Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: Q07yRtvMI+5B0aF2sKorAs9VfUiR0q3RUy3KlIkXmhs=
Subject key identifier: D7:C5:C4:4E:DA:27:98:37:FC:6F:09:A2:09:80:40:9F:2D:83:11:0D
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 01A100919063E1C5A34CE12B4CB17B55997B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0CE4
Signing time: Sat 03 Oct 2026 07:01:41 +0000
Manifest this update: Sat 03 Oct 2026 07:01:41 +0000
Manifest next update: Sun 04 Oct 2026 07:01:41 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: XZgXzc6F2zVjg67yN07/w6bKxayoWjRakZxtltqcVE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:90:63:e1:c5:a3:4c:e1:2b:4c:b1:7b:55:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Oct 3 07:01:41 2026 GMT
Not After : Oct 4 07:01:41 2026 GMT
Subject: CN=d7c5c44eda279837fc6f09a20980409f2d83110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:21:96:d8:d8:f5:2c:1e:69:f8:67:e1:1a:
fa:fe:25:ed:81:f3:12:65:9f:14:19:b4:b0:ca:3c:
c7:45:48:72:57:f4:d8:80:2f:bb:9d:13:49:2f:22:
6d:39:12:50:2d:15:d5:6a:bc:17:82:be:86:f4:cd:
e0:d8:23:be:16:18:92:76:bb:b2:6c:8e:1f:7d:bd:
22:a8:12:f7:4e:d2:87:85:e8:4b:10:58:0e:7b:b1:
c0:8a:57:72:cb:cb:b7:30:67:b7:10:90:5c:af:25:
d9:5e:a2:df:47:18:de:2b:18:9c:ef:37:d7:8c:20:
ac:76:19:b9:c9:aa:3e:55:6a:0d:92:c2:cf:8d:29:
ae:d7:79:5d:97:4a:0d:a3:84:54:34:b0:61:52:46:
2c:9c:3b:6c:8f:8e:fe:18:db:ef:ee:2d:d6:a9:cf:
74:45:44:a2:21:ce:09:ad:fd:ba:7b:82:de:8d:1a:
ba:87:5f:e9:f0:5e:91:dd:8a:7f:0b:fd:cf:ed:f3:
de:b1:01:ff:c1:1b:bb:d0:c0:27:91:0e:b3:7e:57:
b6:fe:fc:0f:f1:00:5e:8d:15:65:5a:57:c7:36:4b:
a6:3a:f8:cc:72:c8:66:2b:a7:79:78:ee:24:b2:d8:
d4:3e:30:58:7e:11:f8:81:54:71:9e:66:cd:61:78:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:C4:4E:DA:27:98:37:FC:6F:09:A2:09:80:40:9F:2D:83:11:0D
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:60:c4:61:7a:b8:60:30:5e:76:71:4c:7a:c2:57:4b:12:
80:79:5d:5e:51:2f:98:28:7e:68:ac:43:24:3e:50:0d:fc:ba:
7d:81:13:3a:c7:0f:ae:d4:04:bd:d3:b0:6e:04:27:a9:26:3b:
87:b1:22:fd:e0:d9:c4:36:41:08:a5:17:c8:b7:2e:75:89:1a:
5e:eb:2f:13:ba:aa:a2:cc:35:b9:29:ec:c3:4d:a1:2b:ad:50:
da:6d:a4:b5:7e:52:4f:dd:60:8a:29:49:20:d5:cc:16:b0:17:
59:e8:2f:63:f0:2a:0e:45:8d:1e:9a:dc:de:b2:62:7b:48:a0:
8c:da:00:9e:fa:5b:17:4e:e0:39:4b:62:bc:da:36:d1:b0:7a:
bd:61:4d:95:89:1d:94:c1:76:8b:9f:54:24:54:35:34:a7:bb:
26:6e:2e:e6:e5:ea:4c:28:9a:ab:4f:ed:3f:bf:87:50:86:a0:
c5:2d:1d:18:3b:2a:75:2b:ca:cd:c8:f6:31:a6:e3:83:18:b0:
e1:ff:31:52:40:a5:25:13:55:f3:3e:9a:5a:72:f5:05:b4:db:
64:95:53:31:18:84:5a:13:4e:19:a5:4e:0f:3a:fc:7b:8c:fb:
a6:ad:69:16:5a:fc:55:ca:98:98:15:68:b3:6f:ec:90:f9:4f:
ad:a3:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:33:48 2026 by rpki-client