Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: IDkFvRfE0zrP89oFvtyCoW92Df0NE0zlYNZZzN1Wc6A=
Subject key identifier: 6D:9A:3E:8D:B4:79:1D:BB:DC:81:96:A7:AA:9E:34:F6:7E:46:4A:FA
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019CACB55BE038BEE03C586BBFCE05B95B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0D8A
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: bTieiAP/RfVznrC83dbFvQAUCplvdAieRInwaOst91w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5b:e0:38:be:e0:3c:58:6b:bf:ce:05:b9:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=6d9a3e8db4791dbbdc8196a7aa9e34f67e464afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:af:2c:49:ee:88:30:a0:c0:83:40:c1:33:
d8:77:89:20:b4:64:3d:4d:79:2e:8a:0d:0c:98:9a:
7b:1d:62:b1:d4:40:3b:4c:37:c0:15:36:ba:d2:26:
eb:a8:73:ab:fb:c7:55:21:d0:7e:f7:90:4e:74:73:
a4:9d:fb:f8:11:4a:7a:76:5c:07:4b:a4:13:1a:ea:
e9:2a:9c:55:dd:9f:78:a2:76:be:b4:51:a2:d3:61:
9a:39:4a:65:2f:89:5a:98:75:46:21:b2:27:36:d7:
15:f6:de:c3:d3:ce:16:72:a4:35:65:57:d6:71:e5:
d8:6f:8e:87:bd:a7:da:15:56:dc:a1:38:c6:1b:07:
4a:7e:04:ce:94:7f:f1:28:c4:63:e6:db:ac:b6:50:
b5:77:11:3d:dd:f3:85:dd:d8:c6:11:76:11:60:74:
3c:ea:cb:30:4d:ea:fd:18:3e:9d:cc:da:64:66:65:
2e:45:82:86:98:3c:ac:1e:96:ac:6c:e5:ec:71:d5:
e2:de:02:5d:f9:de:87:a4:36:49:41:88:24:4e:d9:
52:70:8c:2d:00:62:26:8e:dc:24:86:48:1e:e3:f6:
db:b0:19:ee:0e:31:a3:f2:e3:af:7b:dc:46:29:af:
02:39:38:5f:22:e4:77:26:9b:b7:5c:81:b6:5c:35:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:3E:8D:B4:79:1D:BB:DC:81:96:A7:AA:9E:34:F6:7E:46:4A:FA
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e0:42:8e:06:13:5d:7a:72:85:e4:45:3f:28:aa:b0:42:ed:
c3:26:34:d6:53:a9:90:6f:f1:0b:f0:7e:54:6c:c3:03:89:da:
e3:b8:5e:b4:51:9f:43:fd:c6:fc:cd:53:6f:05:7e:6f:90:98:
a2:3e:9c:2b:0c:d5:b0:21:e8:ce:7c:c2:a7:54:f0:56:d2:fc:
03:61:63:20:73:6a:ce:0c:38:aa:51:d3:80:33:db:1b:3b:c8:
2f:d7:f4:ee:95:cd:2d:a7:2e:35:f7:ed:3d:8f:2a:a4:20:26:
7e:ef:45:62:a7:03:8e:54:74:ea:0c:6a:ba:79:b7:4b:b9:f2:
3f:25:ef:7a:2d:23:3c:51:81:7c:c1:62:f3:b5:6f:74:36:4f:
df:9c:b7:50:75:89:95:0c:d0:17:5d:a0:52:bc:d8:ea:57:f3:
c8:70:57:68:3d:11:45:33:36:fa:8d:88:1c:c9:95:53:b8:8b:
18:3f:71:e9:06:9c:f7:d7:36:0c:4c:0b:da:26:0b:d6:d5:59:
9c:d5:22:ca:c3:77:61:b6:08:3d:5f:aa:b2:34:1f:e4:a1:5b:
f6:93:b6:84:81:b8:64:d5:69:b1:72:6f:f3:b8:8e:6b:c2:ea:
1a:a2:d1:85:4a:b6:0b:01:34:1c:53:c2:5a:e8:08:fa:d8:13:
9b:61:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:45 2026 by rpki-client