Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
File: qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft (raw, json)
Hash identifier: nVvPTBkZT8tWteF3dpP/QDRM84/Io96ePA5a5R2FYz4=
Subject key identifier: 04:2A:70:D7:3E:BF:43:94:A3:D2:9D:64:75:0B:E9:5B:76:1B:62:87
Authority key identifier: AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
Certificate issuer: /CN=aa358cc061e36be03a4ed92ad671780f06589be3
Certificate serial: 019E1F1139EDA14163AF6BB4B121AF47EB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
Manifest number: 01AF
Signing time: Wed 13 May 2026 02:01:23 +0000
Manifest this update: Wed 13 May 2026 02:01:23 +0000
Manifest next update: Thu 14 May 2026 02:01:23 +0000
Files and hashes: 1: qhkhDbPLjPfZGzwb2pQpWhREyBA.roa (hash: ClIQH06bbp+6RP85PzycOSnYtQQfejT/0AH06HLWtZo=)
2: qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl (hash: Z9HTNJPPLwSstMACyQCUQiUu4Bub0QZODvHqvNa6j2k=)
3: xqzM-5vhLBSZim_gjJ3-4oxkNWc.roa (hash: 2Wker3K9FCOFZ0rUFS4E2eve+n7uzGRTl2lu+nWWkO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:39:ed:a1:41:63:af:6b:b4:b1:21:af:47:eb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa358cc061e36be03a4ed92ad671780f06589be3
Validity
Not Before: May 13 02:01:23 2026 GMT
Not After : May 14 02:01:23 2026 GMT
Subject: CN=042a70d73ebf4394a3d29d64750be95b761b6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:4e:ab:9a:fd:7e:64:b2:46:bf:ae:06:98:
48:e4:76:f5:34:22:83:29:ba:3b:a8:c1:44:b5:22:
c6:de:5c:6d:35:21:80:e4:de:2b:49:18:2b:ec:9c:
e8:e8:a7:68:ea:d8:50:c0:f3:26:fa:41:fe:16:33:
9e:b4:14:a6:f4:b7:e2:e9:3b:5f:56:94:9c:27:15:
37:de:fe:cd:c8:19:a7:f4:f3:02:ac:e7:50:b0:6f:
be:80:ad:0f:53:74:81:78:1d:c8:76:d6:40:1c:6d:
e1:ad:9d:1a:12:8d:98:05:7d:ad:c4:ba:ee:22:b4:
ea:ee:1d:9f:b4:da:26:28:6e:b7:00:77:32:55:47:
4c:a2:fc:de:14:66:e0:8f:a6:8c:6b:ca:3b:89:3f:
bd:c9:e0:6a:46:30:4e:8d:f7:ed:07:b9:a2:72:e3:
b4:e3:a9:39:6e:84:bb:83:9b:a3:bd:da:35:70:6c:
a1:f0:ea:73:eb:d3:f7:24:62:7d:80:61:63:06:37:
3f:9b:80:0f:93:29:41:da:03:2c:9c:32:a0:3b:38:
45:42:26:b9:52:75:64:56:fd:a0:1d:9a:87:40:3e:
cc:e9:47:80:a4:7a:6f:ab:09:cc:5e:03:66:2e:3b:
aa:44:39:29:eb:be:eb:50:ab:6f:f5:c0:74:ec:a0:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:70:D7:3E:BF:43:94:A3:D2:9D:64:75:0B:E9:5B:76:1B:62:87
X509v3 Authority Key Identifier:
keyid:AA:35:8C:C0:61:E3:6B:E0:3A:4E:D9:2A:D6:71:78:0F:06:58:9B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjWMwGHja-A6Ttkq1nF4DwZYm-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/qjWMwGHja-A6Ttkq1nF4DwZYm-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2e:8e:f1:f6:b7:c2:c9:89:de:c0:95:4e:d3:34:6e:6e:48:
35:9c:72:13:05:1a:3d:ab:81:44:b9:81:52:3f:a7:b5:92:3d:
f9:93:32:1b:1e:b7:9a:02:e2:92:b1:58:59:84:72:01:e4:2a:
13:d9:36:3a:ca:c4:b9:50:0e:36:f3:3e:a2:1c:25:93:60:2b:
30:af:ce:c2:b1:8e:47:55:71:50:b2:f3:eb:2d:d1:9b:ce:49:
a1:41:5f:a9:97:2a:2e:6b:cf:f0:21:76:2c:57:e5:b8:c1:69:
98:dd:df:ce:9c:e1:59:39:a7:dc:a4:4d:50:58:27:09:89:52:
0a:49:21:7a:61:cf:d3:66:a1:28:8c:ef:86:40:b4:7d:64:b1:
73:23:88:ad:20:3f:92:a0:cf:ad:fb:71:54:84:d3:a4:c7:ba:
7a:c3:d3:13:44:5f:5e:81:b3:91:d9:22:cd:08:2e:75:7d:c0:
df:35:ed:72:0d:c8:37:9c:da:aa:d8:47:1c:43:08:cf:cc:36:
87:27:90:cd:ed:a3:a3:b7:97:a9:eb:90:f3:5a:3d:f1:c6:00:
8b:8b:b8:d6:0c:38:8e:3f:05:2c:e3:5d:67:9a:38:a7:b3:b7:
ec:54:aa:6f:ca:5c:ad:68:cc:6d:de:53:12:ae:ad:09:b4:0c:
d8:3d:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:20 2026 by rpki-client