Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: WQCJhgV06ljtjbJmt+el9bJoyS0bTa814IMtkwbAxts=
Subject key identifier: 60:09:04:50:97:30:6D:90:DA:B2:D2:3E:15:49:30:DE:63:65:DE:D0
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 01A0423CA1AF968CE21485BAC14BAD8AA646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 1976
Signing time: Thu 27 Aug 2026 08:01:04 +0000
Manifest this update: Thu 27 Aug 2026 08:01:04 +0000
Manifest next update: Fri 28 Aug 2026 08:01:04 +0000
Files and hashes: 1: HqknbCtl1Axe3TPw1P6jDONpLVc.roa (hash: ZnfnJYZ+e5B0J97RREAVHfbNjcFtOONy33iXAx75Pag=)
2: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (hash: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: uf66WYQJhk//0hQeAr5UYBFg9X76AC2cxk/67ITc1Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3c:a1:af:96:8c:e2:14:85:ba:c1:4b:ad:8a:a6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Aug 27 08:01:04 2026 GMT
Not After : Aug 28 08:01:04 2026 GMT
Subject: CN=6009045097306d90dab2d23e154930de6365ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:df:f3:d3:e1:71:c9:e0:21:fe:87:0f:c2:
82:66:37:7c:7f:e3:bc:b8:61:8c:f1:0b:d7:d7:c4:
3e:ec:25:c1:30:08:58:24:a2:61:ea:63:0b:91:17:
64:e1:fb:45:9d:a4:ca:84:b5:0d:a3:70:49:45:bc:
39:2b:b5:c4:5b:f8:43:11:0d:42:0f:6d:ef:56:5e:
6f:99:bf:2b:bb:a6:1b:3a:53:b7:93:6b:be:68:e4:
b1:d4:37:25:65:7d:46:76:01:91:c1:22:16:70:ee:
dc:a5:f0:f5:37:bf:b9:74:bc:ec:f9:fd:48:d1:9c:
30:08:8d:39:3f:ee:db:f6:bc:83:58:54:0e:02:5d:
61:c2:de:f6:cf:86:59:b7:e9:be:44:23:cd:45:d8:
b1:36:64:43:47:63:e6:c0:e3:dd:dd:e2:e6:5d:48:
c0:09:64:df:50:10:93:7a:1d:01:df:35:18:06:71:
1e:55:1c:db:15:62:c7:ce:20:e4:4c:89:dc:dd:e8:
16:ba:96:17:51:0e:e7:d6:14:c5:a3:ae:0a:02:28:
3e:b0:45:40:aa:bb:2e:73:bc:47:21:da:54:03:54:
16:b5:49:a0:4d:5f:e8:8a:80:c0:ee:80:0a:69:fe:
0d:e4:40:0d:02:35:ff:64:10:55:4d:b7:e6:98:2b:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:04:50:97:30:6D:90:DA:B2:D2:3E:15:49:30:DE:63:65:DE:D0
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:f1:26:20:6c:6e:1f:3a:5e:3d:2d:4c:be:c9:d1:7d:71:
dd:67:37:5c:a3:b3:33:cb:76:9c:66:60:92:f8:d3:51:66:46:
2b:10:e2:7e:44:d4:60:95:69:58:f5:1c:bb:d5:2d:fd:c8:19:
5f:a7:69:d8:8d:72:43:36:07:34:5d:f5:f9:e8:e6:1c:82:57:
7a:ed:a0:0b:c7:ed:3d:59:0a:30:22:42:5b:d7:63:4a:f1:f6:
55:3b:bf:a2:22:f9:d8:39:47:fa:be:7c:ff:9d:c0:39:aa:e7:
29:29:5f:3e:f8:99:60:58:5a:98:f5:15:6f:9e:12:8a:77:23:
dc:60:f9:b4:5b:fc:49:07:85:30:a1:b7:1f:4d:51:8f:a3:02:
3c:80:35:49:9f:e7:8c:07:a6:1b:25:78:7d:df:8d:ea:7d:4b:
83:50:0d:e6:48:f5:ee:5a:c4:0d:d1:94:ed:92:68:a8:47:4b:
c4:9a:1f:33:b7:54:50:ef:a5:6e:15:40:2e:17:79:96:53:dc:
78:a8:22:51:2f:21:8a:3e:7c:30:34:9d:4f:2f:e9:21:ce:0f:
b8:ba:17:e5:aa:55:4b:67:ed:78:d5:42:b1:a7:f3:f6:f7:b3:
8d:f3:87:c4:cb:8b:e9:a1:5d:a3:da:6a:4e:20:72:e0:62:52:
23:38:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:47:37 2026 by rpki-client