Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: Sit0jgiDlRKiU5cYYjnkMjAvLu2ZNeVougCb4e243W8=
Subject key identifier: 96:88:84:C8:E2:D4:ED:32:C8:D1:BA:E3:B1:8F:7B:75:F3:B1:24:ED
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A1DF1556C3821B183FB5E7D98D55DA4269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 060C
Signing time: Sun 15 Nov 2026 12:01:19 +0000
Manifest this update: Sun 15 Nov 2026 12:01:19 +0000
Manifest next update: Mon 16 Nov 2026 12:01:19 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: zdQrwP5Od7NxUu4RnmCCL/vaiaorAv8RT8yoARMcJMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:56:c3:82:1b:18:3f:b5:e7:d9:8d:55:da:42:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Nov 15 12:01:19 2026 GMT
Not After : Nov 16 12:01:19 2026 GMT
Subject: CN=968884c8e2d4ed32c8d1bae3b18f7b75f3b124ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:2e:a7:7f:27:1e:c4:47:f2:a1:0e:30:56:
6b:91:c4:92:ed:0c:89:8d:e8:96:35:d6:5d:c3:60:
e1:35:c3:4b:b1:02:48:97:80:23:78:87:c9:b0:92:
99:8d:c7:00:1d:26:c4:fe:d9:68:2c:6e:ce:68:c9:
bb:f8:62:0f:4b:b3:1a:e7:ff:d6:a7:20:0d:89:73:
31:ab:e9:f6:b9:ff:45:76:02:a0:ae:a3:c9:3f:60:
f5:d3:d5:09:83:82:05:f7:e6:b5:c5:b7:1b:e7:0b:
da:bf:a5:89:9e:b3:7b:98:08:59:00:ea:d1:a8:eb:
78:d3:d6:53:37:0e:33:fe:da:6c:0c:89:87:13:33:
12:3a:6e:a2:e8:ef:3d:96:d6:56:d0:01:3f:f7:d2:
a2:bf:18:d0:34:4c:5f:4e:a4:85:d7:54:c5:4f:99:
94:6c:26:73:05:3f:9b:1b:76:74:92:06:66:61:7c:
4f:a9:51:f5:f2:b5:26:d9:c1:6b:85:c6:2a:55:09:
d3:fc:13:9b:90:19:35:96:6c:63:9f:05:d8:6f:88:
1e:45:42:67:be:db:2a:7e:1b:dd:c4:f7:aa:4f:62:
77:1a:7d:39:ac:ea:a7:be:71:e2:b7:be:04:75:a5:
b2:81:c1:b2:5f:11:ce:ad:20:75:9a:3c:47:02:12:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:84:C8:E2:D4:ED:32:C8:D1:BA:E3:B1:8F:7B:75:F3:B1:24:ED
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e4:56:9c:11:f8:84:6e:66:41:14:75:7c:34:a6:63:bc:0d:
74:ac:a4:15:9e:03:ee:7f:c5:b0:7e:96:eb:f2:c1:78:02:78:
9f:de:cb:ce:f7:49:f2:44:05:5a:8d:d2:14:6c:aa:08:5a:5a:
fe:2f:49:66:98:01:92:5a:15:16:e9:ae:8e:ac:2d:8f:8c:34:
34:c9:3d:fe:c0:3d:d3:1e:8d:4a:a5:15:1c:6a:cf:0f:61:c5:
ff:54:ff:d4:5a:36:6b:68:d2:31:86:ac:e6:34:44:5e:6f:82:
9c:96:71:19:ec:24:b7:08:c0:10:2f:07:d9:4d:4c:46:70:08:
6d:8d:5d:19:a9:61:f4:59:4d:76:cc:bb:9b:a8:b6:8e:9d:ca:
98:98:2b:0a:1e:7f:82:64:b3:52:32:0c:24:fb:99:29:62:0e:
9e:de:b4:8e:df:e4:30:45:3e:79:5f:49:e3:57:31:da:48:5b:
ce:d3:68:74:2b:07:63:e2:47:47:26:34:79:4e:97:46:72:37:
ff:ee:3d:36:96:9a:98:25:b8:62:07:06:01:1b:f5:96:e0:7b:
25:b6:ed:6a:e1:f7:dd:17:34:15:cc:e5:48:0f:ca:9b:d3:99:
f8:73:0a:c2:1b:6c:48:19:02:bf:29:47:c5:43:2e:74:2f:bc:
d4:3a:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:45 2026 by rpki-client