
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: iXRziqX34Dt0ApryCz/JppFHEgIE4457MIagiS5boWw=
Subject key identifier: 3F:8A:29:9E:08:DE:3C:BF:FA:C6:27:4D:2E:89:CF:C2:10:DC:EC:39
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019EB80EAB4C263FCAF117C60E2B6D9FDB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0E99
Signing time: Thu 11 Jun 2026 19:00:29 +0000
Manifest this update: Thu 11 Jun 2026 19:00:29 +0000
Manifest next update: Fri 12 Jun 2026 19:00:29 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: +x3dtFilkSSPVmRwn2dCWtxYsJc3W0KJpQwBC4hFk4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:ab:4c:26:3f:ca:f1:17:c6:0e:2b:6d:9f:db:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 11 19:00:29 2026 GMT
Not After : Jun 12 19:00:29 2026 GMT
Subject: CN=3f8a299e08de3cbffac6274d2e89cfc210dcec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:e0:44:13:77:95:e3:46:d9:1b:9f:f4:2c:
e0:48:ec:bc:98:b2:ed:ef:2f:6e:21:77:1e:76:7d:
03:ad:b0:63:2d:a0:66:31:e5:90:de:2e:f5:34:b7:
d7:02:cf:64:d7:11:b7:59:a0:18:46:c1:e1:e5:42:
06:d2:e2:9f:f7:ae:c4:8a:8f:41:07:b4:d6:db:5d:
9e:e9:36:4d:27:55:f2:ea:05:f7:2c:08:20:39:59:
d4:e7:40:b0:04:ea:3a:fe:3d:f7:ee:5f:da:cc:6b:
1a:e7:83:67:fd:82:21:8f:b1:ff:3d:1b:dd:fe:fd:
73:be:cf:c7:36:c8:b0:c7:15:8f:5a:e2:8a:1f:8f:
d2:31:72:b1:38:ea:ed:74:2c:5b:e3:71:ec:20:0a:
ed:59:59:b1:b4:80:35:14:65:9b:22:b6:eb:24:0b:
cb:f4:52:bb:51:4c:21:9b:17:0d:2a:66:96:6a:2d:
81:d5:05:a2:17:6c:97:b5:ea:cc:44:14:81:9f:7c:
1e:63:b2:51:43:83:ae:65:bc:16:bb:e7:87:d2:5c:
b6:7d:ea:3b:fa:22:ba:b5:a5:55:b3:d3:15:0b:ba:
3c:38:4c:86:a2:58:b4:dd:a9:93:8b:3f:e9:a0:c0:
d6:7f:63:10:52:33:6e:d5:83:b7:3a:8c:99:fc:6b:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:29:9E:08:DE:3C:BF:FA:C6:27:4D:2E:89:CF:C2:10:DC:EC:39
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:57:9c:aa:a4:89:4d:26:66:38:af:81:86:8a:f1:22:5b:23:
85:70:34:d4:9f:de:58:25:21:8b:cb:07:ba:53:48:b0:4a:91:
bf:6d:50:87:ab:9b:88:8e:6e:82:9b:03:6f:4d:89:e2:30:76:
fa:a0:ab:50:40:0d:fc:e2:0d:88:02:6b:ee:d9:f0:08:ca:68:
cd:66:b4:ec:e3:ed:14:5c:1e:87:93:f9:4d:42:cf:e3:b8:7c:
94:cf:20:f4:f3:22:43:be:a9:39:78:d6:f6:4c:ae:a2:b5:c5:
6d:26:2a:67:62:37:6c:0a:ff:49:a7:07:2b:f9:2f:ee:21:31:
0b:e7:de:fc:51:6f:fb:24:1e:6a:46:c0:8a:a5:c9:9d:30:32:
2a:78:a3:1f:ed:35:0f:73:31:f1:c1:e4:f3:43:57:c2:fe:92:
a6:25:c2:b7:13:98:c6:b9:7b:b0:b7:5e:83:fe:59:68:21:7b:
c6:2f:55:4f:25:88:9a:53:23:5e:b1:30:46:ff:d5:8f:af:f4:
44:41:dd:0d:d4:bc:86:7f:2c:8d:9c:2e:31:ef:05:8c:55:a2:
f3:22:7c:c1:d5:07:90:1b:eb:24:f5:5a:d4:60:08:48:21:2f:
1c:58:de:ca:d7:75:1d:6e:90:a6:9b:03:07:97:d7:43:86:60:
bf:ab:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:06:06 2026 by rpki-client