Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: 1uOE7m7vR+d5OjmW77LzN3i0LdobopRndmULWFIwLGM=
Subject key identifier: 98:A3:28:BB:16:6E:89:09:7B:A9:26:6B:75:13:D7:04:09:A5:7B:E5
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01A1DEDE2C832B7514C6037F50D0594C9F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0DEB
Signing time: Sun 15 Nov 2026 11:01:04 +0000
Manifest this update: Sun 15 Nov 2026 11:01:04 +0000
Manifest next update: Mon 16 Nov 2026 11:01:04 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: AlITar04xXTUVwSdKPXbiIIuZ27nLY3nSEV43Argqjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:2c:83:2b:75:14:c6:03:7f:50:d0:59:4c:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Nov 15 11:01:04 2026 GMT
Not After : Nov 16 11:01:04 2026 GMT
Subject: CN=98a328bb166e89097ba9266b7513d70409a57be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:e2:74:73:85:4c:76:4f:08:27:02:73:4d:
72:41:06:3a:b2:0d:bd:57:34:36:10:ae:7f:8b:98:
2a:d9:5d:24:2d:f0:4f:46:00:13:e2:06:fb:74:79:
dc:51:1d:b8:e1:fe:68:f3:af:67:f9:c1:7b:fc:e1:
47:53:d5:ed:22:ca:85:c6:8c:dc:69:70:be:1f:30:
b4:5c:ac:49:bc:81:ef:b7:91:37:7f:a9:77:17:03:
10:ca:fc:64:bc:80:d8:9b:9b:0d:68:84:dd:31:bb:
f0:5f:05:c7:a3:2a:aa:94:59:88:eb:ed:d6:3a:89:
cb:af:e3:6b:ae:7a:42:2c:8f:30:13:67:37:0f:f0:
32:81:57:5e:27:10:64:dd:f8:9d:77:e1:26:da:82:
28:a6:c2:78:0e:31:f1:d8:80:75:61:f5:f7:17:42:
37:74:af:f8:84:be:fc:e9:11:1a:2f:40:3e:70:82:
23:62:7f:75:ce:5b:ba:56:b2:cb:94:ff:7d:b5:26:
df:ef:66:3b:c9:1f:06:cf:0c:99:7e:d3:10:47:ed:
38:a5:b4:7f:72:53:f3:18:a0:20:57:ab:3c:34:a2:
9b:7b:43:5e:1e:a6:91:5e:52:06:59:71:70:0b:57:
6e:60:11:c8:2e:51:6a:5b:b7:ab:d7:cb:92:e0:b2:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:28:BB:16:6E:89:09:7B:A9:26:6B:75:13:D7:04:09:A5:7B:E5
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ac:f6:ce:f8:ae:28:10:a5:79:8d:c3:0f:1e:a7:a5:fb:30:
3e:90:5f:45:d6:be:23:44:6c:0b:84:86:d5:b0:28:d8:72:52:
41:90:10:ec:11:e6:e1:0e:5d:c8:7f:38:93:84:38:84:67:6e:
50:55:10:d1:6a:b2:2b:51:be:0e:84:94:8f:d7:05:31:32:b4:
5e:c4:b8:9a:1a:a7:64:dd:24:fa:df:ca:6b:1b:c6:91:8c:20:
74:b8:4e:36:69:c2:00:c3:f3:1e:3f:f6:6a:de:04:c7:c4:9d:
86:a6:c3:de:44:23:60:65:70:96:9d:ee:5e:2b:95:a9:3d:09:
66:7f:ba:97:4b:fa:ed:de:46:b3:19:f4:0f:00:fc:9f:19:06:
34:dd:a9:45:1f:e6:23:ca:9c:8f:3d:3c:9d:12:b4:f6:cf:ba:
e1:2b:db:4e:89:74:93:e5:74:43:f3:2f:53:27:57:c3:8d:e2:
f7:51:ff:9d:ee:dc:e7:4c:bf:80:ca:c2:cd:35:ba:8e:e0:0e:
84:fe:96:11:9a:9b:dd:3b:f5:c6:66:1e:bb:24:32:f5:b7:2e:
c4:25:f6:d7:e3:a9:59:3a:7f:d2:94:59:ea:8e:75:41:80:81:
15:fd:9f:73:72:94:b1:80:f2:94:e3:72:80:88:20:38:98:a4:
f7:4d:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:38 2026 by rpki-client