Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File: tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier: Cc5IkiFMXViVlfbchd1q8JXcPJKuTxZeSZ+gQ2MQGiI=
Subject key identifier: CA:DA:44:C1:DC:17:58:01:F5:63:05:A4:93:05:C5:66:46:58:71:C2
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer: /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial: 01A0EC6636BD3A783903B31520C4538D8569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number: 1318
Signing time: Tue 29 Sep 2026 09:01:56 +0000
Manifest this update: Tue 29 Sep 2026 09:01:56 +0000
Manifest next update: Wed 30 Sep 2026 09:01:56 +0000
Files and hashes: 1: a4A5NDE8Hb_awOZcK1yYV0BdNtA.roa (hash: UhcGtGUN3kq4pMX0CPL4BxWxePj3w7wSJak+OWjA2w4=)
2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: 19szKrkKre+23E359eaqQxMgsGLnMUqCiV5jCebw5TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:36:bd:3a:78:39:03:b3:15:20:c4:53:8d:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Validity
Not Before: Sep 29 09:01:56 2026 GMT
Not After : Sep 30 09:01:56 2026 GMT
Subject: CN=cada44c1dc175801f56305a49305c566465871c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:a2:37:0e:8d:4d:cd:93:f3:d1:c2:4b:35:
c1:a2:3e:a7:50:d2:f3:68:fb:11:63:7b:32:b9:22:
07:84:25:ea:6d:6a:a5:c8:27:02:2e:9e:63:a7:6d:
48:ca:1a:59:bb:a0:d4:a5:bc:45:a6:8a:66:c6:a4:
54:73:5b:fb:bd:32:62:34:ad:d1:91:2d:5e:98:03:
1c:7f:af:a8:fc:fc:ab:84:4b:9c:9c:51:8e:22:41:
82:91:37:eb:5b:7a:3b:cd:19:d4:88:47:e0:a1:69:
28:c5:11:53:9c:7f:87:0f:f0:bf:05:5f:96:5e:af:
2e:8b:83:d3:cb:60:0f:05:d7:5c:ca:22:8f:05:09:
23:2e:45:9e:42:23:84:54:f5:4d:10:eb:75:d0:0b:
64:f3:22:ac:bf:31:0c:b3:da:25:05:a1:c7:32:7b:
18:7f:d2:93:0d:bf:1a:d9:04:50:58:14:10:53:96:
15:62:37:cd:39:af:b1:33:7e:88:90:b3:07:f7:1f:
e4:61:c8:7c:dc:59:56:d7:8d:2c:04:9e:85:a2:47:
77:be:98:c4:fd:d8:ee:c8:88:3f:da:0d:a8:12:59:
c2:47:f1:05:73:c2:f9:8a:ba:b8:ab:c6:76:6e:ad:
22:59:10:06:d4:0f:8b:69:b8:f9:ed:b2:e7:c2:82:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:44:C1:DC:17:58:01:F5:63:05:A4:93:05:C5:66:46:58:71:C2
X509v3 Authority Key Identifier:
keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:49:4c:0a:fd:db:6e:6b:d8:b9:30:36:3a:f2:30:91:55:32:
35:3b:eb:ca:2b:a4:34:a3:77:d7:c1:59:df:28:b1:34:a8:8b:
61:fc:86:08:fb:e2:6e:dd:f0:86:4b:87:25:0b:f8:da:c3:9f:
17:2d:e6:e7:e8:c6:b0:88:9a:25:c3:6d:ac:cd:29:fd:33:37:
a0:bb:d9:a4:5d:d3:c0:d5:cd:55:6b:a6:0b:e7:9a:e5:1d:c8:
a9:55:6d:46:8e:9e:ac:b1:80:a0:61:ed:08:30:64:6a:8d:e9:
d5:50:1e:3a:63:8c:83:bf:1e:ae:66:f0:fe:ea:bd:54:75:69:
19:48:53:86:17:10:f4:ed:27:ab:4d:5b:71:2d:b1:9f:4a:1d:
84:5f:12:38:6d:12:47:db:c0:e2:44:8f:79:2c:48:e6:bd:1f:
cb:b9:48:9a:2d:8b:e4:44:b4:47:b5:f7:17:f4:5b:1d:2d:70:
ee:46:05:27:2e:f1:6e:d8:66:ba:29:9b:e6:0f:d5:b1:ca:2b:
b4:e9:af:17:51:fb:7a:31:26:15:60:4e:ca:2b:c5:2f:9e:9d:
48:d4:a4:d1:3c:1d:7a:6b:ee:0d:c3:bb:d6:ed:62:f4:10:52:
a8:06:5c:c5:cd:1f:80:51:ea:54:7c:52:e5:14:bf:79:bf:c1:
2f:91:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:28:18 2026 by rpki-client