Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: 9NrCtvLON15sArv5BCzEh2HQOl1dC/G9M2mfOklnLu8=
Subject key identifier: 18:6B:49:50:18:54:16:D1:68:12:B1:D0:92:FC:C5:1A:B3:4A:3A:08
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019E1F48122B864B5F4536BDBF265E793812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0AF3
Signing time: Wed 13 May 2026 03:01:17 +0000
Manifest this update: Wed 13 May 2026 03:01:17 +0000
Manifest next update: Thu 14 May 2026 03:01:17 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: 1pU6KFr91O9SeQxZ11HU1laN+uBQR3wz8rqSs1591C8=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:12:2b:86:4b:5f:45:36:bd:bf:26:5e:79:38:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: May 13 03:01:17 2026 GMT
Not After : May 14 03:01:17 2026 GMT
Subject: CN=186b4950185416d16812b1d092fcc51ab34a3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:fb:8c:57:d1:58:2b:de:65:05:55:8e:f4:
f2:91:7f:7d:1c:0e:12:39:d3:9b:dc:65:a7:2d:c7:
43:f6:3b:43:29:92:ad:27:5e:71:c4:59:35:55:e1:
cb:91:2d:f2:af:b7:61:8e:ad:23:b8:4c:ce:2e:06:
94:52:57:03:f5:29:a1:b8:90:6f:cd:df:85:e8:84:
ce:6c:0e:5d:0a:8c:3f:ed:99:b7:38:1b:28:53:db:
cb:0e:87:82:cf:d9:9e:d5:db:08:3e:d4:0a:a6:19:
e4:26:97:84:95:d3:6f:09:08:cc:75:ff:e6:1b:49:
2a:59:24:a9:ad:6b:52:f9:e4:3a:8d:8e:fb:59:66:
39:4d:21:99:48:c2:32:21:6c:71:e2:6d:c2:aa:a3:
35:38:ba:e5:f8:47:6d:ce:36:fa:15:a6:4d:2f:f3:
cd:1e:03:39:ea:79:c3:d9:e3:a8:39:21:ec:78:5c:
64:21:e2:9f:5b:c1:dc:70:b9:3d:d5:f7:cd:02:81:
a6:ac:ec:d9:f2:9d:27:12:6c:f7:59:25:9f:25:cc:
72:aa:81:ee:6b:db:8c:fd:15:e4:07:03:ca:09:12:
8d:00:36:ac:1a:34:0c:2d:0d:9e:ba:ec:50:01:50:
de:e7:bc:52:70:eb:5b:ff:1f:89:17:80:49:b7:9c:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:49:50:18:54:16:D1:68:12:B1:D0:92:FC:C5:1A:B3:4A:3A:08
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:61:c3:44:96:25:1f:93:b7:39:9f:41:e9:a9:51:1d:02:41:
0b:14:b6:a5:b8:55:a2:8d:76:e1:88:9d:a7:8b:48:2c:79:e4:
5c:dc:53:10:97:a4:0a:20:0f:4d:29:e8:8a:2d:04:65:c0:bc:
ce:f8:5e:da:48:e1:22:fa:e4:21:87:cd:d8:c9:95:a5:e4:dd:
76:61:4a:4d:d5:aa:c3:bd:93:0d:7c:ab:e7:47:36:0d:ce:d0:
0f:56:5b:11:d6:7c:2b:aa:33:fa:50:ba:29:7c:49:d6:d1:3c:
49:a1:e3:75:33:94:d3:c4:ef:04:83:b1:f0:01:ea:1f:ad:b5:
b7:ca:94:68:87:e3:f0:85:26:84:26:18:73:79:1e:15:f7:a5:
f4:0f:d3:f3:a0:17:53:2e:03:b1:9f:5e:30:88:95:44:b7:aa:
d6:e7:02:53:2e:3a:ca:44:17:08:c4:cb:98:6a:bf:73:55:3b:
ec:30:34:8b:80:78:d2:80:1e:bf:6c:b3:66:1f:61:92:7e:b5:
69:3e:6a:cf:ef:38:eb:88:81:08:8e:46:7b:f7:14:be:93:34:
19:e8:e6:76:6b:b3:4c:10:ea:ba:39:42:0d:f5:df:99:07:93:
67:70:62:da:0d:85:5f:97:a2:17:e8:7d:df:fb:97:df:2b:de:
a7:7b:46:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSBIrhktfRTa9vyZeeTgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDI2Yzk5NzQwOTJlMjIwNTQyNDAxMjgxZjliZGZkMzU2
YzI4NDIwHhcNMjYwNTEzMDMwMTE3WhcNMjYwNTE0MDMwMTE3WjAzMTEwLwYDVQQD
EygxODZiNDk1MDE4NTQxNmQxNjgxMmIxZDA5MmZjYzUxYWIzNGEzYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I/7jFfRWCveZQVVjvTykX99HA4S
OdOb3GWnLcdD9jtDKZKtJ15xxFk1VeHLkS3yr7dhjq0juEzOLgaUUlcD9SmhuJBv
zd+F6ITObA5dCow/7Zm3OBsoU9vLDoeCz9me1dsIPtQKphnkJpeEldNvCQjMdf/m
G0kqWSSprWtS+eQ6jY77WWY5TSGZSMIyIWxx4m3CqqM1OLrl+Edtzjb6FaZNL/PN
HgM56nnD2eOoOSHseFxkIeKfW8HccLk91ffNAoGmrOzZ8p0nEmz3WSWfJcxyqoHu
a9uM/RXkBwPKCRKNADasGjQMLQ2euuxQAVDe57xScOtb/x+JF4BJt5xm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhrSVAYVBbRaBKx0JL8xRqzSjoIMB8GA1UdIwQY
MBaAFLUCbJl0CS4iBUJAEoH5vf01bChCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYt
ZWVhMjY3YTU4NDk0LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZjYyMzItYTRmNS00MjQ0LTk0MzYtZWVhMjY3YTU4NDk0
LzEvdFFKc21YUUpMaUlGUWtBU2dmbTlfVFZzS0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWHDRJYl
H5O3OZ9B6alRHQJBCxS2pbhVoo124Yidp4tILHnkXNxTEJekCiAPTSnoii0EZcC8
zvhe2kjhIvrkIYfN2MmVpeTddmFKTdWqw72TDXyr50c2Dc7QD1ZbEdZ8K6oz+lC6
KXxJ1tE8SaHjdTOU08TvBIOx8AHqH621t8qUaIfj8IUmhCYYc3keFfel9A/T86AX
Uy4DsZ9eMIiVRLeq1ucCUy46ykQXCMTLmGq/c1U77DA0i4B40oAev2yzZh9hkn61
aT5qz+8464iBCI5Ge/cUvpM0GejmdmuzTBDqujlCDfXfmQeTZ3Bi2g2FX5eiF+h9
3/uX3yvep3tGMw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:10:30 2026 by rpki-client