Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: r9c334p9llAP68qbqC4N7iYrWkcfrRmQcKZVbs0TIec=
Subject key identifier: F6:8B:65:C7:5C:FC:35:9F:D6:DA:40:36:DD:60:4D:A6:DF:D9:86:85
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019F9391CD0684B24B58DF3085EEE9E28855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 0C27
Signing time: Fri 24 Jul 2026 10:00:33 +0000
Manifest this update: Fri 24 Jul 2026 10:00:33 +0000
Manifest next update: Sat 25 Jul 2026 10:00:33 +0000
Files and hashes: 1: 1QpbjmDLVcUMqnNrCbGP4FA5FaY.roa (hash: 5prhYgOZoGVGdhCQditPaOssQQZBoW2n1oXkHDCQF6E=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: P8Gqp676huNXLCpI4FBjDBMvafouecCImU8ZoKVELnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:cd:06:84:b2:4b:58:df:30:85:ee:e9:e2:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jul 24 10:00:33 2026 GMT
Not After : Jul 25 10:00:33 2026 GMT
Subject: CN=f68b65c75cfc359fd6da4036dd604da6dfd98685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:d9:60:f0:05:22:61:f6:4f:8c:0c:61:ac:
8a:5d:bd:29:dd:69:8c:c8:c0:06:2d:be:0f:e5:5b:
48:f4:78:d4:96:cb:e8:0f:eb:0b:3f:53:06:f0:48:
64:e9:0a:fc:2c:63:37:df:6f:45:a7:60:f8:a9:f7:
34:d2:fb:66:66:b3:2a:a3:1d:60:87:fa:57:e4:36:
41:1b:f0:d8:0e:31:75:e1:10:d6:3b:41:1e:24:a1:
d0:b6:1d:f8:92:56:49:5c:f1:de:ce:1d:bc:f8:89:
cd:c6:ca:0f:b9:0b:85:75:99:c0:8d:eb:2d:99:e1:
51:36:78:22:05:7b:a8:85:41:27:bc:76:2b:ea:e3:
bc:30:03:9a:71:b9:f9:4f:8e:70:9d:b2:24:3a:b3:
32:ee:2e:a3:ba:3b:ba:7e:00:2b:6d:d1:0e:cf:e4:
be:6f:8c:8d:06:c3:63:2e:e3:e6:dd:b1:b6:37:0c:
70:d2:9c:31:29:f3:63:13:0d:98:a8:eb:ed:4d:40:
b5:a7:e9:d0:97:e9:a1:fa:3f:e2:6e:a3:d3:e2:63:
70:89:01:af:c7:33:ef:11:2b:22:49:76:98:2a:16:
2a:43:d4:8f:48:70:34:42:30:a8:51:92:04:dd:72:
d1:c8:b5:f1:c9:1a:4a:b4:12:96:04:a7:da:fd:0d:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:65:C7:5C:FC:35:9F:D6:DA:40:36:DD:60:4D:A6:DF:D9:86:85
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8e:38:b8:6c:5a:eb:ed:99:f3:ea:de:62:d1:4b:44:65:e5:
ba:4b:7d:3c:6b:b6:bb:7b:a5:de:5c:20:ef:0a:46:e5:a5:06:
bb:35:80:c6:f5:b1:99:a2:c7:b3:5c:0e:7b:b2:ab:80:78:7f:
e6:18:1b:a3:84:34:cd:11:6a:dd:7c:40:85:44:47:ac:34:f1:
90:13:eb:39:e2:0a:79:b4:a1:67:70:20:97:14:06:b2:bb:33:
5d:a5:96:47:09:48:58:fe:1d:5b:04:73:ad:d4:36:aa:fb:a5:
fc:e1:02:a0:e3:e2:26:ad:7a:12:ff:02:ca:f8:c3:5e:57:f1:
16:85:09:5a:40:09:dc:e8:1b:bb:fd:e8:9d:fa:af:57:bb:a5:
e1:0f:c4:af:3b:fc:57:a1:cf:41:d8:17:d4:60:35:08:2b:e5:
6a:d4:5c:00:0a:07:f5:9f:cc:94:f7:3d:2b:2c:16:41:ca:e1:
c6:f7:83:d6:79:db:9b:c1:05:ba:0d:96:70:65:66:ca:49:ba:
51:d3:2e:eb:52:d7:da:95:f7:98:b0:5e:03:e7:dd:45:a2:ad:
06:50:f3:5a:dd:55:46:1a:23:d4:a7:78:ff:43:49:0c:fb:09:
e0:7f:62:44:ff:e9:f6:b2:2d:fd:03:f3:4b:71:60:1f:64:a1:
24:a6:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:51 2026 by rpki-client