Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: 8Hc8XhSzqd5VhyE4xsIstfI42zTEXOajd5LZ2aF6Dzs=
Subject key identifier: 0F:61:24:E1:2F:25:D0:89:47:8C:46:85:67:99:12:1E:D4:3C:6A:EE
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019E1D90DF47BC029DB467F3E805F9DDCFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0E49
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: n0HBKLkLjLZ1o5a9lDpDc0+T/uVT/ETDAhx+OScTP/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:df:47:bc:02:9d:b4:67:f3:e8:05:f9:dd:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=0f6124e12f25d089478c46856799121ed43c6aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:02:68:3d:5e:34:76:2b:67:1a:96:b7:16:
c3:f4:9f:dd:0c:52:72:31:fa:7c:0f:44:35:74:95:
cc:2d:9a:8a:72:df:f3:1c:c0:6f:7c:43:5e:9f:f0:
88:91:d9:4c:17:6d:df:13:6a:b5:41:d9:07:25:30:
eb:45:39:e4:e1:4f:51:e5:19:c4:e1:2a:21:02:f2:
9c:0f:fc:26:1b:db:1c:4c:b4:4d:7b:70:22:92:c7:
83:c2:d9:de:6d:1b:ab:9e:de:6f:19:70:15:bf:fe:
b9:b7:3d:db:e4:e9:d2:36:b8:89:51:88:5c:ee:54:
3f:e9:33:a1:65:31:46:c1:24:19:02:fa:20:b3:6d:
af:96:48:46:b5:f3:96:fd:72:6b:68:1f:cd:cd:1d:
fe:66:78:a7:66:a0:e8:c1:0a:06:b7:0c:1f:e2:0f:
ea:2b:99:a7:49:68:0d:bc:ef:47:88:20:35:87:cd:
cb:45:3d:85:cc:70:f1:75:43:59:22:2a:cb:56:b5:
37:7b:70:ab:7c:ba:0a:67:27:49:93:a6:e6:ea:df:
f2:31:a2:2f:66:33:61:57:d3:cc:68:6b:d6:d3:a3:
f0:b1:8f:53:33:7c:94:2e:9c:e1:99:5f:53:35:91:
90:51:70:7d:72:28:3e:2d:da:14:2e:43:c3:21:63:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:24:E1:2F:25:D0:89:47:8C:46:85:67:99:12:1E:D4:3C:6A:EE
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:ea:0a:13:b4:91:1d:dd:a4:4e:82:10:53:ae:d8:f5:7e:
0b:d5:2c:88:0f:75:e6:f4:43:44:3d:15:29:b9:f0:6d:2f:bb:
65:53:15:fb:a2:8a:50:6e:f6:e0:af:31:10:11:71:be:2b:13:
ee:a2:bd:1f:b5:58:00:4e:a8:43:39:a5:30:c1:77:83:32:db:
06:7e:8f:d3:0d:99:bb:e1:f4:b3:2f:82:ed:c6:82:84:01:ef:
7e:e7:8f:78:0e:a1:d2:d4:1c:ad:c2:4e:eb:9a:d4:12:33:29:
58:cf:44:0e:ac:fe:bf:e5:37:fe:81:a5:20:6c:5f:ca:45:35:
d5:18:21:e5:e3:3f:c0:18:90:66:ae:19:41:cb:94:0d:53:97:
71:2c:c4:fb:ec:83:85:56:c5:f3:4f:1a:6e:37:24:9b:c7:a0:
29:d1:a5:d4:c2:b1:b1:cb:a5:eb:b8:c4:f6:e7:e2:23:db:97:
c3:55:a0:72:19:8f:1d:ac:ef:97:57:3d:e3:33:43:57:16:26:
c4:64:a7:4b:e5:e6:4b:3e:0e:5a:06:a2:77:b7:79:2b:01:19:
34:de:4e:96:1b:e4:8b:6c:7d:b0:e9:38:5a:57:aa:dc:ed:09:
f2:bd:64:12:a7:27:94:ba:6c:54:0a:da:75:4f:1f:37:42:49:
c0:42:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:52 2026 by rpki-client