Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: xiCFH9bKB10ZRxXhAiAVIlUwx8z3lj2r8jJRxHuL6LM=
Subject key identifier: 8E:17:D7:E5:DC:01:73:E7:76:3E:9B:DF:E9:60:9C:28:00:51:02:3B
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019E1D2291FD2B61D32A6870B6837617CAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0BF9
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: +W5n8k4FBRaKnyDob1HMfNR4rrN1+D1zqj2O6UA2jzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:91:fd:2b:61:d3:2a:68:70:b6:83:76:17:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=8e17d7e5dc0173e7763e9bdfe9609c280051023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:69:b8:1b:37:65:ef:49:d5:84:7e:fe:11:
61:fb:c5:41:82:41:ba:94:cb:61:d0:26:ac:23:a4:
b7:3b:db:94:10:0e:f7:80:5b:c7:61:8c:54:db:a4:
c9:cd:43:bf:04:c5:fb:67:4a:d6:32:c9:ea:53:ac:
99:86:9f:f5:4f:75:74:5d:a2:99:e5:4c:ee:60:d6:
1b:47:ce:2e:18:7c:15:53:88:6b:ab:e2:9d:6e:13:
b1:da:4e:c3:68:f3:a7:d3:51:66:f4:62:83:e3:27:
61:ab:7f:2a:eb:8f:c1:2a:86:22:7a:43:e3:7e:e2:
e3:72:89:0a:24:c8:c2:c3:b3:b1:5c:c6:01:0f:c7:
05:e8:31:7d:ab:e0:b6:fa:87:5e:28:fc:8a:ed:0a:
3d:5a:19:9b:aa:e3:17:88:2a:06:52:a5:bf:a5:bc:
f0:40:19:7a:0a:f9:9a:e6:0d:55:ba:43:ce:c4:3b:
fe:19:70:ef:53:9d:8d:87:2f:85:45:a6:d9:d1:76:
2f:56:a6:fb:1e:dd:37:fd:12:26:f4:35:c5:19:59:
3d:09:db:33:65:1d:a0:9f:72:ea:49:b7:96:90:9a:
44:c5:4e:25:f9:8d:90:8c:49:c7:04:ad:d9:a4:d3:
57:57:d8:12:4a:6b:18:74:9c:43:36:9d:02:c0:0f:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:D7:E5:DC:01:73:E7:76:3E:9B:DF:E9:60:9C:28:00:51:02:3B
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a9:ad:57:4c:51:d7:e4:de:28:e7:d8:8a:7f:55:0d:1b:22:
0f:72:e2:c1:8c:96:a4:b1:84:cb:2b:49:7c:a1:ae:c0:8f:56:
93:ae:81:a8:de:ea:59:39:c2:05:83:de:2a:ea:01:8c:d4:6a:
95:c7:0b:a9:a6:5a:e0:9f:1a:39:40:c9:92:3a:4d:7f:18:ba:
0d:32:38:cc:38:d8:06:76:57:7b:4e:52:64:38:06:0c:f3:0d:
a1:14:b9:7d:22:f5:35:27:7c:d0:2e:84:ea:af:68:e8:e5:ee:
e5:38:15:dc:8c:87:ec:c6:0c:dc:d5:4b:3f:6c:e7:b8:dc:29:
02:a0:ab:aa:10:13:61:1a:3f:66:de:f8:1a:6e:b4:80:bf:11:
f9:04:2b:5e:4e:41:c3:43:f1:26:8c:da:67:2f:d2:ce:85:cc:
79:cb:f0:6d:ed:8c:29:6a:1c:f4:51:d1:d1:e9:e5:77:7c:8c:
62:01:5e:59:f4:60:47:91:be:c9:7d:23:a8:b3:9f:8a:86:96:
79:4c:5b:df:f0:0c:29:32:fe:88:20:1d:84:54:76:18:b3:5c:
de:c8:26:38:a4:32:e4:43:53:95:16:c2:fb:4b:c6:6b:55:03:
c5:5e:b1:c9:82:a2:6a:d5:2c:90:5b:63:12:ab:4d:16:46:a0:
09:c2:8e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIpH9K2HTKmhwtoN2F8r7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MGRmNjVhMmZjYjliMTE3YTg1M2E2YjU2ODU0YjA3MThl
YzMzNDMwHhcNMjYwNTEyMTcwMTA1WhcNMjYwNTEzMTcwMTA1WjAzMTEwLwYDVQQD
Eyg4ZTE3ZDdlNWRjMDE3M2U3NzYzZTliZGZlOTYwOWMyODAwNTEwMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzVpuBs3Ze9J1YR+/hFh+8VBgkG6
lMth0CasI6S3O9uUEA73gFvHYYxU26TJzUO/BMX7Z0rWMsnqU6yZhp/1T3V0XaKZ
5UzuYNYbR84uGHwVU4hrq+KdbhOx2k7DaPOn01Fm9GKD4ydhq38q64/BKoYiekPj
fuLjcokKJMjCw7OxXMYBD8cF6DF9q+C2+odeKPyK7Qo9WhmbquMXiCoGUqW/pbzw
QBl6Cvma5g1VukPOxDv+GXDvU52Nhy+FRabZ0XYvVqb7Ht03/RIm9DXFGVk9Cdsz
ZR2gn3LqSbeWkJpExU4l+Y2QjEnHBK3ZpNNXV9gSSmsYdJxDNp0CwA8TzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4X1+XcAXPndj6b3+lgnCgAUQI7MB8GA1UdIwQY
MBaAFLUN9lovy5sReoU6a1aFSwcY7DNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUt
MWY2MDEwYTMwZWJiLzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hYzgyZWMtMGUzMS00NjFlLWEyMDUtMWY2MDEwYTMwZWJi
LzEvdFEzMldpX0xteEY2aFRwclZvVkxCeGpzTTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKmtV0xR
1+TeKOfYin9VDRsiD3LiwYyWpLGEyytJfKGuwI9Wk66BqN7qWTnCBYPeKuoBjNRq
lccLqaZa4J8aOUDJkjpNfxi6DTI4zDjYBnZXe05SZDgGDPMNoRS5fSL1NSd80C6E
6q9o6OXu5TgV3IyH7MYM3NVLP2znuNwpAqCrqhATYRo/Zt74Gm60gL8R+QQrXk5B
w0PxJozaZy/SzoXMecvwbe2MKWoc9FHR0enld3yMYgFeWfRgR5G+yX0jqLOfioaW
eUxb3/AMKTL+iCAdhFR2GLNc3sgmOKQy5ENTlRbC+0vGa1UDxV6xyYKiatUskFtj
EqtNFkagCcKOWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:16 2026 by rpki-client