Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: JUIx/nOAOexAgobtQiHSUj2VEBa46Ri8Px5iazCKIrI=
Subject key identifier: 47:F1:0B:18:BF:37:90:6D:6D:4C:E7:7C:12:DB:02:86:48:E4:3D:95
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019FD805B7FB90888FACC279D8C20D724457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0542
Signing time: Thu 06 Aug 2026 17:01:21 +0000
Manifest this update: Thu 06 Aug 2026 17:01:21 +0000
Manifest next update: Fri 07 Aug 2026 17:01:21 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: yeAQGTZjYOUVY/BJ3DwVNdrmOVHg/eX4I+30NEe6VHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 13:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:05:b7:fb:90:88:8f:ac:c2:79:d8:c2:0d:72:44:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Aug 6 17:01:21 2026 GMT
Not After : Aug 7 17:01:21 2026 GMT
Subject: CN=47f10b18bf37906d6d4ce77c12db028648e43d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:53:ec:34:8c:f3:1c:24:f1:24:fc:2e:da:
f4:c8:c7:7f:e9:1e:d7:01:ab:f2:5d:7b:2d:99:2a:
dd:7a:28:c4:69:ff:a6:17:18:9e:62:2c:df:0d:8b:
1d:54:9b:e6:3e:8c:4b:12:58:f0:07:d3:8d:8c:45:
29:f2:1b:08:19:fe:2f:f1:be:d1:78:ce:b6:03:69:
f7:75:7a:e5:76:0b:62:8a:81:30:7f:ed:92:65:39:
5d:61:54:35:aa:9d:ee:39:e2:4f:63:29:97:24:af:
f1:be:bd:61:18:0a:64:3e:24:d9:6a:83:90:06:5f:
d4:67:a9:3a:a4:ed:d8:76:37:03:70:e8:8d:c5:32:
23:c0:fe:0a:3d:b0:b7:c1:cf:93:3c:ec:5f:c5:9a:
29:19:e1:af:54:b3:8a:bd:8c:55:4a:65:6c:2e:dd:
5e:0c:91:13:40:da:ad:b1:39:11:19:aa:8d:75:43:
fc:20:6d:86:18:34:0d:be:e8:38:52:2e:ec:af:95:
02:00:ff:a5:cd:e0:d4:3e:9a:ba:3d:86:78:41:54:
ec:b6:33:06:76:00:2f:be:52:62:81:bc:1c:09:7b:
2e:d4:7e:fc:43:06:82:fd:92:1f:a4:ae:55:d7:b3:
ea:2d:a0:53:b8:f9:d8:df:3c:f6:09:25:cc:6a:ee:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:0B:18:BF:37:90:6D:6D:4C:E7:7C:12:DB:02:86:48:E4:3D:95
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cd:34:eb:dd:61:32:aa:04:7c:7e:d6:a0:2d:97:f2:17:cf:
81:a3:08:11:46:5d:98:60:ff:15:54:d9:3a:02:ff:fd:6b:af:
68:04:64:78:2c:e4:f0:cc:c8:a1:67:9a:0f:72:19:d4:a0:c3:
6b:d9:2b:ae:d6:d3:5c:0a:df:66:3f:cc:fd:bf:bf:52:c7:aa:
9d:bc:a0:4f:2d:72:a1:cf:c8:52:7b:3c:94:e2:b4:2f:7a:fa:
3d:6c:a4:55:c7:04:e5:9a:0a:03:b2:8a:26:a3:35:89:86:81:
b9:99:ee:42:69:26:e4:4d:63:fa:3e:8c:16:f3:c2:f5:96:fc:
8f:18:98:da:a4:cf:ae:f8:98:a7:e6:80:2e:c8:32:51:6a:5a:
e0:dc:ec:f1:09:69:a6:a7:21:d6:6d:f7:fe:f2:6b:d0:15:65:
3e:68:b1:e4:08:b4:f8:a5:bd:fc:ad:31:d7:8b:56:1b:d7:43:
0f:2b:48:a9:98:79:8c:80:d5:28:72:c7:66:0b:71:68:97:81:
54:40:71:d1:95:66:3e:29:7a:79:61:90:31:dc:5f:95:f4:3d:
2c:d1:ac:d3:45:8b:c8:3a:14:dd:ac:a1:1e:b3:0f:ae:97:9e:
96:eb:96:0f:cb:46:5c:19:d9:6d:b8:6b:3e:e5:06:fe:24:83:
ad:d1:84:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/YBbf7kIiPrMJ52MINckRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj
NmE5NmMwHhcNMjYwODA2MTcwMTIxWhcNMjYwODA3MTcwMTIxWjAzMTEwLwYDVQQD
Eyg0N2YxMGIxOGJmMzc5MDZkNmQ0Y2U3N2MxMmRiMDI4NjQ4ZTQzZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRJT7DSM8xwk8ST8Ltr0yMd/6R7X
AavyXXstmSrdeijEaf+mFxieYizfDYsdVJvmPoxLEljwB9ONjEUp8hsIGf4v8b7R
eM62A2n3dXrldgtiioEwf+2SZTldYVQ1qp3uOeJPYymXJK/xvr1hGApkPiTZaoOQ
Bl/UZ6k6pO3YdjcDcOiNxTIjwP4KPbC3wc+TPOxfxZopGeGvVLOKvYxVSmVsLt1e
DJETQNqtsTkRGaqNdUP8IG2GGDQNvug4Ui7sr5UCAP+lzeDUPpq6PYZ4QVTstjMG
dgAvvlJigbwcCXsu1H78QwaC/ZIfpK5V17PqLaBTuPnY3zz2CSXMau7RewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfxCxi/N5BtbUznfBLbAoZI5D2VMB8GA1UdIwQY
MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt
ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw
LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC800691h
MqoEfH7WoC2X8hfPgaMIEUZdmGD/FVTZOgL//WuvaARkeCzk8MzIoWeaD3IZ1KDD
a9krrtbTXArfZj/M/b+/UseqnbygTy1yoc/IUns8lOK0L3r6PWykVccE5ZoKA7KK
JqM1iYaBuZnuQmkm5E1j+j6MFvPC9Zb8jxiY2qTPrviYp+aALsgyUWpa4Nzs8Qlp
pqch1m33/vJr0BVlPmix5Ai0+KW9/K0x14tWG9dDDytIqZh5jIDVKHLHZgtxaJeB
VEBx0ZVmPil6eWGQMdxflfQ9LNGs00WLyDoU3ayhHrMPrpeeluuWD8tGXBnZbbhr
PuUG/iSDrdGE6A==
-----END CERTIFICATE-----
Generated at Thu Aug 6 19:48:25 2026 by rpki-client