
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: 0jTsWmYnYqhjvQ+sOs2du9qEs6zjQcr1BAns8V3zxi0=
Subject key identifier: A6:1A:6E:AF:FE:89:26:07:38:AE:BB:CF:5C:A6:8E:86:EC:E5:6C:1D
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019EBFC88A34949F9E2BC82294DACF889385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0E9D
Signing time: Sat 13 Jun 2026 07:00:51 +0000
Manifest this update: Sat 13 Jun 2026 07:00:51 +0000
Manifest next update: Sun 14 Jun 2026 07:00:51 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: xKOc9Uv/o71wRmalaPE76YrrqcAfiquVwTSeJapn+fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:8a:34:94:9f:9e:2b:c8:22:94:da:cf:88:93:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 13 07:00:51 2026 GMT
Not After : Jun 14 07:00:51 2026 GMT
Subject: CN=a61a6eaffe89260738aebbcf5ca68e86ece56c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:ef:23:38:48:77:5d:55:82:3f:91:4f:a0:
9d:f6:fc:a5:f8:ff:d5:46:e8:5b:0d:ca:fb:15:e1:
c7:31:17:8d:dd:7f:dd:81:4e:47:c6:89:26:e2:8b:
88:a5:0d:49:bd:10:30:58:a9:90:a7:de:44:e9:8b:
14:de:b0:73:db:26:d3:de:97:3d:89:83:5c:c2:e5:
27:32:fe:94:b3:e3:86:c5:72:2a:32:6a:60:07:06:
54:cf:7c:ba:24:02:5d:03:a3:49:cb:1e:db:ed:59:
3a:10:90:d8:dc:0a:26:d5:d2:b3:29:8c:99:ac:00:
16:ca:f9:ac:35:85:b4:bd:ee:f0:e7:3c:a6:f1:df:
ed:cc:ab:d9:99:ff:84:51:d8:0c:b7:4f:d4:bb:fa:
64:af:8a:26:3d:1d:a2:5e:de:d8:8b:4a:aa:b0:6b:
c2:56:5a:ec:3b:c0:a5:ca:9c:d6:cc:80:96:08:3c:
7d:65:fa:0b:cb:20:6a:2d:a9:5d:0d:9e:62:f6:19:
16:c4:a4:60:ff:ae:57:67:43:c1:73:4d:6a:87:39:
c9:da:8f:50:e3:c2:03:5c:bd:05:58:f2:fb:a5:ca:
3e:93:41:dc:d1:a4:a6:06:8f:6b:f4:d2:09:26:bf:
10:21:59:b1:68:02:2a:ed:cb:3f:2b:60:af:44:5b:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:6E:AF:FE:89:26:07:38:AE:BB:CF:5C:A6:8E:86:EC:E5:6C:1D
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:85:30:cb:3a:56:ec:27:50:b9:7a:7a:53:33:8c:7c:7e:af:
ad:e5:1e:94:de:d9:71:45:5e:3a:26:fd:48:20:38:7c:39:30:
56:0e:f0:13:79:62:2c:49:5a:19:c5:7d:9c:db:ab:92:32:a0:
9f:61:04:56:89:4a:d0:3d:f4:32:d2:04:b7:1f:45:6b:7e:06:
a2:4c:89:3e:ca:3b:e4:8f:12:93:2d:9b:4a:ed:14:6e:54:d5:
db:6f:a9:8f:e7:ed:24:dc:85:47:d7:ac:14:bb:58:00:db:cf:
7e:02:f5:20:db:69:e7:66:fe:1e:43:11:0e:8c:78:38:d5:ad:
04:a6:b3:d6:f6:d9:06:ff:0d:19:dd:77:99:c9:85:75:18:57:
a2:5d:a8:49:a8:68:df:9c:9b:36:c1:ed:4e:39:27:80:71:1f:
b8:8a:04:8f:01:df:d3:15:23:f3:a0:5a:e0:8f:9b:8c:af:ee:
53:de:63:d9:95:79:d1:6c:5d:fe:49:f8:d4:0f:14:ea:66:2a:
ea:36:0b:60:90:cc:39:30:ec:e3:ed:51:8b:7f:3a:e4:8d:36:
5b:16:92:c8:d4:07:9d:a4:76:de:20:57:86:65:46:0b:94:7e:
4d:47:80:9a:e2:b4:fc:40:62:d6:99:61:ca:b2:cc:be:73:ab:
92:f2:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:08 2026 by rpki-client