Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: mx0OJPbje4UX9Nv4B0ggIy7CF/c3P0c9/If9AO21NaQ=
Subject key identifier: 68:3E:C8:13:9F:8B:46:ED:A0:74:3B:D4:DF:63:31:60:D0:05:B9:7F
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 019EB87CD469D0FE820C79858C94195FDA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 033E
Signing time: Thu 11 Jun 2026 21:00:48 +0000
Manifest this update: Thu 11 Jun 2026 21:00:48 +0000
Manifest next update: Fri 12 Jun 2026 21:00:48 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: IMJTKqf+3JNJ8VmQsfMtR6gSnYl2Syyy+vRa/GHA/FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:d4:69:d0:fe:82:0c:79:85:8c:94:19:5f:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Jun 11 21:00:48 2026 GMT
Not After : Jun 12 21:00:48 2026 GMT
Subject: CN=683ec8139f8b46eda0743bd4df633160d005b97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:73:65:54:a1:3a:8e:56:f6:73:b5:bd:e0:
68:15:36:2d:16:3d:1a:62:a6:ae:1c:53:c0:26:98:
be:65:cd:ba:4c:65:29:e6:ad:0c:e3:1c:52:5f:59:
b9:64:d5:45:c5:69:48:12:7f:3c:78:3b:cc:0a:6e:
8f:ab:92:66:db:8b:b9:09:0b:ad:77:6a:11:fc:8a:
c9:ae:b7:e9:89:85:fb:e8:51:be:c4:9c:2d:30:d5:
4a:a1:7d:77:ed:26:3d:2b:9c:d4:86:13:a1:fa:6c:
85:e4:cf:83:2d:b7:37:ea:a1:7b:ba:87:57:a4:1c:
b9:76:f2:5c:c5:6d:2f:eb:34:98:6f:03:8a:3c:0e:
0c:cb:75:8e:47:98:37:8c:25:2c:90:23:2e:ee:48:
15:8f:72:2e:5e:7f:ee:72:bf:d2:d5:aa:fc:09:6f:
d6:f1:dd:bf:42:5d:2c:4d:84:8e:2f:2e:06:49:c1:
ed:10:90:2a:0c:ab:ca:ca:11:68:bd:9b:07:ec:56:
ac:2e:ad:9f:8d:2e:a3:aa:83:d5:ca:c7:de:ba:c4:
e6:04:6d:ea:30:e1:ea:b7:5e:71:f7:f0:58:4e:e2:
1e:0d:6f:0e:85:3c:d0:e2:50:e1:a4:78:dd:d2:36:
ac:4e:d2:ad:93:44:27:6e:64:f2:6b:f5:77:7a:6b:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:C8:13:9F:8B:46:ED:A0:74:3B:D4:DF:63:31:60:D0:05:B9:7F
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:1b:8c:5c:c0:ee:f0:f5:bb:c8:6d:b7:f2:41:39:1a:7c:
40:91:4b:e0:1c:5f:05:01:c0:b9:31:0a:fa:8b:ae:8f:ee:53:
bf:db:96:3c:31:77:9b:40:d6:dd:cd:a2:c9:1a:44:f1:ab:95:
8c:3c:37:88:1a:fa:8f:de:c4:2f:35:3b:d3:21:33:4c:0f:35:
42:f5:65:64:fc:82:76:bb:b4:56:13:4d:ac:15:35:f3:50:c1:
5a:d1:ee:75:2f:58:36:c8:c1:c9:f4:a6:55:42:63:d1:c6:50:
9d:a7:fe:b7:e7:bb:85:76:40:c3:4f:dc:cd:ec:a8:c1:8c:8c:
a7:93:ba:30:41:6b:b9:5e:72:4d:68:90:d5:bd:9e:b9:06:d7:
5c:5a:53:76:11:e4:6f:8e:e4:ee:71:d2:c5:8c:b9:bd:98:cb:
c4:7b:1e:c8:52:00:dd:69:06:ae:e1:7a:2f:51:ec:4b:80:d6:
a6:bd:eb:1c:9e:85:d6:c6:56:bc:42:9c:f5:d5:10:c2:6c:75:
e5:dd:3b:9b:e8:4c:f1:bd:d0:b3:8f:1b:0f:4c:9e:07:f6:d7:
10:2b:49:49:eb:4c:a8:c8:cd:66:00:6d:64:a6:f1:57:03:88:
4e:79:55:74:7a:79:21:e5:ab:52:a8:cf:69:2b:a6:d6:a9:b6:
87:39:ba:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fNRp0P6CDHmFjJQZX9ppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGFlMTc1ZmJlNjNiMGU5MzA0NjkwOTdjOTQ5MmQ0MmVk
NzkyNDkwHhcNMjYwNjExMjEwMDQ4WhcNMjYwNjEyMjEwMDQ4WjAzMTEwLwYDVQQD
Eyg2ODNlYzgxMzlmOGI0NmVkYTA3NDNiZDRkZjYzMzE2MGQwMDViOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnxzZVShOo5W9nO1veBoFTYtFj0a
YqauHFPAJpi+Zc26TGUp5q0M4xxSX1m5ZNVFxWlIEn88eDvMCm6Pq5Jm24u5CQut
d2oR/IrJrrfpiYX76FG+xJwtMNVKoX137SY9K5zUhhOh+myF5M+DLbc36qF7uodX
pBy5dvJcxW0v6zSYbwOKPA4My3WOR5g3jCUskCMu7kgVj3IuXn/ucr/S1ar8CW/W
8d2/Ql0sTYSOLy4GScHtEJAqDKvKyhFovZsH7FasLq2fjS6jqoPVysfeusTmBG3q
MOHqt15x9/BYTuIeDW8OhTzQ4lDhpHjd0jasTtKtk0QnbmTya/V3emsJOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg+yBOfi0btoHQ71N9jMWDQBbl/MB8GA1UdIwQY
MBaAFGkK4XX75jsOkwRpCXyUktQu15JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgt
OGEwODZlYTk0YmU1LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgtOGEwODZlYTk0YmU1
LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESMbjFzA
7vD1u8htt/JBORp8QJFL4BxfBQHAuTEK+ouuj+5Tv9uWPDF3m0DW3c2iyRpE8auV
jDw3iBr6j97ELzU70yEzTA81QvVlZPyCdru0VhNNrBU181DBWtHudS9YNsjByfSm
VUJj0cZQnaf+t+e7hXZAw0/czeyowYyMp5O6MEFruV5yTWiQ1b2euQbXXFpTdhHk
b47k7nHSxYy5vZjLxHseyFIA3WkGruF6L1HsS4DWpr3rHJ6F1sZWvEKc9dUQwmx1
5d07m+hM8b3Qs48bD0yeB/bXECtJSetMqMjNZgBtZKbxVwOITnlVdHp5IeWrUqjP
aSum1qm2hzm64A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:43 2026 by rpki-client