Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier: vbobjzL8fedqPvWaaa5wdE2g4TxLWGWTQE7PNUWpzNM=
Subject key identifier: C9:D3:DE:59:56:01:3B:60:88:0B:8C:FE:91:5A:9A:F9:04:DC:A1:F5
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 019DD019BE09D71FE41E85CECAEEC12E8822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number: 0A35
Signing time: Mon 27 Apr 2026 18:00:41 +0000
Manifest this update: Mon 27 Apr 2026 18:00:41 +0000
Manifest next update: Tue 28 Apr 2026 18:00:41 +0000
Files and hashes: 1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=)
2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: p6Ld69jm3Fehciegkf0N7V6zUBl0Ao/PSseFRNU0rHc=)
3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=)
4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:be:09:d7:1f:e4:1e:85:ce:ca:ee:c1:2e:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Apr 27 18:00:41 2026 GMT
Not After : Apr 28 18:00:41 2026 GMT
Subject: CN=c9d3de5956013b60880b8cfe915a9af904dca1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:b7:47:e8:e0:04:b9:74:ab:bd:ee:b5:59:
25:ff:21:78:c7:22:51:b3:32:cf:89:37:11:63:ff:
59:84:f0:bb:f6:72:4d:bf:74:ae:fb:fd:9c:48:44:
27:b1:cc:b9:7a:3a:ad:ab:81:38:c6:f8:48:37:e1:
89:c7:20:b4:7b:0e:17:8d:2f:a6:5c:ef:0f:f1:a9:
3b:14:1d:a5:f8:9a:f5:28:52:eb:a4:4e:c5:4c:21:
2e:9f:81:53:c9:05:07:e6:d5:38:74:49:27:c6:bd:
5f:95:57:91:91:e8:83:97:24:12:1f:34:c1:75:e6:
14:e7:2e:0d:5b:bf:53:f9:aa:e4:bc:9f:7a:62:5e:
4d:1b:36:f4:93:3d:3a:a1:3b:3f:dc:35:cf:ba:8b:
d9:8f:3e:4a:16:0d:fc:97:5e:0d:3b:3c:de:ad:1b:
c6:87:b9:d7:66:b5:ac:48:77:b7:63:b0:b7:44:c1:
f1:e1:a8:0d:37:63:75:62:3c:22:f1:d0:e0:c6:28:
04:3c:3b:46:fe:fc:66:4b:81:16:0f:88:19:e0:6d:
78:e7:c3:f2:3c:1f:27:ba:25:4c:91:e0:cf:e1:2c:
c6:26:45:93:15:23:ba:d0:8b:29:d7:4c:86:09:58:
4a:e4:d5:47:ff:5e:5c:b3:ec:52:a3:13:5c:ca:5e:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:DE:59:56:01:3B:60:88:0B:8C:FE:91:5A:9A:F9:04:DC:A1:F5
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:e4:ed:05:64:0f:05:4a:25:d9:21:68:89:b5:55:06:c2:
c2:e9:9d:56:e7:2b:58:54:67:dc:b6:35:97:a4:21:a2:75:54:
1f:67:db:7a:30:b6:db:2b:e0:d7:b7:da:b3:4e:4d:bb:b6:fc:
da:f1:99:38:d1:0f:14:a8:8e:28:d1:b0:73:30:72:90:5b:66:
4a:dd:c3:a4:c1:f9:eb:5b:57:0d:cf:16:01:24:7a:91:a7:d5:
3f:cd:ce:81:a7:fc:56:17:56:ce:5e:4d:03:7e:c3:6f:37:a0:
2a:63:ac:f4:c6:37:3b:3d:12:7f:83:bd:0a:ae:58:51:9e:59:
fa:7d:0b:9c:01:b4:9f:16:c9:9d:28:66:cc:1a:3d:5a:87:d6:
49:df:15:1c:65:f1:71:0c:9e:99:17:85:87:fd:d4:db:92:7c:
ee:4e:13:dc:6a:38:8c:ff:95:c5:52:7b:d6:c5:5e:e9:12:bb:
cb:27:a1:94:42:59:fe:6f:21:69:34:ba:73:f6:53:9d:92:f0:
24:f5:1b:6f:61:62:42:3e:e1:5f:ca:20:26:2e:be:7f:a2:e8:
19:13:89:50:02:92:4a:87:74:68:59:cb:4f:bc:19:31:be:61:
dc:84:52:27:5e:cf:1b:2f:06:9d:14:d9:1e:04:d6:61:de:3d:
d7:c3:f5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGb4J1x/kHoXOyu7BLogiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0
NjM0MDUwHhcNMjYwNDI3MTgwMDQxWhcNMjYwNDI4MTgwMDQxWjAzMTEwLwYDVQQD
EyhjOWQzZGU1OTU2MDEzYjYwODgwYjhjZmU5MTVhOWFmOTA0ZGNhMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqO3R+jgBLl0q73utVkl/yF4xyJR
szLPiTcRY/9ZhPC79nJNv3Su+/2cSEQnscy5ejqtq4E4xvhIN+GJxyC0ew4XjS+m
XO8P8ak7FB2l+Jr1KFLrpE7FTCEun4FTyQUH5tU4dEknxr1flVeRkeiDlyQSHzTB
deYU5y4NW79T+arkvJ96Yl5NGzb0kz06oTs/3DXPuovZjz5KFg38l14NOzzerRvG
h7nXZrWsSHe3Y7C3RMHx4agNN2N1Yjwi8dDgxigEPDtG/vxmS4EWD4gZ4G1458Py
PB8nuiVMkeDP4SzGJkWTFSO60Isp10yGCVhK5NVH/15cs+xSoxNcyl7rMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnT3llWATtgiAuM/pFamvkE3KH1MB8GA1UdIwQY
MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt
ZjlkOWMwM2Q0YjRjLzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj
LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfbk7QVk
DwVKJdkhaIm1VQbCwumdVucrWFRn3LY1l6QhonVUH2fbejC22yvg17fas05Nu7b8
2vGZONEPFKiOKNGwczBykFtmSt3DpMH561tXDc8WASR6kafVP83Ogaf8VhdWzl5N
A37DbzegKmOs9MY3Oz0Sf4O9Cq5YUZ5Z+n0LnAG0nxbJnShmzBo9WofWSd8VHGXx
cQyemReFh/3U25J87k4T3Go4jP+VxVJ71sVe6RK7yyehlEJZ/m8haTS6c/ZTnZLw
JPUbb2FiQj7hX8ogJi6+f6LoGROJUAKSSod0aFnLT7wZMb5h3IRSJ17PGy8GnRTZ
HgTWYd4918P1zQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 01:43:43 2026 by rpki-client