Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: a9CSmVB6BlvHyk3pGGkIiSFf1ZhxZ+U7SG1r0KIo0ds=
Subject key identifier: 5B:AE:2E:89:85:19:50:53:F0:61:C3:9D:06:96:96:11:32:FE:CD:86
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019E2A703CDBC667CA9F30624C58E20974B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0B6C
Signing time: Fri 15 May 2026 07:00:59 +0000
Manifest this update: Fri 15 May 2026 07:00:59 +0000
Manifest next update: Sat 16 May 2026 07:00:59 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: VuEfN4AHJxnJprryjjQhwmVhPqRQbDbzFmGo+LnI82g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:3c:db:c6:67:ca:9f:30:62:4c:58:e2:09:74:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: May 15 07:00:59 2026 GMT
Not After : May 16 07:00:59 2026 GMT
Subject: CN=5bae2e8985195053f061c39d0696961132fecd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:97:3a:9f:cd:43:5b:7c:9b:ce:d7:b4:4c:
51:17:28:18:29:ad:31:e4:42:6f:49:2d:43:25:6e:
c1:ac:45:15:43:1d:50:52:55:6a:65:64:37:eb:08:
9e:1e:9f:4c:3d:0b:d9:fc:20:6e:5c:e2:3e:36:d4:
d2:9c:71:a2:c0:fc:e7:aa:d4:ab:db:29:65:2f:43:
de:11:9b:57:36:dd:0c:94:d4:29:74:7c:07:21:bb:
52:7a:c9:94:87:b6:05:8e:07:43:82:5a:de:e2:97:
88:53:23:82:fa:fc:4b:d8:5a:d5:9b:28:15:b3:23:
67:38:49:d2:4c:a5:0f:ea:4d:ff:ca:64:3c:59:ef:
a7:48:23:8d:aa:ad:cf:b1:d0:1e:d5:cf:3f:9b:b2:
4d:e3:37:91:ec:5f:2c:5c:b7:e8:5b:b0:c2:cd:7c:
37:75:7d:47:ad:ec:9a:57:e5:ea:97:02:72:f5:26:
5e:47:99:b8:5c:8d:5e:12:11:a5:a1:4e:b9:30:dc:
8c:92:b9:f4:ec:40:6b:6e:08:6e:d9:ec:48:6c:a8:
28:96:a1:69:88:86:e2:bf:6b:99:28:7c:e1:14:f3:
4b:9f:29:7d:1e:17:00:81:fc:df:f0:6d:ce:06:4a:
e4:40:5d:f2:a6:78:72:97:6d:db:b1:9d:80:2b:5c:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:2E:89:85:19:50:53:F0:61:C3:9D:06:96:96:11:32:FE:CD:86
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dd:a1:3e:7f:54:29:fe:94:b3:c3:03:f0:86:8e:c9:b8:a8:
ba:d1:82:a0:bc:68:36:63:39:c2:9f:5d:89:cd:22:61:94:8a:
b6:a7:e5:81:f5:86:00:1d:d8:6d:35:a6:8e:64:ad:d5:53:c2:
1a:60:87:18:26:0d:57:e0:d9:5e:7e:08:54:5d:4a:42:43:59:
52:09:81:4e:a3:d2:35:5c:41:b7:cc:b3:3e:67:72:a8:bd:3e:
cf:08:e7:3e:2b:7d:1d:62:ef:38:db:44:f0:4f:91:7e:34:66:
ad:62:da:a4:1d:22:ac:4e:73:44:0e:ff:d2:cb:ee:04:ce:9d:
61:98:74:87:95:5e:c6:82:80:aa:f6:ee:68:82:42:d5:37:db:
47:c4:4f:83:ea:90:56:26:a2:37:7d:28:64:b4:f2:e1:b1:1c:
4d:ce:c2:d3:a1:d6:17:24:59:f2:c3:8e:85:a5:73:4c:bf:7d:
8e:f2:c5:32:f1:72:a0:c2:8f:6e:90:65:c8:eb:1b:bc:ed:9d:
e9:ac:58:3f:28:0b:b1:46:80:2a:e0:7a:81:ad:dc:78:df:ef:
a0:dc:cb:a7:be:12:d2:87:e2:a5:0a:69:b5:d5:a9:02:32:0a:
64:5c:ac:1a:c6:e5:f0:45:ab:de:35:d4:af:44:92:c3:6d:5e:
dd:f8:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:49:46 2026 by rpki-client