Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: zQPTazy6I4b2Sye8praglAJm2l2ifhGzFKfuYTys6Rw=
Subject key identifier: 0D:96:9A:81:0A:D8:35:D5:88:3B:79:C3:B0:3C:65:CE:60:43:12:7C
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019DA59D7EBC5E484B927491EC2D34ABC3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 03DC
Signing time: Sun 19 Apr 2026 12:00:55 +0000
Manifest this update: Sun 19 Apr 2026 12:00:55 +0000
Manifest next update: Mon 20 Apr 2026 12:00:55 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: 4YOmNmZqXaQc9M6T5nm7xAbnd/xRaF/SEfrRO4Q7dm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:7e:bc:5e:48:4b:92:74:91:ec:2d:34:ab:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Apr 19 12:00:55 2026 GMT
Not After : Apr 20 12:00:55 2026 GMT
Subject: CN=0d969a810ad835d5883b79c3b03c65ce6043127c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:c4:3a:be:14:d3:84:c9:7e:0e:13:92:cb:
f4:0a:e0:11:59:4d:f5:f7:6f:97:c5:23:5b:6f:57:
cc:ba:28:6f:d9:69:bd:c4:41:a2:4b:2c:09:53:ad:
89:f8:9a:0a:b1:2b:5a:c2:0c:11:f9:ad:fd:41:0b:
69:dc:63:56:29:67:ba:fa:b4:54:9f:8f:51:fc:77:
d9:11:f9:f7:48:50:ad:5c:67:5d:00:2b:36:19:9e:
f0:7f:45:10:c3:03:95:8e:1c:1f:35:59:fa:84:89:
2c:67:de:db:8e:44:f8:80:02:92:68:87:da:b5:83:
c2:78:da:00:55:65:71:8b:01:ad:72:cc:6d:f7:f5:
19:27:05:c0:c8:59:a6:e7:ad:aa:1e:47:bc:cf:e9:
03:cc:3d:99:f0:8b:bc:64:5b:c7:77:40:21:5d:30:
2d:34:14:4f:6e:70:ea:ed:d3:31:7e:1a:86:74:5b:
fa:6a:08:93:9f:dc:25:56:2c:7b:74:35:07:38:86:
99:6e:e7:5e:d0:ff:39:ed:ab:41:02:5b:94:97:fa:
c7:76:12:a4:06:b3:b5:67:04:32:43:e6:af:19:44:
ee:d8:78:fe:ad:b5:06:56:9a:4a:f2:3c:4c:d2:c5:
ea:5b:a3:d3:f6:d2:70:59:1b:b2:43:28:9e:77:06:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:9A:81:0A:D8:35:D5:88:3B:79:C3:B0:3C:65:CE:60:43:12:7C
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:51:33:f8:11:3b:01:17:62:fe:4c:0d:6b:40:ee:cd:f6:d8:
f1:c4:8e:99:b4:dd:9e:93:52:63:7b:97:d1:c9:00:39:61:16:
99:c2:09:23:bb:e5:7b:db:36:7e:d8:3e:8f:2a:8c:fb:cd:55:
52:97:c5:97:ca:31:08:bd:4f:36:bb:56:ae:cf:dd:5c:73:87:
51:4f:75:5c:86:90:87:b9:9e:d9:0f:ae:ee:00:d1:0a:9c:0e:
fb:04:66:02:98:9e:b7:1e:9a:07:c8:79:0e:90:01:60:b9:bc:
99:02:26:05:1d:9d:fd:9a:9a:a8:24:fb:81:ce:c1:0d:26:6f:
cc:d0:22:d0:7f:0b:96:f6:72:6b:d0:50:e1:91:a7:32:d5:f1:
34:cb:11:2e:a9:eb:ab:95:56:8b:21:44:20:5d:95:77:6d:64:
dc:d2:7e:a4:ef:c3:90:25:f1:fb:c5:b6:20:ac:70:0d:52:f5:
86:c3:f7:45:45:40:57:80:78:11:71:38:08:bf:29:ed:54:e1:
72:e4:fd:5f:bf:07:59:76:95:bc:6e:46:a6:69:4a:0b:6f:e9:
28:31:14:58:f9:fd:71:26:e9:b2:4f:bc:d2:7f:ed:d3:7e:6a:
9a:ef:dc:1d:21:01:19:42:82:42:d1:08:0e:db:da:68:83:b9:
5b:46:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:08 2026 by rpki-client