Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: b3vzimfpi2VBZVaDv4IezSK0nh8BOSlZnS/w0tJOkYA=
Subject key identifier: 7B:62:29:A1:0D:CB:4F:17:54:93:AD:8D:96:13:AF:49:9C:2C:E7:4C
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 01A0DA285103B9E8405856B2BD04BC0BB741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0D64
Signing time: Fri 25 Sep 2026 20:01:10 +0000
Manifest this update: Fri 25 Sep 2026 20:01:10 +0000
Manifest next update: Sat 26 Sep 2026 20:01:10 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: /xunJwRMWyPkn/HMaxiSiUR3pnAUcHwZMYXTC7Vjclo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:51:03:b9:e8:40:58:56:b2:bd:04:bc:0b:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Sep 25 20:01:10 2026 GMT
Not After : Sep 26 20:01:10 2026 GMT
Subject: CN=7b6229a10dcb4f175493ad8d9613af499c2ce74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:7e:22:03:1a:49:f0:ed:b3:c0:1c:6b:2c:
55:d8:a7:8e:09:79:14:84:5b:f6:54:50:09:22:2e:
6b:97:5f:61:bd:05:25:6e:63:ba:88:82:6c:c5:e8:
5c:1d:17:ab:e5:1c:f0:87:34:fa:0e:df:69:a6:c0:
16:1d:2a:0a:c2:8c:0e:7f:0d:85:20:5d:60:ce:b2:
d8:85:0f:21:80:1d:b6:63:5c:b7:aa:3b:f7:45:b5:
fd:89:73:30:ca:8c:14:5f:c2:a0:aa:65:ad:0c:87:
d5:16:e1:d0:9c:ae:d3:ed:93:37:c3:58:2c:c9:aa:
e2:31:ee:36:75:a3:9b:ee:14:15:8e:9c:ab:bb:c6:
07:fa:56:87:49:d0:6d:c6:72:c8:20:ee:a7:77:d8:
64:51:8c:95:d7:15:ff:8e:1c:54:96:5f:85:b4:35:
fd:17:58:f8:0b:60:98:74:f3:11:a2:4f:a4:c6:d4:
66:f1:f4:1d:c6:91:a8:db:b6:1e:00:e5:5a:47:ce:
19:10:f7:6e:c9:f1:c7:08:96:8d:08:15:96:fd:72:
d6:d7:d3:83:f3:36:8f:ee:83:54:e4:5c:8f:6a:21:
16:ad:bc:69:8d:6f:e4:c3:be:d6:48:c0:e0:ae:c0:
63:5c:55:62:10:17:20:64:14:85:78:2a:eb:67:5a:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:29:A1:0D:CB:4F:17:54:93:AD:8D:96:13:AF:49:9C:2C:E7:4C
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:4f:1b:2c:bd:6d:fd:c1:1c:0b:8c:16:52:5b:6b:61:4f:ef:
2e:33:ca:35:19:36:95:bc:67:e0:6c:60:61:88:d1:9e:d2:90:
b5:6e:0d:3d:d8:e7:09:a6:7a:d7:43:93:9c:56:e1:4f:4a:01:
8a:cf:9b:2a:a2:b7:b4:91:cc:c8:24:79:77:dd:cd:78:50:bd:
d3:c6:ce:22:4a:d0:db:21:4d:fb:d9:34:91:81:7c:69:2b:4a:
b9:c1:3e:ab:7e:fa:5a:0c:45:87:b5:45:c2:b5:dc:0f:5f:c1:
1f:7e:a5:8b:32:b0:87:c5:1d:b9:2f:af:5e:1e:c1:28:1a:de:
f2:6a:18:50:86:04:3d:3a:bb:76:9b:8b:62:ef:26:2c:04:83:
17:df:28:55:c1:74:44:74:0f:d1:9a:e7:a6:a2:a4:5e:74:ae:
c0:4d:48:81:b9:62:5b:84:e3:63:7f:fc:50:1b:2f:c6:06:d4:
05:2a:9b:da:38:c7:7c:5e:07:ed:ac:e3:7f:38:9e:4c:fd:3c:
c9:05:7d:69:b5:51:12:51:61:f1:5f:fc:1d:65:55:bc:cb:9c:
cb:b9:3d:b2:98:c7:d4:fe:1a:7f:f8:c5:f9:05:14:35:3a:73:
92:c6:32:b1:19:ff:48:ed:67:af:87:1f:72:d6:e1:85:07:84:
f6:df:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:34 2026 by rpki-client