6/6ll1CvunBK7LZQG+TWdi+1T0PE8Mo8QkIyjaOE
EPLx46oThpOwdswfQPZ+3YYuRIY3bjI59Cipze19NBk3CwLhz50qOWRc4WkBHKeu
8Mplsf8VScFJPQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:39:59 2026 by rpki-client