Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: jCAJ2PODj1YPMSDZeHTb+jzOb3cUvsDZJ2M/ZJ7cPuo=
Subject key identifier: B4:DC:AA:3A:FF:F9:B7:43:3C:78:45:0B:51:B8:53:DD:3E:9E:36:D0
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019FA260A8DC814E00F42B0D5C9BE3F0E903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0F14
Signing time: Mon 27 Jul 2026 07:01:11 +0000
Manifest this update: Mon 27 Jul 2026 07:01:11 +0000
Manifest next update: Tue 28 Jul 2026 07:01:11 +0000
Files and hashes: 1: R6fKmNiL6DPYHGHsgrQhdxRjogw.roa (hash: KlrIoUKqLYU4rd9VeTGSXIJFZfzjhsMmFKFxCnepX50=)
2: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
3: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (hash: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=)
4: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: XuG3uuGejGQpeSoDqfIXFDuvTFC3Xph9lfUWPowxUqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:a8:dc:81:4e:00:f4:2b:0d:5c:9b:e3:f0:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jul 27 07:01:11 2026 GMT
Not After : Jul 28 07:01:11 2026 GMT
Subject: CN=b4dcaa3afff9b7433c78450b51b853dd3e9e36d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:4d:35:1d:dd:8f:25:5b:ea:32:f3:8a:0c:
a3:99:f5:72:e4:f5:1b:9f:06:8a:b9:0b:9b:34:b3:
63:9c:32:1f:e1:6e:71:3b:80:c9:4e:b4:2c:b1:19:
0b:73:6e:bd:e8:c6:53:12:89:9a:10:16:20:c6:d1:
76:1c:87:36:99:00:1d:a9:a5:04:81:07:2a:43:54:
a9:df:7f:21:de:21:99:a4:74:68:19:72:39:fe:e6:
49:22:40:da:7f:a8:3a:66:dd:4d:a6:ce:75:50:5c:
b5:31:71:81:52:7d:8e:17:5e:5a:80:17:c2:64:41:
11:66:8f:6b:c2:b5:2c:e7:89:46:d8:1f:39:96:e1:
73:b3:94:eb:52:45:48:74:32:d9:34:e7:3f:64:65:
94:52:70:be:0c:f5:5a:4c:3a:1b:05:43:8c:bd:1a:
cf:68:2f:c7:c8:56:81:36:0a:7a:23:20:30:75:6b:
97:65:da:d5:87:49:59:c1:8a:37:95:94:3f:b0:3c:
82:47:d8:f5:4b:a4:7b:3e:6f:b6:8a:94:64:50:f7:
b1:70:4f:89:44:84:c4:fd:7f:03:51:3a:a3:07:da:
99:81:df:8e:ac:43:5f:b6:9f:e1:3d:d3:8f:9a:7a:
8b:fa:81:d8:5b:a8:03:89:4a:11:6d:32:86:e2:ca:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:AA:3A:FF:F9:B7:43:3C:78:45:0B:51:B8:53:DD:3E:9E:36:D0
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:1d:d5:7e:0a:72:70:8a:0e:0a:62:10:33:8a:01:36:90:
7f:45:77:fa:a8:51:8c:3f:e2:23:57:d3:4a:9e:ac:b2:18:53:
d0:21:c0:82:10:4b:63:76:31:08:6b:dc:7c:6f:6a:eb:cf:bf:
b5:1a:7b:dd:4d:e7:af:b5:2a:ef:18:c7:ba:81:2b:93:a2:62:
f8:ea:ac:e0:8d:f8:27:f3:aa:d0:20:12:51:e7:45:ee:27:a5:
34:3c:9f:85:05:d7:7c:d1:fa:88:1c:93:8b:95:d7:95:54:5a:
fa:75:a4:74:64:0f:16:e1:d9:a0:60:de:f1:57:0c:97:6a:c7:
f0:e7:2a:b8:15:eb:0a:db:3a:62:5e:1a:5d:c4:b1:33:43:a3:
15:83:7b:db:c0:f9:25:d0:13:c9:06:68:1a:4c:8f:4a:a0:0e:
3c:4e:66:56:ad:d3:44:14:07:d9:95:85:4d:51:48:c8:91:39:
e1:74:9b:cf:81:8a:20:ea:f5:cd:dc:46:0a:0f:66:40:37:dc:
b2:fd:dd:94:34:c9:4c:57:93:b0:93:a6:c6:40:c8:92:bd:c1:
e9:05:4b:d1:d8:b8:a6:d0:ce:42:b5:67:ff:1c:31:d1:35:5f:
26:70:82:85:53:36:8f:c8:e8:0b:42:5b:e1:46:14:c5:11:a3:
df:26:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:25 2026 by rpki-client