Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: 9rIKpWT00fZQMqIZkKsVd7+DMXCGKJd+25+I12rDifY=
Subject key identifier: 5B:97:74:10:04:A5:69:D5:8C:4C:FC:9F:66:19:9A:74:61:4D:AD:BC
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019D284E5CB5428B1B14DDF7D3D470465492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0DCA
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
2: XzLWho6Bn6t9kvjEGcwhbWxmWB4.roa (hash: KEbZBRD5g586B5bAw6CmuP81thvalITJThplBsaxWto=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: pVHuHgAUNX9So1VQC1jFH9wVNQqwNx3sEgVUyPY7vlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5c:b5:42:8b:1b:14:dd:f7:d3:d4:70:46:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=5b97741004a569d58c4cfc9f66199a74614dadbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:c2:20:88:ad:ed:f6:89:27:31:42:ae:8e:
97:1f:c2:e9:c4:ba:81:c6:de:9a:87:56:2a:1b:52:
c5:b2:3c:19:2c:b1:e7:da:e0:08:22:96:86:91:0c:
d6:4c:af:3a:a8:48:83:1a:2e:f8:40:08:11:de:29:
94:96:b6:9e:60:54:c3:2b:31:22:bd:aa:d5:8d:40:
f8:e4:83:d2:0f:42:2c:6c:00:e2:4c:83:16:51:1b:
3b:58:1d:cb:c1:ba:f1:0e:30:57:8b:bc:d8:9b:dd:
4c:01:11:15:6d:21:5b:76:b4:04:60:d7:90:cd:e7:
c6:5e:b8:fc:54:b8:66:18:2a:6a:fb:87:a6:32:42:
47:e4:39:d9:86:5f:c4:87:a0:26:fb:99:84:62:20:
5f:9b:d0:44:7b:ab:e8:b5:13:97:cd:43:52:ff:c1:
c6:7e:ba:08:c9:08:e3:44:a6:87:76:f5:41:f8:9f:
a1:cb:05:7a:8b:f1:53:7a:b3:0b:3c:aa:30:e2:35:
d4:8e:81:70:de:95:06:7a:47:92:7e:3b:2c:92:7d:
7e:79:df:a5:9d:2b:e5:8e:15:77:22:7a:8d:57:d9:
47:ca:36:09:48:ed:3a:ac:aa:61:ad:04:25:92:f2:
58:b3:61:3f:18:62:99:4b:22:df:25:9a:1a:3a:b0:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:74:10:04:A5:69:D5:8C:4C:FC:9F:66:19:9A:74:61:4D:AD:BC
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:63:68:39:de:1a:5d:41:6d:1b:b9:30:7b:61:d9:0f:e9:
35:ec:52:94:e6:37:fa:fb:19:b0:69:fa:81:96:a5:84:bf:b7:
bb:ac:42:bd:3e:c8:96:c9:44:98:3d:2a:34:fb:64:4a:6e:61:
e6:89:8a:13:f3:83:53:32:2c:99:cd:54:38:14:d1:4b:7d:62:
cf:c4:a4:b4:a8:94:d3:8b:ed:21:86:96:d4:eb:0f:61:47:01:
1c:91:80:77:e8:97:6a:2a:6d:4f:84:fe:29:e8:17:d0:0b:04:
77:ba:f7:8a:ab:1a:fb:7c:77:62:d4:65:e6:5f:23:45:8a:fe:
55:28:f2:53:fe:0f:77:27:21:66:2d:84:bd:27:ed:a4:3e:f9:
6b:4f:42:7f:35:f6:b4:9f:a9:58:f5:f7:7a:26:b0:cf:5b:c1:
ab:dd:aa:1e:de:5f:07:9a:84:ae:45:70:c0:69:c5:49:02:68:
7c:9f:41:b7:65:0d:8f:65:64:0a:85:fd:ad:ae:c9:fa:7d:43:
ff:a1:14:c7:67:2e:5f:cf:ef:a4:d4:39:0b:1c:1e:6c:5d:59:
7b:dc:7e:6d:ff:76:cd:0c:7b:8b:3f:74:dc:fd:f7:53:a1:75:
04:6a:83:d5:a7:16:2e:a1:00:39:fe:fa:5a:0c:8b:0b:2f:58:
48:06:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:03 2026 by rpki-client