Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: RmFdj4aBY/YJJsDRqZFf4UH0vG7nSHdXi//K3sktan0=
Subject key identifier: EC:99:41:14:C4:46:0E:B2:16:ED:7A:CA:51:AC:DB:ED:82:18:9B:AF
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019D98504CAB6DB64DC5BD97478139CFA12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0E04
Signing time: Thu 16 Apr 2026 22:01:32 +0000
Manifest this update: Thu 16 Apr 2026 22:01:32 +0000
Manifest next update: Fri 17 Apr 2026 22:01:32 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: TzU4Xdq2cqBgfykoGcYgay0aPsqsE6NB9lo30RUSnB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4c:ab:6d:b6:4d:c5:bd:97:47:81:39:cf:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Apr 16 22:01:32 2026 GMT
Not After : Apr 17 22:01:32 2026 GMT
Subject: CN=ec994114c4460eb216ed7aca51acdbed82189baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:2b:fa:39:46:c9:bf:9a:4a:eb:3b:8f:c0:
b5:96:66:d5:ab:6d:32:24:cd:49:4e:a8:2f:fd:d6:
1f:8e:73:4b:69:89:e5:a2:31:0a:58:8a:8a:2d:54:
95:4c:49:5d:ed:40:91:29:74:7a:0a:15:62:a6:d1:
a1:af:ac:37:20:58:98:ea:27:ec:96:be:a1:54:fc:
40:85:ea:e4:77:55:d0:a3:38:ce:25:d6:33:10:0b:
f7:0d:8b:a6:7c:3f:75:2b:35:9f:b0:d2:a4:a2:ef:
67:e5:ca:4a:3c:07:3f:9f:35:72:b0:91:d5:9d:03:
c8:58:2b:84:51:d7:20:f1:60:ab:d6:17:2f:d0:c6:
1d:2b:16:de:72:92:7d:40:4f:f7:94:14:bc:66:a0:
c7:1d:d1:93:f3:20:09:12:77:4b:62:5a:fa:e8:08:
f1:d2:52:ba:f8:46:51:eb:0c:4f:28:25:a3:51:6d:
68:86:20:37:00:66:e8:fe:96:06:56:f7:3d:b1:bd:
8d:ad:f5:a7:cc:7e:eb:70:3f:c4:a2:cd:9a:ae:9c:
f8:5c:c0:62:11:2b:e2:c4:40:7f:72:a8:32:de:e9:
76:1a:12:13:c8:9c:38:5b:2e:2b:21:7c:5c:2f:0f:
1b:f6:db:a3:6b:8b:4f:3f:92:40:b0:f0:b6:55:7c:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:41:14:C4:46:0E:B2:16:ED:7A:CA:51:AC:DB:ED:82:18:9B:AF
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:db:1d:55:2b:c0:77:9f:f4:07:93:7a:0e:11:3c:7b:19:
b3:3a:1f:b2:07:58:c2:46:1e:eb:70:61:98:ce:4e:b6:ec:88:
30:71:60:57:5d:13:2a:3a:8b:d4:6a:18:7a:81:a0:a4:a2:22:
ee:54:d6:40:ba:08:de:05:03:ab:59:28:86:a1:55:ab:45:b4:
33:3b:49:3a:3c:80:6e:03:42:2a:c8:0f:ab:e2:9b:ed:04:09:
10:b1:b8:7f:99:cd:f3:43:85:1d:d8:72:5b:9a:16:60:fb:30:
f1:d9:fb:a1:41:c4:9f:02:11:5a:1b:e6:99:e4:53:15:04:2d:
68:2e:44:c3:45:56:18:28:4b:c4:19:c2:27:40:08:a8:ef:c9:
68:e1:04:84:fe:11:cd:03:e9:26:7a:d2:0d:84:27:cc:3b:77:
29:a5:9d:53:93:fd:32:52:dd:96:a3:6a:2f:09:47:14:4e:e4:
f1:47:d1:cd:a5:1a:58:9b:82:ed:0d:86:70:a6:a1:b2:42:4b:
94:42:38:8e:5b:d5:82:df:cf:23:77:a2:7e:9b:48:e8:04:25:
0b:07:c4:09:ed:70:01:20:1c:2a:ae:27:6d:b2:46:f8:92:0f:
9f:15:ce:64:ed:bf:9b:41:95:98:fd:4e:be:38:c5:35:5d:e6:
6a:66:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:47 2026 by rpki-client