Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: 1FulJPn8KH+k1SMLTSsNw4RuNVgfWp6DHaMJTXWzS/0=
Subject key identifier: 7C:E6:3A:AE:58:47:9C:EF:6C:E4:98:69:AF:FE:E3:9E:31:63:EB:62
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019D9AE2E2508AC6DAB8AD383FD87281ED88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1509
Signing time: Fri 17 Apr 2026 10:00:53 +0000
Manifest this update: Fri 17 Apr 2026 10:00:53 +0000
Manifest next update: Sat 18 Apr 2026 10:00:53 +0000
Files and hashes: 1: 3qN8EgRnuBeoXtMeqUT0z6kjHJg.roa (hash: RYP+kCE6mn90ehLAvdC/KeyfQc4In+6wu6IVJb4OH5c=)
2: PeACFRzbqNg73GPInX-i49BNtHM.roa (hash: so0IXS+T3rWA07JEuNq7WJWAoqVF14IBJdyXjwBvRmQ=)
3: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: a3Vw3C5C3a//sa1BxGIi74MraE5TFmvtVHls+jDC8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e2:50:8a:c6:da:b8:ad:38:3f:d8:72:81:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Apr 17 10:00:53 2026 GMT
Not After : Apr 18 10:00:53 2026 GMT
Subject: CN=7ce63aae58479cef6ce49869affee39e3163eb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:f8:d5:56:ec:1e:9a:58:74:ca:8a:6a:10:
73:1c:66:98:e5:7d:83:ff:37:3e:b3:8f:b9:da:0e:
fd:1b:96:59:18:de:e8:5a:98:65:ca:77:1c:9f:08:
34:b5:cb:0f:8b:b4:4d:aa:70:e2:4c:e5:34:b9:f1:
fe:d0:d3:4c:97:9b:69:82:bd:07:e4:c9:b7:b4:c5:
c4:df:18:e4:31:b3:0d:c0:7f:19:43:7e:81:01:45:
e3:49:46:7c:20:38:2b:b0:7b:4c:ac:4f:8f:65:c9:
d3:d7:06:6f:2d:11:58:b6:51:63:b5:96:ac:59:ce:
d3:61:38:3d:af:ac:34:85:d6:4a:9c:5a:41:59:49:
c5:35:94:ff:fc:52:1b:47:fc:d7:99:35:8a:c6:4b:
df:f5:0f:28:4d:54:df:35:92:4b:27:47:69:e9:c3:
3c:0b:be:5d:d1:39:e7:34:01:ff:fe:94:7c:38:10:
0c:21:68:64:e1:fe:16:79:d9:ef:f4:54:91:ca:9f:
3a:e4:d2:21:15:29:ab:57:50:b2:56:5f:8f:c5:e2:
97:9f:a2:64:9f:61:1f:72:4b:da:5e:8c:93:e0:11:
4d:5c:3a:4b:b5:a1:d8:0e:b8:2a:22:90:3b:c3:41:
13:16:cc:ba:98:eb:f0:23:c4:41:ac:3b:a9:ec:dc:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:3A:AE:58:47:9C:EF:6C:E4:98:69:AF:FE:E3:9E:31:63:EB:62
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:a6:82:2a:b1:c5:d4:d9:5b:c2:33:e9:b5:18:bb:cb:16:
ac:6f:39:ee:f8:80:7a:5c:99:16:f2:73:1e:8b:16:25:a2:47:
8d:98:ca:b9:d7:26:79:d7:ad:11:b1:9f:0f:a4:b4:e6:50:e7:
27:14:88:ba:2a:e2:0e:26:a1:d3:ae:03:22:11:ea:1a:7d:0b:
c4:09:e6:9d:1c:37:f8:62:e3:f4:6b:2f:98:c4:f3:51:70:31:
57:b9:c0:38:58:13:4a:2e:24:52:d7:ee:1c:da:8f:b0:42:07:
18:65:ab:f7:dc:8a:42:d8:43:d7:eb:8b:e7:f1:df:d3:7c:fa:
6b:cd:10:48:4d:9a:a3:cc:9b:c8:d5:f9:89:d6:59:9a:d6:9a:
46:87:fd:8f:ff:75:57:85:b0:07:fd:df:ca:67:3a:de:d1:ac:
22:63:0c:fa:cf:51:4f:2c:38:41:f9:55:71:27:d7:8e:a8:51:
df:25:07:79:32:22:b8:9b:58:1a:74:d3:fa:59:10:96:26:89:
04:e3:eb:9a:78:40:9e:11:9e:7c:e9:49:bb:42:c3:d8:9f:ff:
9d:5f:95:cd:ec:95:99:da:03:7d:3e:bb:4b:ad:34:6d:75:06:
88:b4:9a:fd:5b:36:5c:d1:4f:e1:9e:8e:d4:e2:1e:8e:ba:c3:
b8:bc:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:02 2026 by rpki-client