Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: +8gOnsbgi3c4+B3zO7JV3/0cloTm0cl6inWPQ3j6z6g=
Subject key identifier: A0:B0:BB:E4:8C:AF:B3:41:35:5F:0D:CA:72:8B:14:80:E9:EE:25:E5
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019E9AE05E98EF59382E7C8033F9F5A6D0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 045B
Signing time: Sat 06 Jun 2026 03:00:55 +0000
Manifest this update: Sat 06 Jun 2026 03:00:55 +0000
Manifest next update: Sun 07 Jun 2026 03:00:55 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: gZnxyDihBGAYfmO114KSzl+mycOHJ8oY/ZDhmw/7ZP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:e0:5e:98:ef:59:38:2e:7c:80:33:f9:f5:a6:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Jun 6 03:00:55 2026 GMT
Not After : Jun 7 03:00:55 2026 GMT
Subject: CN=a0b0bbe48cafb341355f0dca728b1480e9ee25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:57:78:de:b4:29:fb:b4:e3:fd:6f:e3:ee:
a6:0e:12:27:26:52:7f:d7:32:92:5c:21:f6:23:41:
13:8f:bf:64:74:af:7f:49:73:8f:c1:db:ba:f7:19:
65:fc:aa:3e:c3:94:f3:54:3f:e7:5f:ba:a5:d6:24:
8d:c1:f8:04:c4:1e:02:c9:75:9f:de:41:a4:cc:7f:
e2:f4:fe:15:aa:b7:0f:07:50:4e:61:b6:cd:62:17:
22:76:04:ac:bc:6d:c5:2f:93:bd:11:cd:f2:39:cc:
f3:3e:95:62:af:e6:69:32:32:68:93:37:2d:de:dc:
f2:84:cc:29:51:35:a2:6c:e1:1c:47:d1:ee:37:fe:
e3:84:0e:ba:70:70:58:cd:48:2a:68:89:0b:54:dd:
16:f3:51:d2:2a:17:07:b6:a2:a0:45:7c:5c:51:d8:
8b:3f:12:16:82:49:e0:3f:44:83:db:9d:1d:4d:f6:
fb:80:ab:96:0e:cf:9f:89:90:6f:2d:f4:68:f2:e8:
f4:cd:2f:32:b1:3f:32:74:12:28:01:bc:1f:67:fa:
59:07:86:65:cc:5a:bf:99:21:7a:bc:94:ca:19:05:
e7:d1:d0:dc:b5:f8:e4:29:a8:43:34:01:32:3b:51:
e2:24:3c:db:ca:da:36:b3:98:f0:9b:e8:f4:b4:05:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:BB:E4:8C:AF:B3:41:35:5F:0D:CA:72:8B:14:80:E9:EE:25:E5
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:ba:24:d2:f6:c8:2f:10:c7:1e:24:14:b8:3d:59:4a:21:
de:5e:2d:a8:9d:37:89:0c:47:ca:04:a3:15:59:7c:8e:71:21:
72:a4:f8:5f:52:c8:99:c4:71:9f:ba:78:94:59:94:e2:63:3d:
19:73:8e:8e:10:c1:27:bd:b0:16:4f:8f:25:04:85:d1:eb:75:
9c:65:d2:af:52:9d:21:d2:e2:70:39:68:91:81:52:72:bb:ed:
db:e1:32:2e:36:44:b4:da:a2:8d:6d:60:38:f6:9f:9e:b8:a8:
05:09:24:e4:60:45:04:af:ba:f7:8e:79:b3:52:fb:2c:9b:e2:
48:36:ef:26:fc:ec:45:29:b7:eb:24:02:94:ba:1a:08:21:1b:
37:17:c5:73:95:10:b1:63:dc:88:f2:4e:1c:ae:a2:9c:f4:e5:
5e:3a:ed:44:bb:a9:af:51:c5:71:c3:5a:1e:df:81:9a:1c:67:
e7:ad:06:f2:c9:51:a4:d3:79:2b:b4:37:bb:f4:41:93:d0:3d:
f2:2f:e4:5e:74:8e:01:8b:a4:d7:ac:09:d6:cf:27:82:fc:db:
41:f3:4c:09:c0:8c:7a:31:a8:27:6e:ce:12:3e:53:cf:07:ab:
63:90:76:d6:a1:05:81:79:4e:a2:3a:e0:00:f8:a5:81:c4:65:
63:83:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:31 2026 by rpki-client