Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
File: tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft (raw, json)
Hash identifier: hTVqHbvZVUlQy9hFC/a2xnwUle+SIGtKgJW7ZmasQns=
Subject key identifier: 7A:EF:22:34:85:23:12:68:FB:93:87:A9:0C:A0:4F:19:B0:A3:9E:0F
Authority key identifier: B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
Certificate issuer: /CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Certificate serial: 019F91DA6456F0B0DC6E55D057C9EF719257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
Manifest number: 0CBA
Signing time: Fri 24 Jul 2026 02:00:36 +0000
Manifest this update: Fri 24 Jul 2026 02:00:36 +0000
Manifest next update: Sat 25 Jul 2026 02:00:36 +0000
Files and hashes: 1: F--fPZ33hYEwT-w99iTAzmFapsM.roa (hash: hnrXHyTT7478fE2/lXhaU/V6tzJhmeaU+f8PMt/llIs=)
2: tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl (hash: 5fB3R0noHkk5eh2JMeHMpuXgFLJpl5i0tsQDs4hteW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:64:56:f0:b0:dc:6e:55:d0:57:c9:ef:71:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50df65a2fcb9b117a853a6b56854b0718ec3343
Validity
Not Before: Jul 24 02:00:36 2026 GMT
Not After : Jul 25 02:00:36 2026 GMT
Subject: CN=7aef223485231268fb9387a90ca04f19b0a39e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:2a:08:e0:39:e6:f5:4c:c4:c2:83:aa:31:
6d:2f:58:ab:29:54:e5:2c:c7:4f:d9:80:7f:81:a0:
06:33:44:77:4d:21:51:c3:fc:2d:db:ab:60:29:76:
d2:56:82:75:40:4f:40:c1:b3:cd:64:94:ef:ae:43:
8d:3b:88:c7:10:d9:6e:56:99:a2:2f:79:36:ce:fb:
45:01:16:90:e0:72:ad:9e:76:2e:3a:f2:1d:2a:85:
ba:8a:5e:13:af:6e:9d:be:ab:8e:2e:68:8b:bd:39:
05:eb:f0:6f:f6:99:f4:4b:95:f9:bc:63:78:bf:23:
46:52:29:1e:37:17:2e:d3:4c:21:2e:c5:5d:83:b9:
9a:82:e2:ba:8f:29:e3:b0:4a:69:12:06:55:cd:ce:
a0:40:9e:4c:05:86:43:d1:c0:d4:fa:38:d5:dc:2e:
20:21:4e:1e:b2:f1:49:01:d1:52:c3:d4:1d:be:2a:
2f:3d:2c:e4:8a:d2:4d:ac:ca:f4:88:c6:46:09:c5:
22:30:29:2f:8f:7e:05:26:98:7a:b2:8f:3b:ef:dc:
0c:0f:94:82:94:4a:d2:d0:92:f2:2d:3a:8e:67:8b:
60:0e:8a:12:d8:8b:a8:a4:04:5a:c6:95:c4:fe:ae:
97:f0:ec:6e:bf:aa:09:b9:b4:f3:06:d3:94:bf:14:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:22:34:85:23:12:68:FB:93:87:A9:0C:A0:4F:19:B0:A3:9E:0F
X509v3 Authority Key Identifier:
keyid:B5:0D:F6:5A:2F:CB:9B:11:7A:85:3A:6B:56:85:4B:07:18:EC:33:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ32Wi_LmxF6hTprVoVLBxjsM0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ac82ec-0e31-461e-a205-1f6010a30ebb/1/tQ32Wi_LmxF6hTprVoVLBxjsM0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:10:81:0c:1a:0b:94:ed:6a:d2:c0:b1:f7:9a:51:be:ad:
97:4b:47:0b:b0:21:1b:91:e5:da:f6:83:49:b0:16:fe:02:0a:
99:3c:c2:e7:92:bc:89:27:30:2a:22:59:39:a4:54:79:9f:8b:
53:40:14:ce:b2:27:ed:46:8f:99:78:fd:9d:b8:3e:05:14:3d:
82:54:09:70:fa:47:1a:0e:bf:40:4f:b3:0b:94:aa:12:a0:d6:
ee:c5:db:fb:87:5a:2e:3a:87:32:b0:05:ff:13:fb:80:e9:a2:
38:1a:60:76:54:b4:b4:7e:50:76:b6:88:f0:56:35:08:77:08:
7c:d0:cb:54:4e:a2:5c:20:fd:ea:d3:4e:03:74:d5:f9:40:f0:
26:c3:67:53:e0:ac:45:47:da:f7:51:9c:25:aa:f4:e3:a6:8e:
d0:12:91:57:a7:31:fd:b1:cd:46:8a:e9:97:81:6f:22:7e:84:
9d:32:d1:45:6b:2d:28:67:f4:16:3c:b2:22:73:a3:85:80:53:
dc:4b:46:8d:59:68:de:64:8e:95:22:6d:b2:8e:5e:45:bf:17:
97:5b:8c:90:fb:87:f2:f5:0d:9f:1e:ec:50:f6:0e:51:82:7e:
c4:01:96:88:c1:66:ad:25:e5:87:ee:bd:2b:28:6f:51:5b:64:
5d:93:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:10 2026 by rpki-client