Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: eE3ljozMaNr+8jEocnOzSUCjQ1+6gSiT+Jw96EBq1o4=
Subject key identifier: 3A:03:40:49:3B:AC:1F:74:8B:C1:0E:4A:45:37:EB:52:2F:72:12:49
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 019F92113AAAFB37B503DDC4EBD1088AB0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0BB3
Signing time: Fri 24 Jul 2026 03:00:30 +0000
Manifest this update: Fri 24 Jul 2026 03:00:30 +0000
Manifest next update: Sat 25 Jul 2026 03:00:30 +0000
Files and hashes: 1: EsyjzhH8XZ964OHIDbTuRDBST98.roa (hash: mUEC9ZLvVGdfM73akRkaZENgxm39OTfzrjqGvYWZTJM=)
2: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: yR9QivMZT9ZGTZSzRrtydaiNcidN4v2Kk9d2mllXHpM=)
3: yrl2S3xat8ckzqCZ6OkLRIpKb0o.roa (hash: fYzKC9Wd0t1c3BjCgzHftWafmcX/7Uoyfs3cOFYYeNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:3a:aa:fb:37:b5:03:dd:c4:eb:d1:08:8a:b0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 24 03:00:30 2026 GMT
Not After : Jul 25 03:00:30 2026 GMT
Subject: CN=3a0340493bac1f748bc10e4a4537eb522f721249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:8b:ba:84:54:7f:5f:c2:78:42:14:6f:0c:
7a:75:58:9f:5e:be:59:0c:97:2a:29:d3:f1:53:9e:
1a:86:37:34:42:7d:a1:0a:b5:62:a9:6e:ab:e0:d9:
6e:90:79:d7:93:6b:90:0d:6a:05:ae:27:ce:fc:53:
f2:3f:c1:d5:73:e7:14:72:d5:e2:6a:43:d5:0c:95:
f5:8a:5c:b0:aa:63:28:31:8d:13:ca:22:1e:e9:3e:
7d:04:80:f2:c6:73:f3:e8:70:16:83:8a:8a:48:59:
fd:46:29:a9:90:6e:f2:07:5f:dd:cc:b2:26:bb:62:
13:44:f6:eb:71:eb:ef:af:b2:4a:0c:91:0b:55:c8:
4b:16:d7:2b:27:0a:22:c1:91:f9:e4:5d:68:53:33:
a5:76:6a:a3:65:a3:0c:24:ff:81:1c:c5:61:db:09:
78:ad:1e:46:49:fc:93:43:6c:34:ea:89:06:1e:5e:
2f:a7:d2:96:72:21:3c:8a:30:d0:69:93:f1:66:3b:
7e:32:d7:f2:0d:28:20:d7:c5:f0:49:83:46:73:ef:
56:47:b4:77:55:9d:cd:89:06:82:31:c9:37:98:f4:
47:1e:07:e2:c6:94:25:20:6b:6c:df:2a:bf:00:37:
63:31:94:9a:a0:40:8b:b1:c5:06:33:25:8b:82:82:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:40:49:3B:AC:1F:74:8B:C1:0E:4A:45:37:EB:52:2F:72:12:49
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:ea:89:f4:39:01:85:20:31:fb:ee:f4:d9:fb:94:60:bb:
50:6f:c2:11:2a:ab:5f:80:e3:80:8e:4d:33:c8:2c:d1:99:92:
f7:f1:03:44:59:53:18:ab:02:17:50:80:79:c9:7f:4b:5d:11:
1a:c7:bd:d1:55:1d:1f:b8:1d:56:37:80:54:0f:31:99:06:be:
18:52:5f:63:6d:d1:b0:45:3a:0d:76:ab:fe:43:9f:49:0b:26:
c9:67:23:1b:41:d7:4a:ab:dc:6d:c0:28:3c:e2:af:84:b9:6b:
48:5f:21:c0:f9:87:20:e9:bb:c5:b2:30:8f:3b:26:78:d3:f1:
7d:c2:30:0a:10:e4:bc:61:59:d4:e1:2c:45:1f:a5:61:d1:aa:
99:a0:c4:61:98:77:9c:cd:6f:10:9c:90:1b:5a:ce:81:7d:65:
62:3f:4b:b8:aa:4a:44:82:84:ba:06:e1:89:47:44:3a:ab:60:
8e:e9:19:1a:8c:b8:da:31:fc:cb:4b:af:82:46:11:da:9a:e8:
4f:35:ad:2f:a7:cc:f8:09:45:e4:87:f5:52:b0:66:2f:f1:17:
be:44:a4:fa:77:f0:00:32:12:91:a5:e7:5b:38:ef:fe:07:56:
00:59:a4:44:12:35:ef:c9:8e:af:66:1d:b9:5a:07:42:51:6c:
97:c3:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:37 2026 by rpki-client