Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: pF22MZmvPp6hApSP0sf0+wD8WUyPO7mJPJXOOCfZB7w=
Subject key identifier: B4:DB:6C:AE:69:CE:D0:30:2F:D6:ED:6C:BF:F6:A7:8D:C2:25:23:EA
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 01A0E853964654A25DC072A72901EEA29E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 05CF
Signing time: Mon 28 Sep 2026 14:03:07 +0000
Manifest this update: Mon 28 Sep 2026 14:03:07 +0000
Manifest next update: Tue 29 Sep 2026 14:03:07 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: qPPqHOGIbGO3ZKIXyYT9NAsks3YLCcf0tvs33KnLhuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:96:46:54:a2:5d:c0:72:a7:29:01:ee:a2:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Sep 28 14:03:07 2026 GMT
Not After : Sep 29 14:03:07 2026 GMT
Subject: CN=b4db6cae69ced0302fd6ed6cbff6a78dc22523ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:f0:37:1a:be:c8:6b:85:ef:86:89:3d:fc:
f5:34:ce:ff:59:94:3a:90:62:84:04:ae:dc:54:e9:
48:25:76:a2:13:20:ce:b5:a2:77:e8:07:62:0b:5c:
93:98:d0:9d:63:a3:05:86:5e:2f:37:4f:41:32:c0:
fb:e0:f2:8a:be:d9:51:6e:11:53:49:7d:91:45:c2:
36:99:86:22:9c:c7:70:80:74:f8:a2:00:30:17:f9:
77:f5:47:38:06:a3:0d:3c:3d:8a:de:84:00:14:82:
41:e0:90:8f:f1:78:6e:f9:f1:b6:98:ec:80:3a:41:
18:ac:de:c6:4c:41:5f:2a:55:4f:9a:a0:87:56:a2:
47:dd:06:c5:c5:01:90:de:c5:32:42:33:ec:91:ae:
0f:a8:e0:76:41:4e:e2:81:a6:8b:e3:16:86:d2:5b:
51:a1:ad:00:36:7e:ac:d3:d3:cd:8a:28:0d:c1:f1:
35:d8:ba:55:c8:c7:2e:a1:0e:68:b8:e4:34:b9:f9:
7f:fd:11:36:80:ae:7e:7e:1e:1b:b3:80:c1:4d:ef:
07:0e:da:5d:d3:8d:c1:f1:3c:ab:07:bd:65:83:b0:
66:85:83:27:8b:ab:95:dc:f1:d7:81:6a:d2:df:40:
c8:1c:33:d3:6f:6a:be:94:f5:a5:cb:f7:be:f7:42:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:6C:AE:69:CE:D0:30:2F:D6:ED:6C:BF:F6:A7:8D:C2:25:23:EA
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e5:e7:40:c1:9d:7e:37:37:d8:08:89:fe:1b:c3:4a:7a:7d:
b6:70:16:b0:07:6d:3a:c8:88:dc:03:6d:d8:5e:ed:43:ad:23:
fd:b5:59:74:49:6d:df:2e:20:28:d1:2f:ff:65:f1:30:a0:a1:
d9:ff:25:ee:f0:cf:31:7e:98:65:8f:1b:fe:91:51:a0:9b:1f:
26:2a:99:bb:ad:63:74:f7:65:e0:ac:33:a6:d4:4d:9f:88:13:
e6:3d:3a:f3:ea:5b:12:00:b3:59:98:df:a5:7e:ba:28:d6:9d:
3f:e6:ff:4f:05:db:84:88:c8:08:12:cb:e2:54:2c:d3:a9:9c:
94:78:c4:6d:e2:48:35:a7:1e:83:a8:54:e1:43:ed:61:7f:b6:
3d:bf:67:46:fe:50:33:cb:b1:b5:39:84:21:0a:cd:63:a0:87:
2c:3e:de:c0:0f:dc:0c:d0:fe:00:08:e6:86:be:17:f1:97:fd:
9c:21:9a:07:da:a7:18:d1:69:9b:cc:71:e1:aa:4b:e1:12:72:
a3:7d:5f:29:51:67:67:e3:cd:d6:f6:8f:9e:49:dd:cf:2d:f7:
46:1c:4b:e3:7b:40:6d:eb:78:0f:68:72:9f:9b:c8:8e:be:ef:
04:fd:43:ac:61:55:64:fe:db:bd:52:36:de:50:d4:5e:27:c0:
aa:3d:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:59:10 2026 by rpki-client