Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier: c2SldvjwZSxzjKf1roo3uLLTDFbKGb9douDTOOb/9oU=
Subject key identifier: 7F:44:56:43:55:87:8F:62:30:DC:0D:C2:0A:07:F6:1B:3C:46:67:73
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 019CE66D7CA61CCF67A7A0E3F870C28A8ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number: 09BC
Signing time: Fri 13 Mar 2026 09:01:00 +0000
Manifest this update: Fri 13 Mar 2026 09:01:00 +0000
Manifest next update: Sat 14 Mar 2026 09:01:00 +0000
Files and hashes: 1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=)
2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: pTJdmMzguOSDb8wA5IutPC9jOgCy3YTmzCZ6Ig4PLf0=)
3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=)
4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:7c:a6:1c:cf:67:a7:a0:e3:f8:70:c2:8a:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Mar 13 09:01:00 2026 GMT
Not After : Mar 14 09:01:00 2026 GMT
Subject: CN=7f44564355878f6230dc0dc20a07f61b3c466773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:33:34:c2:71:20:a9:09:b8:85:28:af:38:
ed:9e:ba:a0:3d:ff:40:a0:51:2e:dd:60:14:cf:75:
af:b0:f3:1c:dc:02:6e:bc:3f:e4:f6:a8:1c:6f:df:
ce:6f:b4:59:1a:dc:2d:e5:81:db:86:48:50:74:39:
e1:7f:94:d3:91:7a:c5:7c:49:1e:54:6b:52:65:3f:
a7:63:cf:53:47:78:1a:96:81:26:4c:f0:3d:76:cf:
d2:f2:97:bc:66:59:7b:00:db:38:bd:a9:1d:f1:c7:
ae:27:de:93:17:a7:fd:0c:b9:05:fd:45:40:7c:42:
d6:64:1f:82:51:78:a1:47:f9:44:fa:f2:6c:a9:43:
07:38:a6:ec:56:47:99:aa:46:ff:c8:75:25:5a:71:
42:d7:96:d5:d4:09:d3:36:c0:a2:91:13:04:41:27:
b6:47:ff:1a:21:59:fb:25:f4:02:b5:27:44:2e:0e:
37:b9:c5:41:ce:6a:03:18:e4:9c:51:e7:f4:0f:f2:
78:67:59:8b:f8:ac:d6:d0:2a:e7:8b:8b:d7:29:d7:
4c:58:66:4b:79:95:2a:3f:cd:a2:f4:1e:11:5b:c7:
4f:9c:cd:6e:1a:c4:aa:a0:5b:f8:45:47:09:db:42:
c8:81:88:52:69:b2:d3:0e:d8:40:a4:c1:af:5f:cd:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:56:43:55:87:8F:62:30:DC:0D:C2:0A:07:F6:1B:3C:46:67:73
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:a2:80:e8:37:46:c4:48:85:d5:99:2b:35:f4:c7:9f:61:
68:5d:10:31:c1:0d:d1:19:ac:d2:44:b4:58:7a:36:a8:90:82:
dc:f8:82:eb:70:cb:2d:13:41:4d:10:22:e8:34:7a:50:7b:1a:
f1:08:5b:1d:a4:34:df:67:b2:fc:59:f1:94:a4:fe:e0:34:5e:
0c:31:53:f6:c3:3d:04:da:6d:78:5c:c0:65:34:29:ff:39:2d:
e0:4e:13:f7:1e:c3:d7:ec:12:e7:59:58:23:0d:43:75:0c:24:
ec:72:28:c4:50:95:b3:5b:dd:fd:f5:c2:78:b5:eb:c7:af:96:
96:c6:9e:a6:b8:25:08:e1:bd:ec:db:ed:e9:d9:04:f2:f0:d1:
4c:a4:9f:54:ab:2f:78:7e:5a:4b:04:a5:45:bd:17:85:ce:53:
40:34:95:c1:44:15:05:57:81:e3:66:3b:6f:02:3e:76:a0:f4:
f9:6e:f3:bb:2a:49:6b:7c:91:b9:e3:94:8e:0b:f9:14:15:07:
2a:70:9a:94:84:ec:8e:da:2c:1f:bb:9c:89:ad:e3:d0:c7:a5:
af:8f:f3:1c:fe:e7:e3:87:50:05:fa:d4:41:8b:a0:e4:7b:28:
a8:2c:09:51:28:25:a1:20:2f:1c:ea:20:1a:b9:3a:47:14:74:
7a:d5:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:09 2026 by rpki-client