Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: 4UJ3leQxvhFZEO1n9K314R+UU0zPLTlq74KF31nemos=
Subject key identifier: 7A:35:09:1D:86:DF:90:5F:B7:97:92:6F:40:04:09:0B:A7:40:DB:17
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019F141D1D747E6F883BE0F45263B15F829E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0BE5
Signing time: Mon 29 Jun 2026 16:01:20 +0000
Manifest this update: Mon 29 Jun 2026 16:01:20 +0000
Manifest next update: Tue 30 Jun 2026 16:01:20 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: xvMuk1cSgp9lcpeggI0yy9p/TKp0VeiyAmSQ6GdMshQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1d:1d:74:7e:6f:88:3b:e0:f4:52:63:b1:5f:82:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jun 29 16:01:20 2026 GMT
Not After : Jun 30 16:01:20 2026 GMT
Subject: CN=7a35091d86df905fb797926f4004090ba740db17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:8b:ff:c4:91:70:a0:3e:54:f0:7b:59:4f:
97:da:d9:ea:c0:e3:91:d8:e7:fc:b7:70:6c:c4:ac:
9a:c1:63:6e:8a:d5:7f:8e:27:d2:7c:fd:26:39:80:
8b:ab:22:89:99:d9:f4:93:28:73:ab:e2:49:88:c3:
45:e4:ea:e0:ab:8c:1f:77:8f:5c:9e:59:89:f7:25:
52:0e:f6:7b:ab:5a:36:44:1c:e4:95:39:17:ae:57:
3f:89:4b:52:c6:11:d1:49:aa:06:73:a3:45:44:4e:
af:94:c9:6e:3c:e6:9f:30:32:f6:d7:36:24:1b:e2:
74:9e:db:97:00:d9:e0:9a:b5:f9:7c:97:0a:43:5c:
98:e1:82:d8:5d:3f:75:79:37:6c:c0:f6:ea:f1:1f:
c8:9a:3e:42:71:d4:f0:50:32:a3:43:f6:68:7c:a1:
a4:72:79:1b:ee:9a:a2:b3:87:cb:fd:7c:f5:12:91:
fa:9c:87:03:e9:26:93:e4:44:ce:4e:ac:ff:be:9d:
26:28:36:4d:cb:c6:a5:4b:fa:ab:0f:cf:cb:da:a8:
98:28:73:6b:06:b6:a4:0a:b7:ab:43:08:61:c2:d8:
d0:13:bc:d2:65:ae:9f:4c:0e:c4:af:8f:1d:a7:0e:
5e:7f:fb:b9:cd:4a:a4:64:9e:81:2d:dd:65:35:5a:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:09:1D:86:DF:90:5F:B7:97:92:6F:40:04:09:0B:A7:40:DB:17
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:d5:3b:57:6f:57:62:36:d5:09:b6:94:4d:41:63:76:f6:
0b:af:19:11:91:c2:5d:7f:d6:73:aa:42:a8:84:7d:91:b9:ac:
e1:6a:bc:fe:5c:c6:9f:5a:98:85:6a:b2:6e:59:ff:18:8a:0c:
de:da:16:31:e7:20:20:aa:90:57:b5:83:5b:72:a8:67:be:23:
f2:f3:fd:6c:1c:14:ef:88:4e:c6:8d:23:d8:a6:f4:ad:90:17:
df:50:b0:67:11:32:a8:2a:e0:6d:ce:c6:f6:6d:2b:e9:b1:41:
68:3b:b3:9c:7b:4b:ed:ae:36:fd:12:3f:c1:cb:b3:94:45:13:
80:8a:6f:ed:75:5d:8a:20:f1:87:a3:6d:39:46:42:b8:4f:49:
c3:12:09:6b:37:05:9f:4b:6e:12:c2:3a:ff:d8:c8:ea:41:05:
91:2d:dd:dd:38:6e:a0:2c:a8:d6:66:55:b5:4a:ac:1f:42:76:
80:ff:f7:db:a6:83:f5:ea:5c:be:c2:be:42:7e:e5:f0:ac:98:
01:50:e8:18:c7:db:22:6c:e1:c7:06:ea:be:c0:d6:bb:99:c9:
f8:46:95:66:03:fc:a7:86:47:1a:5c:f5:8f:16:1b:90:d8:3e:
a8:94:86:37:83:ff:ce:c6:ea:58:a7:2a:6f:4f:9c:b4:f8:ed:
05:6c:67:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UHR10fm+IO+D0UmOxX4KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGEyNjMyNDk4NDdjZjk3MzQ0NzQyMjEzNjQ0ZjkyOWJl
YWE5OTcwHhcNMjYwNjI5MTYwMTIwWhcNMjYwNjMwMTYwMTIwWjAzMTEwLwYDVQQD
Eyg3YTM1MDkxZDg2ZGY5MDVmYjc5NzkyNmY0MDA0MDkwYmE3NDBkYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnaL/8SRcKA+VPB7WU+X2tnqwOOR
2Of8t3BsxKyawWNuitV/jifSfP0mOYCLqyKJmdn0kyhzq+JJiMNF5Orgq4wfd49c
nlmJ9yVSDvZ7q1o2RBzklTkXrlc/iUtSxhHRSaoGc6NFRE6vlMluPOafMDL21zYk
G+J0ntuXANngmrX5fJcKQ1yY4YLYXT91eTdswPbq8R/Imj5CcdTwUDKjQ/ZofKGk
cnkb7pqis4fL/Xz1EpH6nIcD6SaT5ETOTqz/vp0mKDZNy8alS/qrD8/L2qiYKHNr
BrakCrerQwhhwtjQE7zSZa6fTA7Er48dpw5ef/u5zUqkZJ6BLd1lNVq33QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo1CR2G35Bft5eSb0AECQunQNsXMB8GA1UdIwQY
MBaAFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAt
MzFiMmE2MDdiYTk3LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hNzZhODYtNzViMy00Y2VmLWEzNDAtMzFiMmE2MDdiYTk3
LzEvYVFvbU1rbUVmUGx6UkhRaUUyUlBrcHZxcVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwTVO1dv
V2I21Qm2lE1BY3b2C68ZEZHCXX/Wc6pCqIR9kbms4Wq8/lzGn1qYhWqybln/GIoM
3toWMecgIKqQV7WDW3KoZ74j8vP9bBwU74hOxo0j2Kb0rZAX31CwZxEyqCrgbc7G
9m0r6bFBaDuznHtL7a42/RI/wcuzlEUTgIpv7XVdiiDxh6NtOUZCuE9JwxIJazcF
n0tuEsI6/9jI6kEFkS3d3ThuoCyo1mZVtUqsH0J2gP/326aD9epcvsK+Qn7l8KyY
AVDoGMfbImzhxwbqvsDWu5nJ+EaVZgP8p4ZHGlz1jxYbkNg+qJSGN4P/zsbqWKcq
b0+ctPjtBWxnAA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 19:28:39 2026 by rpki-client