Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: YDBme9T1yOJsLSPPS1pO4KJPBpd5QKveqsxgCq5axPE=
Subject key identifier: 38:0B:5A:C9:02:FF:E3:FC:23:4F:3D:09:91:66:B9:9E:AA:33:8F:92
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 019E1D59662476BFC81A668D012C2EE78AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 041A
Signing time: Tue 12 May 2026 18:00:58 +0000
Manifest this update: Tue 12 May 2026 18:00:58 +0000
Manifest next update: Wed 13 May 2026 18:00:58 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: L203S902qAomKfjQTpxNoWPnmKCCxR4TKm4+vQw8fBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:66:24:76:bf:c8:1a:66:8d:01:2c:2e:e7:8a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: May 12 18:00:58 2026 GMT
Not After : May 13 18:00:58 2026 GMT
Subject: CN=380b5ac902ffe3fc234f3d099166b99eaa338f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:6d:ec:79:25:23:3e:6a:b1:01:62:b7:c2:
b9:18:c2:d0:05:49:78:c1:f6:56:ca:2c:6d:ec:ff:
3a:b6:5a:20:81:84:71:ee:18:78:d7:f3:3a:a7:83:
6f:81:39:34:41:7d:59:8d:23:2e:de:cd:99:77:5e:
22:5b:43:b2:13:95:9d:17:f7:d7:4a:cd:3e:a4:27:
a9:ad:43:10:33:2e:c9:71:31:57:b7:0d:f1:25:bd:
88:62:85:fd:79:a6:a8:37:be:61:a4:3a:f2:f1:fa:
1d:af:fe:0c:96:77:78:c6:09:85:ef:bb:6e:69:dd:
e7:82:78:ad:d4:79:ca:eb:9c:89:3d:ee:48:08:fd:
d5:87:b6:a9:35:7e:b8:fd:00:09:f9:50:a9:45:e5:
9a:ed:41:80:6f:9c:bd:53:ba:5f:87:f7:58:49:46:
fc:47:59:dc:d4:89:18:c5:ba:d4:3e:76:e4:3f:3a:
68:16:b4:fa:48:7c:bb:97:ac:79:af:9d:c3:df:71:
52:62:8b:c4:b3:e1:1a:4f:2d:fa:dc:dc:83:a1:9e:
9f:b6:2c:3a:25:9c:1a:06:93:66:4e:f7:8a:b5:01:
7c:62:d7:38:67:54:06:28:88:5c:62:27:fa:41:79:
25:f8:aa:0c:f8:b3:fb:90:db:3d:79:7e:9a:6f:24:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:5A:C9:02:FF:E3:FC:23:4F:3D:09:91:66:B9:9E:AA:33:8F:92
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:01:ac:f9:c7:60:0b:7f:f4:62:e2:0f:05:09:79:ad:5b:61:
2a:b8:95:55:98:6f:93:39:3e:52:91:88:e0:44:6e:c7:7b:a3:
25:3a:f0:9a:d0:b9:93:66:db:b2:bb:61:db:12:30:d0:82:3d:
62:f7:81:6c:21:82:90:09:69:df:18:b2:00:93:06:f9:31:88:
4e:25:f0:b3:89:df:92:f0:23:46:d0:39:37:c6:f3:a5:24:dd:
57:8b:9e:b9:e6:f3:58:23:78:8a:17:07:e6:5c:cf:f4:14:a4:
12:17:ae:f8:44:5d:3e:08:f2:4d:36:fc:37:53:cb:a2:02:e6:
2b:07:d2:db:e2:7a:87:d9:f7:aa:7c:d8:a6:1d:7f:59:70:21:
b5:63:fa:e0:54:61:14:ad:13:df:f8:2b:99:fb:d8:a3:51:6e:
ca:4b:20:03:6e:a7:2b:aa:92:90:25:67:52:d1:86:e2:eb:12:
19:6b:b1:90:41:ce:3c:90:01:3f:92:c8:47:fe:0f:b3:ca:73:
57:b0:5e:63:ad:98:31:ad:c0:de:f3:88:65:a1:b1:2a:1b:4a:
1d:2a:7e:5f:e7:47:0a:42:3f:5c:da:ec:45:6b:e1:5a:9f:61:
1b:c2:44:14:9f:6d:97:42:fd:e2:21:a2:16:ff:71:6c:c7:7f:
a6:e3:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:25 2026 by rpki-client