Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: PdH+5Uj5AVmC0lptINne5fbufi6UW3TVkNFRocfcRa4=
Subject key identifier: B0:18:97:52:85:15:E1:37:9C:6B:AA:9C:01:98:D5:6B:F0:B6:33:3B
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 01A1084B0CCAFE962AF0A752525C401AB9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0CE8
Signing time: Sun 04 Oct 2026 19:01:38 +0000
Manifest this update: Sun 04 Oct 2026 19:01:38 +0000
Manifest next update: Mon 05 Oct 2026 19:01:38 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: Jy1ZEf+K66IUqjiaT2dwO5PiyhOJjHtqRfl0U+tGAu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:0c:ca:fe:96:2a:f0:a7:52:52:5c:40:1a:b9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Oct 4 19:01:38 2026 GMT
Not After : Oct 5 19:01:38 2026 GMT
Subject: CN=b01897528515e1379c6baa9c0198d56bf0b6333b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:11:32:17:b1:34:96:36:41:3d:fb:8a:7e:
f7:f6:35:a8:5d:d9:7e:e1:26:cd:ef:38:14:50:c9:
db:79:5b:16:31:aa:fe:b9:a1:be:a7:ec:58:b3:a9:
6b:a5:56:a0:ea:27:e9:39:d4:e5:fe:71:ab:cb:7a:
4e:a3:55:e5:1c:27:6c:f9:d8:ed:32:70:8a:0b:57:
c2:11:e7:93:00:53:91:23:ef:16:21:e5:cd:96:5a:
fc:ba:9c:ec:be:66:f3:16:91:50:72:fe:90:5a:09:
a1:8e:06:be:9a:50:73:87:04:f7:fe:9b:4d:e7:6e:
04:b3:dc:68:c3:e1:27:3c:a2:16:4c:a6:b0:c0:14:
c3:eb:c0:1c:df:d6:89:e6:d9:1a:3f:16:94:13:d6:
00:fb:06:c0:34:3e:00:61:66:3c:e2:ac:ab:f7:e4:
c0:ae:39:07:ee:84:db:67:dc:16:23:f4:a5:85:1a:
17:b4:13:cf:e4:5f:f7:35:3a:29:df:e2:17:ae:cf:
fc:26:cc:a0:34:7f:f9:d3:00:9d:e8:8c:e2:e4:16:
e5:e4:a9:cf:a8:ee:ed:ee:dc:64:e0:a6:11:8b:66:
92:d8:bf:02:59:dc:97:d5:35:eb:19:7f:99:cd:41:
dc:c6:ab:94:57:83:ef:59:75:11:00:aa:4b:c0:2b:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:97:52:85:15:E1:37:9C:6B:AA:9C:01:98:D5:6B:F0:B6:33:3B
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:12:f5:80:93:ad:9a:40:7f:21:9d:3c:61:45:0e:d8:4a:41:
07:c3:b4:98:2a:91:5e:0d:0c:d1:3e:f8:5b:cd:7c:6f:02:b8:
3f:ff:17:65:84:9a:91:5d:86:6b:99:d0:d0:a0:73:80:c1:bf:
5f:c5:b6:59:56:f8:1d:75:e2:fc:b2:72:be:a7:4b:1b:c4:b0:
ad:a4:0e:e7:ac:37:ff:41:c9:95:f2:e2:f6:16:53:20:43:64:
93:a0:62:15:43:d3:4d:b0:52:ed:ed:40:b1:eb:26:0f:2e:ab:
f3:04:69:9f:7d:7d:f0:23:c8:38:5a:ca:dd:94:e7:b3:db:dd:
0e:dd:2d:32:cf:7d:3d:29:4e:ad:33:3d:84:86:af:f5:11:4d:
08:6e:f5:5d:ac:0b:de:3b:1b:a7:f5:d3:d9:3e:d0:6f:fc:c4:
53:e4:86:ec:d6:77:ee:bb:e7:65:50:6f:68:42:5e:4c:3e:fd:
8c:26:bf:98:97:19:fb:a2:22:ff:2d:0e:63:70:f3:08:34:d1:
86:76:14:68:45:98:81:08:5e:a0:c7:d7:7c:08:93:36:8d:dd:
0e:78:83:eb:39:11:10:b9:b6:45:fc:39:3e:98:6c:f7:1b:e4:
cd:ff:d9:87:38:38:17:3a:db:05:ba:31:23:e2:d1:25:b5:72:
86:12:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:20:27 2026 by rpki-client