Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: 5WIosc4U7QoxLllOdcu85o9sGbeWIgoFKVbCZwqeEMU=
Subject key identifier: 4E:75:D1:44:C4:B5:4C:92:32:BC:77:A0:55:2B:D5:51:D3:69:1A:87
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019E3229AAD9B52ABFE947835C121540E040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 11DA
Signing time: Sat 16 May 2026 19:00:51 +0000
Manifest this update: Sat 16 May 2026 19:00:51 +0000
Manifest next update: Sun 17 May 2026 19:00:51 +0000
Files and hashes: 1: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (hash: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: +59HdgtGMbKvxvkJh9YiTtf+kVPKBpXy92ZNoXme1rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:aa:d9:b5:2a:bf:e9:47:83:5c:12:15:40:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: May 16 19:00:51 2026 GMT
Not After : May 17 19:00:51 2026 GMT
Subject: CN=4e75d144c4b54c9232bc77a0552bd551d3691a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:89:12:ec:89:f3:e1:7c:50:23:0e:bc:04:
1f:d5:0c:07:b6:d7:32:4f:d4:ec:c1:fb:f0:3a:dc:
f2:fa:85:59:67:ac:13:d2:61:f9:ed:99:e0:52:84:
68:ae:79:db:31:b7:d5:0c:66:1e:e3:d6:cb:3b:75:
73:58:26:98:1a:26:b1:6a:ce:45:e5:ee:32:14:31:
f5:f5:ef:b1:e0:19:11:d5:7c:7b:72:f9:37:c9:fb:
cd:31:ba:6d:c6:d1:9a:84:86:d0:3b:d5:64:dd:a9:
76:d0:f2:00:ee:4b:58:01:82:b8:16:c1:73:06:b2:
91:68:a0:67:42:97:34:8d:ca:3b:a1:3a:49:d5:45:
8a:82:a8:1d:41:51:b8:4a:f1:04:e3:f0:48:a3:62:
ae:e9:c9:e8:0c:15:17:d8:66:3e:47:b4:33:6e:8f:
59:49:0b:b9:07:48:00:47:7b:6d:a3:09:8a:ac:4b:
32:3a:47:a1:56:fa:f4:dd:9e:6a:8e:16:87:52:fb:
39:44:86:c2:8b:f7:77:43:d3:43:9a:69:6f:28:d7:
1c:f8:cc:17:d8:ef:5c:e7:92:b1:ea:13:ca:29:23:
c2:39:cf:c0:8a:a4:a9:15:d2:46:42:0d:7b:30:b1:
2e:d3:d0:3f:7f:cc:13:cc:37:1a:4d:27:78:3f:e7:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:D1:44:C4:B5:4C:92:32:BC:77:A0:55:2B:D5:51:D3:69:1A:87
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:e7:8e:d6:32:fd:4d:86:d6:6d:7c:a7:e3:5f:ad:be:9c:
d8:2d:ab:05:14:11:20:17:4c:4e:6b:bd:79:0c:82:29:0d:fc:
a1:25:2f:95:23:4f:58:22:12:a1:09:68:0e:3d:bd:d3:ee:92:
d8:34:62:7c:86:8a:80:8a:3d:94:38:3e:f8:c5:44:76:97:2b:
81:44:5d:ec:7c:e5:7f:d9:36:f1:57:5c:d4:54:d4:3f:36:d4:
ab:f0:1e:3d:9d:9a:3b:bc:6a:99:68:2a:25:47:60:37:dd:15:
de:24:9f:9a:fb:81:67:3d:2b:29:59:cc:25:3b:d0:51:57:c8:
35:e6:b0:03:75:ac:60:88:2b:51:2f:22:aa:dc:7e:65:52:ce:
27:a2:94:f1:77:77:bd:5e:04:e6:84:31:7c:3a:bb:5b:19:a7:
f6:81:b9:c9:6c:2d:c9:0a:87:16:1a:49:0a:3d:e8:20:12:97:
44:39:bb:a7:3a:ff:b8:10:ee:7c:25:23:72:a6:ab:83:1e:99:
63:12:cc:12:2b:6a:94:5b:14:74:24:26:e7:fd:a3:4b:2f:e7:
37:61:8b:de:d5:53:58:01:dd:5f:4c:ce:ec:46:34:d4:0c:da:
42:4d:31:f4:34:57:83:08:b0:a9:4e:22:56:4b:b1:88:e9:9f:
75:6f:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:42 2026 by rpki-client