Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: KbzeL0REqQh0SuGCZASzxzHmHRTl/WpFPM+14RG2l7s=
Subject key identifier: 3C:A5:E5:E4:93:08:13:46:C3:0A:45:D1:4B:6C:AA:55:2D:5B:C7:D6
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 019E205A6BE5ACFCB09892B5D529F167A06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 08:00:57 +0000
Manifest this update: Wed 13 May 2026 08:00:57 +0000
Manifest next update: Thu 14 May 2026 08:00:57 +0000
Files and hashes: 1: CN6EXSiFw5QSIshsUFF4IHVqqoo.roa (hash: hpI75KnlbJC0wwYzc+gWN1gE3ImkLqA31jIBmq06I9w=)
2: IKsaSv5WbGQp-IZQdBzI2DlILNc.roa (hash: gbpIt6mebnTkZL27KKmJpAj3jmjIS87m4pvl+MU+r/0=)
3: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: OqDB3KIxn5ePRPvPjhmqO2fBfc1NEZ2E01w7gg5E64U=)
4: tI5rZ2OkW-tqnmPYZ_XEde1g-_c.roa (hash: wfc7uwTsNdE3QVJnENIdl7HtSGoVTLNa8OFvwh5hQ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:6b:e5:ac:fc:b0:98:92:b5:d5:29:f1:67:a0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: May 13 08:00:57 2026 GMT
Not After : May 14 08:00:57 2026 GMT
Subject: CN=3ca5e5e493081346c30a45d14b6caa552d5bc7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:f2:d3:73:56:8d:42:ba:2b:2b:87:42:c5:
ed:f3:01:02:86:ed:a6:41:03:cd:ba:e0:8f:0f:d0:
1c:17:08:9f:1f:d9:dd:19:c7:99:31:bd:87:6b:2d:
71:9f:69:50:5b:08:12:f6:74:e7:45:fd:60:22:89:
dd:cb:b1:4d:27:9a:c6:03:e6:4c:3b:10:dc:0d:72:
89:27:13:63:3b:0b:ac:ed:04:be:b1:85:5f:95:a3:
ec:7f:cb:9e:a3:0d:1b:21:d4:5f:a8:76:dc:e7:47:
ba:7b:55:2a:00:36:af:50:2a:c1:f7:37:e0:11:c6:
06:3e:b8:97:f1:a8:e6:9f:27:d0:92:9c:67:8a:d9:
a9:01:85:08:b4:31:d6:eb:61:5b:20:1e:6d:1c:ed:
36:55:00:ea:52:a8:63:ee:83:86:58:bf:95:f6:78:
c9:0b:ee:fd:f5:f5:96:a3:13:30:ee:16:9e:a0:e8:
21:43:d4:53:88:a1:21:54:ca:95:29:6e:f2:ba:c7:
a9:fd:ba:7d:ee:d9:38:44:29:48:bb:d0:8a:29:2e:
c6:2a:c9:55:3c:1b:d2:98:1e:59:1a:ea:78:5e:cb:
ad:2c:e9:ad:c3:f4:4e:70:73:6c:73:33:70:4a:eb:
75:c9:87:62:b6:95:20:22:fd:f8:60:2b:73:7a:0f:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:E5:E4:93:08:13:46:C3:0A:45:D1:4B:6C:AA:55:2D:5B:C7:D6
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:ba:f8:3a:4b:49:49:3f:f4:ac:a8:c5:db:63:2e:a5:98:
a8:fb:95:c4:45:85:c3:e0:bc:65:8e:43:11:17:dd:b5:02:b3:
d8:a3:92:b4:67:ba:cc:1c:ec:f4:0d:63:c9:a2:73:97:cb:3e:
f7:64:04:79:0d:40:59:88:e0:14:25:97:14:39:dc:70:94:05:
89:d4:95:93:ad:3b:b0:d7:a2:01:e8:bb:89:84:a4:fc:3f:0f:
8c:94:da:03:f3:ad:f4:c1:cd:65:59:a6:b3:38:a9:4a:a0:27:
77:fc:68:b4:16:3c:48:93:89:ee:66:5f:f5:aa:73:34:89:cf:
48:68:93:f8:7c:54:72:80:83:07:37:75:97:1b:5b:9d:eb:7b:
92:77:1b:9b:4b:5a:be:c8:da:e8:0c:ea:df:53:f6:d6:02:84:
1f:dc:55:84:9b:cb:0b:89:f3:f0:14:89:f8:0f:8c:db:22:d6:
87:cd:91:0d:35:27:7a:90:91:0b:6d:47:b6:e6:bb:ab:33:23:
4d:4d:d4:b5:13:16:3b:85:9f:a3:19:50:0c:21:af:ff:5c:00:
ed:b2:7d:45:66:60:79:57:9d:09:c5:ff:cf:10:4d:cb:25:19:
91:f6:08:df:94:10:58:5e:18:aa:39:4e:17:0f:4d:00:89:83:
6d:ac:5b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:54 2026 by rpki-client