Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: FZV5ha0f1v1FSLp6nzN0Dbd/KIl6BRixMDSkqEjUR7I=
Subject key identifier: 25:32:30:D8:6D:2C:FD:D3:B2:D5:B7:4E:43:54:05:DF:09:8B:E8:24
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 01A11003E6BBE4380B69E4120A31A16C7E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0CEC
Signing time: Tue 06 Oct 2026 07:00:53 +0000
Manifest this update: Tue 06 Oct 2026 07:00:53 +0000
Manifest next update: Wed 07 Oct 2026 07:00:53 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: icril0Hbk78RrCW5Q4C3oD72azA+abu7p3nCyzi2N2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:e6:bb:e4:38:0b:69:e4:12:0a:31:a1:6c:7e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Oct 6 07:00:53 2026 GMT
Not After : Oct 7 07:00:53 2026 GMT
Subject: CN=253230d86d2cfdd3b2d5b74e435405df098be824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:e4:b4:6d:39:77:75:2e:d2:6f:96:40:16:
60:83:df:52:d4:fd:b1:f8:30:f4:6b:99:ad:af:05:
6f:66:a6:28:8c:8c:33:eb:23:d8:dc:15:05:bf:62:
5e:70:0f:b3:e9:5c:67:08:bc:d5:bf:09:ee:cc:58:
e0:70:46:2b:9a:17:93:ac:bb:e9:7d:e9:0a:66:3d:
7a:72:c5:19:84:00:e5:e9:65:21:ae:e4:c6:47:dd:
c9:ad:2a:67:41:bb:65:94:64:df:f0:ff:2a:99:85:
30:f5:95:e7:f1:0a:0b:00:1a:a3:41:88:1c:19:bb:
74:65:c6:d2:72:04:ac:ba:c9:1e:ef:79:a5:a6:3d:
f7:40:64:21:99:2a:6d:78:90:97:c0:a7:d2:3a:5a:
c0:67:f3:a8:15:c4:35:e7:b1:27:7b:fd:7f:55:e1:
7d:14:2c:66:57:6a:78:94:a3:d5:0f:c3:de:fc:7d:
a4:b5:4a:ac:7d:da:52:8b:c0:ea:3b:12:b4:a2:e0:
44:0f:9f:fc:d3:19:6e:9a:6a:84:73:f1:4a:ae:6a:
13:38:2b:af:c9:30:be:4e:eb:50:f9:cb:75:1c:90:
79:2d:da:d3:08:36:45:f6:c5:7a:2e:ee:bf:e6:c4:
5b:09:ee:a8:16:5c:b6:aa:ad:5d:29:eb:c0:e1:20:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:30:D8:6D:2C:FD:D3:B2:D5:B7:4E:43:54:05:DF:09:8B:E8:24
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c4:7b:b4:b5:68:82:52:6c:ef:fa:7a:3e:6c:ca:19:17:a8:
40:cf:47:4e:aa:32:56:47:ea:e2:12:68:04:9b:79:48:a6:57:
fa:38:d0:a5:7a:39:d3:e3:b3:85:7d:55:5b:73:58:9e:7f:34:
48:df:83:33:44:ba:74:60:eb:50:ce:f7:1d:3e:ab:1b:13:c9:
69:13:be:5b:e3:48:74:f3:13:2e:5f:dd:82:7a:5c:8f:03:8a:
9c:8c:a0:35:a6:8b:2e:8c:1f:47:59:22:6b:c6:0e:ec:a3:ca:
18:ac:1d:13:91:33:c0:c8:a6:71:17:4d:fb:e9:2e:0c:36:04:
70:83:32:12:c7:1f:f9:60:ba:23:a7:0e:62:74:97:17:b6:1c:
52:3c:06:ff:da:d1:42:ec:ca:95:1d:65:47:d9:86:57:ae:1b:
57:fc:fb:ad:c3:67:ef:95:8c:c2:d4:43:97:b1:e7:6a:41:65:
60:15:a0:c7:8f:02:ad:6b:ac:1e:a4:8d:bb:23:40:c1:9e:40:
2a:3c:a6:65:fc:78:b7:60:4c:10:39:d5:6a:5d:64:db:52:1f:
35:5a:2b:05:99:ba:48:9c:23:da:f7:00:b0:ff:88:a2:b8:52:
74:8e:3b:0d:b0:1d:26:a5:41:d6:f2:38:2b:47:c3:e0:99:11:
1a:8b:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:49:07 2026 by rpki-client