Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: 1OxYI32N3rVf58/kL8hvBgEAu0Lbkt3/elsTgrLjZ+w=
Subject key identifier: 3D:A0:C8:1F:6F:25:AD:B9:9B:39:F0:E0:54:FB:8C:9D:A0:96:9F:5B
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A16B3589F7B8DF086FFB72AFB4D016BA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 05D0
Signing time: Sat 24 Oct 2026 00:00:33 +0000
Manifest this update: Sat 24 Oct 2026 00:00:33 +0000
Manifest next update: Sun 25 Oct 2026 00:00:33 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: 7qSzf2vuDPauHCP9mgUzTSuKfX6uVu/3FHVWTSYKkHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:35:89:f7:b8:df:08:6f:fb:72:af:b4:d0:16:ba:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Oct 24 00:00:33 2026 GMT
Not After : Oct 25 00:00:33 2026 GMT
Subject: CN=3da0c81f6f25adb99b39f0e054fb8c9da0969f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:b6:3f:df:7a:2c:73:ee:61:70:67:00:7c:
5b:68:27:09:7d:85:aa:de:f3:2c:b8:cb:5d:e6:6f:
64:d3:38:69:99:6f:4e:29:da:64:22:23:ac:14:fd:
13:dd:7a:8c:4f:8b:ff:7a:45:29:53:d0:b5:a6:78:
05:aa:9d:8f:3c:67:ce:df:6e:c1:02:99:a3:15:31:
df:23:ff:9c:f8:09:30:66:a4:58:c3:56:26:ca:65:
e8:d0:b8:66:a0:10:b7:80:64:60:8c:2b:95:b5:37:
cb:47:fd:2a:d0:51:ac:a6:3d:c5:88:f5:29:f2:ce:
ad:3b:af:d8:bb:52:04:65:db:23:0f:a4:08:f9:c3:
6e:35:18:84:91:f5:d6:a5:ea:e4:9e:d5:a2:67:a9:
23:16:4b:3c:9c:ca:28:9f:23:e5:9a:a8:3c:42:4b:
29:98:6a:1a:37:57:f7:df:c5:de:4a:51:4c:93:42:
a0:d5:08:a9:76:06:37:1b:01:39:9b:49:a6:6f:93:
63:1d:5a:11:89:09:25:9e:91:34:8a:20:46:e5:e0:
97:74:8f:c2:67:19:c2:38:00:3a:31:1d:5c:fb:ec:
dc:5d:89:62:54:ee:15:8a:53:2b:1f:55:a4:a1:c7:
52:0f:5a:36:f9:b3:35:2d:a6:ae:00:61:ef:83:2f:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:C8:1F:6F:25:AD:B9:9B:39:F0:E0:54:FB:8C:9D:A0:96:9F:5B
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:99:29:ed:f6:b3:75:ee:45:7f:a2:34:39:1d:9a:65:d1:
74:c0:1f:19:e8:84:32:c8:29:a2:35:a2:98:52:f0:93:fd:5a:
73:6d:dd:18:1f:bb:f3:6f:11:87:37:6b:c8:66:39:16:4c:e4:
fd:63:a2:f6:9f:f6:7d:1b:15:08:fe:6b:b2:81:94:dc:a1:20:
7f:93:c7:5f:eb:3b:a5:0b:9d:cd:ab:0b:a9:a6:72:e8:3f:e7:
ee:2d:46:92:e0:53:63:08:b1:61:a5:7a:60:dc:ff:57:e2:56:
0f:c1:c8:f0:13:80:71:1a:be:16:10:90:1d:e5:7e:4e:28:8d:
97:cc:7b:51:96:ca:b0:f8:2d:fe:6b:ce:33:35:94:39:98:73:
88:c5:94:cb:1a:72:04:71:14:e4:c9:c3:31:58:f2:d1:73:52:
95:d2:8a:68:8b:95:0b:c1:44:b2:e0:92:45:a2:71:98:c7:f4:
87:63:df:0e:8c:2b:ad:00:8f:9e:30:d7:47:4c:06:49:73:9b:
7b:34:dc:97:db:d2:3e:ba:9b:32:f9:de:81:45:09:15:a8:d1:
5c:4d:41:0c:de:14:15:b1:3d:85:f0:fa:f2:1e:fa:dd:63:93:
03:57:7c:5f:43:cc:0a:70:6f:65:cf:aa:6f:71:8c:f3:53:a0:
df:8b:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:23:05 2026 by rpki-client