Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: XJYVsn/0KlB+KQC0DLw03sEKVMM1ot7bzzfJrtz2d30=
Subject key identifier: 9F:70:70:C4:B7:4C:D4:8F:F1:4A:A0:25:0F:B5:C4:65:76:D8:E2:98
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 019EF94B4CE76A1BFA1F1E30DDAA5AD7A7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 111F
Signing time: Wed 24 Jun 2026 11:02:02 +0000
Manifest this update: Wed 24 Jun 2026 11:02:02 +0000
Manifest next update: Thu 25 Jun 2026 11:02:02 +0000
Files and hashes: 1: 9jVIyUNC_jtqSz5QgzPFxhRriJU.roa (hash: IMd9gg9EGAXTuUYDKOVGT5KovaOc0OoHmBxOdLPHyxE=)
2: IK8rxF0fNpLSKD9Dqm0lXn3gA78.roa (hash: 727Jxwhi3j4ZaKKaAIMgbayUGpDpki6NjCGsamcTESU=)
3: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: rd/Oy2Th60TluvxxKlCOaV0BCpIn7O3DGEq7RlkcYuM=)
4: oRyAm1tY1PPV2HUhoPE8LGygZp8.roa (hash: v2TjvG71n61mmtBwzf8Bvh8DYEC21zypAmmL8cNAlmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:4c:e7:6a:1b:fa:1f:1e:30:dd:aa:5a:d7:a7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jun 24 11:02:02 2026 GMT
Not After : Jun 25 11:02:02 2026 GMT
Subject: CN=9f7070c4b74cd48ff14aa0250fb5c46576d8e298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:57:63:8c:d1:49:fa:05:72:5b:c6:37:cc:
1c:b9:91:1c:72:18:5c:ec:e8:6f:42:99:36:b2:6c:
55:35:d9:81:c5:3f:1a:99:c9:97:52:7b:12:2f:a3:
11:59:26:ef:7e:90:70:a3:da:4b:9f:8e:08:9f:cc:
be:46:de:70:8d:05:90:49:d9:c7:8b:65:09:a2:f9:
03:25:a2:96:42:60:d7:5c:1f:24:97:2a:aa:35:68:
f8:11:24:8d:38:bf:2c:50:9f:a1:f9:c2:bb:32:f7:
9f:f5:15:23:d7:7a:3d:a2:58:54:9d:f9:70:45:20:
45:70:ae:08:56:55:a0:c6:18:02:23:f5:1c:07:6a:
22:6b:c9:57:f1:d2:3d:c3:ad:c2:57:e3:b3:bc:9b:
f6:54:6c:4e:f6:bf:6a:4d:91:c0:bb:e5:fe:1c:64:
30:d7:55:90:a0:1e:7f:05:49:5c:f0:39:a3:21:0a:
93:b3:b6:c9:70:d5:da:ab:a8:00:48:1e:42:dd:d0:
a7:b0:66:76:c4:41:6b:36:58:62:95:cd:10:2e:29:
0b:ce:f1:2a:47:f9:7a:96:3b:32:3c:a4:2a:c2:7a:
05:ee:2d:59:e9:67:9f:b4:5a:95:bc:6a:5a:5e:dc:
39:b1:65:85:eb:37:a1:e9:6c:32:5e:05:a7:6a:e1:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:70:C4:B7:4C:D4:8F:F1:4A:A0:25:0F:B5:C4:65:76:D8:E2:98
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0f:9a:c9:65:49:70:2d:5e:f0:bf:67:76:34:a5:8a:f2:cc:
e1:49:b3:ec:15:54:69:6c:09:df:83:a2:7e:06:b1:21:eb:47:
69:4f:ef:3b:57:15:de:63:93:be:ca:fe:83:11:0b:36:ef:c9:
e0:c1:c2:21:c0:1a:3f:ab:87:85:49:b7:74:f6:0d:df:92:b3:
ff:73:7a:5b:2a:3f:c3:59:13:35:78:e0:3b:21:a1:ee:bb:4a:
ac:3d:3a:da:3a:cd:58:fb:25:9a:3f:b7:f7:59:97:2f:90:a6:
3c:00:3e:ab:f2:cc:01:45:cc:12:c5:2e:7f:c6:dd:be:59:ba:
4b:dc:26:4a:5b:d4:99:4c:1d:d4:e3:b4:04:06:84:18:2c:6e:
c6:d4:3b:fb:be:78:08:66:01:51:d7:f8:d3:89:3d:02:5f:cb:
bb:da:25:bd:14:4f:34:4a:39:02:6d:75:69:7f:20:64:28:d5:
c5:d8:87:49:93:c2:36:ba:e5:47:1d:7d:3f:5d:b5:be:74:5b:
33:d4:b9:ca:e2:17:ca:35:4b:3c:08:f5:93:7b:5c:45:1f:c2:
cb:bf:4b:87:b9:99:ec:7a:98:9c:b4:15:8d:dd:88:24:ea:48:
62:9d:28:b7:4c:1f:36:60:a7:0b:03:01:3f:10:3c:c6:7e:2a:
23:6b:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:08 2026 by rpki-client