Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: 4lPYdOdoe81/tiIPeZazktGRZ6BoHa599Ldn/sEJpe0=
Subject key identifier: 62:E2:AB:6A:82:8B:1F:B8:1B:9F:F7:1A:B0:BF:DE:6A:B0:C4:A4:6D
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019CE5C95B6CA685E70C66292DF297ED713F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1741
Signing time: Fri 13 Mar 2026 06:01:44 +0000
Manifest this update: Fri 13 Mar 2026 06:01:44 +0000
Manifest next update: Sat 14 Mar 2026 06:01:44 +0000
Files and hashes: 1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=)
2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=)
3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: kNVSS4s4d1GDR1V8avEVF/YvtDWMGLjG+r+1NCslbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:5b:6c:a6:85:e7:0c:66:29:2d:f2:97:ed:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Mar 13 06:01:44 2026 GMT
Not After : Mar 14 06:01:44 2026 GMT
Subject: CN=62e2ab6a828b1fb81b9ff71ab0bfde6ab0c4a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:4e:4f:48:0b:01:3c:b5:14:e1:58:fa:60:
bf:02:69:47:23:68:1f:98:c6:ee:80:18:98:1c:1d:
ae:fe:3b:23:c3:bb:4c:34:30:0a:f1:b5:89:98:d4:
5c:a1:ab:c0:bb:9d:95:c5:3a:40:ae:f6:e9:49:49:
b7:f5:2f:3e:0f:10:13:47:4c:10:83:7b:4f:b4:09:
37:08:b5:63:db:ec:5b:33:c3:3f:44:74:1a:c6:8f:
6b:aa:ab:e7:af:ce:16:cb:3f:8c:29:85:7f:c9:29:
65:c1:44:f7:02:2e:aa:a6:cd:78:d1:af:51:fd:b9:
35:be:73:e7:80:03:0f:27:f3:8f:07:8e:d9:f6:cc:
d2:0b:5e:bf:40:05:14:93:d6:bb:06:f7:67:ad:2e:
ec:f4:0a:94:7c:79:59:ab:95:58:0c:65:20:0d:26:
3f:81:97:24:c0:1e:24:e2:0b:67:c3:2a:b8:e4:b8:
1d:7a:1f:d3:77:26:00:ae:0e:2e:6d:da:fa:c4:a0:
d1:eb:14:91:aa:bd:43:31:bd:90:ac:f6:83:6f:bf:
22:30:ea:53:da:b4:f1:68:05:1e:31:a3:6a:cf:39:
0c:c1:0a:68:8d:4d:12:ff:6a:75:c1:bf:c6:ad:57:
39:69:62:79:55:bd:b5:1a:a9:2e:6d:a4:96:54:30:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E2:AB:6A:82:8B:1F:B8:1B:9F:F7:1A:B0:BF:DE:6A:B0:C4:A4:6D
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:42:0b:bc:1e:c2:d5:59:c1:86:d3:d6:68:ad:eb:73:14:fa:
d2:6d:ee:ff:b7:0e:4b:36:2a:68:58:aa:8e:4c:a3:5d:56:0d:
26:22:b3:99:be:3f:4c:b5:9a:0f:fc:1b:c9:26:85:08:d0:db:
ed:25:0e:ad:3b:8a:f5:84:a6:c6:83:a0:54:52:50:9a:a3:78:
be:80:a5:29:32:0a:ea:7a:69:5d:d8:6e:e9:12:b5:be:f3:75:
d0:51:af:6a:01:c7:ca:ee:c3:cf:c7:10:30:f6:18:e0:d8:6e:
de:dd:dd:df:5f:5a:c6:1e:85:cf:8c:e3:32:d1:5f:42:a5:46:
f3:94:7e:07:6b:14:7d:de:84:06:58:60:48:a4:dc:d9:33:b5:
0c:22:28:f5:41:9d:ee:46:4e:32:1e:26:c9:6e:f5:5e:de:21:
34:30:b9:c2:97:29:cd:00:0f:67:a2:6d:8e:5f:98:1c:df:26:
a5:3f:4d:09:07:bb:96:af:6e:00:90:c2:c2:2e:e2:64:ea:d9:
6d:1d:36:0e:01:09:81:63:49:16:17:0d:b3:f5:65:9d:5c:2b:
e2:5a:88:2d:88:50:de:e2:86:2f:d7:fd:68:cb:a7:7a:d2:b3:
f0:01:89:eb:ef:50:f6:09:bb:8b:78:25:f8:67:34:37:b3:49:
38:8c:e4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyVtspoXnDGYpLfKX7XE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTAyNmVmMjY5MjA5MDlkOTMxZWE0ZGFjOWQ5MzkwNDg2
YjQxNTMwHhcNMjYwMzEzMDYwMTQ0WhcNMjYwMzE0MDYwMTQ0WjAzMTEwLwYDVQQD
Eyg2MmUyYWI2YTgyOGIxZmI4MWI5ZmY3MWFiMGJmZGU2YWIwYzRhNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmapOT0gLATy1FOFY+mC/AmlHI2gf
mMbugBiYHB2u/jsjw7tMNDAK8bWJmNRcoavAu52VxTpArvbpSUm39S8+DxATR0wQ
g3tPtAk3CLVj2+xbM8M/RHQaxo9rqqvnr84Wyz+MKYV/ySllwUT3Ai6qps140a9R
/bk1vnPngAMPJ/OPB47Z9szSC16/QAUUk9a7BvdnrS7s9AqUfHlZq5VYDGUgDSY/
gZckwB4k4gtnwyq45Lgdeh/TdyYArg4ubdr6xKDR6xSRqr1DMb2QrPaDb78iMOpT
2rTxaAUeMaNqzzkMwQpojU0S/2p1wb/GrVc5aWJ5Vb21GqkubaSWVDB34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLiq2qCix+4G5/3GrC/3mqwxKRtMB8GA1UdIwQY
MBaAFLvgJu8mkgkJ2THqTaydk5BIa0FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvdS1BbTd5YVNDUW5aTWVwTnJKMlRrRWhyUVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEILvB7C
1VnBhtPWaK3rcxT60m3u/7cOSzYqaFiqjkyjXVYNJiKzmb4/TLWaD/wbySaFCNDb
7SUOrTuK9YSmxoOgVFJQmqN4voClKTIK6nppXdhu6RK1vvN10FGvagHHyu7Dz8cQ
MPYY4Nhu3t3d319axh6Fz4zjMtFfQqVG85R+B2sUfd6EBlhgSKTc2TO1DCIo9UGd
7kZOMh4myW71Xt4hNDC5wpcpzQAPZ6Jtjl+YHN8mpT9NCQe7lq9uAJDCwi7iZOrZ
bR02DgEJgWNJFhcNs/VlnVwr4lqILYhQ3uKGL9f9aMunetKz8AGJ6+9Q9gm7i3gl
+Gc0N7NJOIzkSw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:55:14 2026 by rpki-client