Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: /qglKMtleco7zvQsT2x8XFGWGUB6M+felA7DhejqVBI=
Subject key identifier: 09:CC:2D:7F:50:03:77:40:7B:24:CD:C2:53:FB:9E:CE:03:11:CE:D3
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019EBA345BEC6368D43092D64C5369D43921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0E41
Signing time: Fri 12 Jun 2026 05:00:53 +0000
Manifest this update: Fri 12 Jun 2026 05:00:53 +0000
Manifest next update: Sat 13 Jun 2026 05:00:53 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: Pmz/vyikxE1DyD1wu6UkYPMcCkRKrVQhfdrstQu79SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:5b:ec:63:68:d4:30:92:d6:4c:53:69:d4:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jun 12 05:00:53 2026 GMT
Not After : Jun 13 05:00:53 2026 GMT
Subject: CN=09cc2d7f500377407b24cdc253fb9ece0311ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:8d:51:a1:d6:ba:07:62:ab:47:6e:72:47:
d6:7c:ea:cb:cf:9a:41:a1:95:5e:80:ce:f7:75:e1:
be:54:1c:e1:f7:e3:23:bd:48:97:ad:cc:d9:a5:0b:
03:d8:21:8d:e1:a1:7a:d2:ab:41:9f:bf:ce:76:d6:
bb:0a:b3:25:9a:72:e4:00:99:5a:8b:5d:a0:8b:e5:
bf:8a:2f:41:b6:92:cb:86:c3:06:94:25:e6:20:6c:
95:30:dd:51:a2:7b:f8:3a:cf:d5:7e:54:12:fe:8e:
af:5d:5c:4c:9b:26:52:a5:ca:44:28:4a:0e:65:69:
34:29:3b:69:af:3d:7f:52:cf:01:44:6c:72:03:5f:
3b:95:51:e6:ea:8f:18:32:ca:ec:96:fe:9c:98:d6:
6b:2f:b5:40:0b:0a:36:46:9f:fb:49:3e:3d:ae:04:
90:e3:a4:21:de:f7:1b:eb:c9:d6:1c:33:7a:3a:07:
2f:e2:fc:0d:00:21:f3:e7:90:de:1d:3b:55:95:94:
dd:21:2c:25:ba:32:a1:fa:d5:fe:be:d8:db:44:bf:
bd:d6:ef:a1:6b:e7:63:f1:c4:21:18:68:d4:2c:cb:
53:ce:14:ca:c1:b9:79:bb:7f:5f:84:04:94:e0:4c:
39:e4:2a:14:4d:c9:63:88:f3:1d:99:da:da:e2:af:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:2D:7F:50:03:77:40:7B:24:CD:C2:53:FB:9E:CE:03:11:CE:D3
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:e3:3f:d4:be:a7:4e:5e:94:bb:07:48:bf:57:8f:c8:e1:
b8:ea:f6:80:ed:3b:3c:11:5b:4a:ef:4d:da:7c:93:a9:8f:d5:
ba:9f:4f:7d:3d:82:7f:dc:0f:f6:10:c2:36:6b:96:d9:1f:15:
c5:02:2e:73:42:39:57:9c:54:83:98:7b:b6:e7:dc:24:fd:78:
d1:d5:17:4c:4c:41:a6:17:d9:48:45:37:b3:31:2d:9d:1a:d4:
17:ad:ce:d1:db:21:9a:d9:62:08:6d:bb:96:5b:75:b6:ba:37:
17:85:17:95:13:62:be:ed:c4:54:76:5d:55:ed:21:f5:96:76:
ce:0b:07:d4:49:6f:90:7d:d2:4d:51:cb:cd:e5:52:46:32:04:
de:cd:87:6b:14:50:38:a4:dd:33:41:4f:73:74:85:18:c1:ab:
17:fd:b3:e8:7b:6b:47:07:74:aa:c9:82:84:67:ee:b8:c7:4e:
1b:8a:b2:68:bf:0b:9a:95:f4:c2:d8:33:93:f4:c0:ae:1d:5f:
44:96:3b:c4:76:33:d0:65:35:41:11:f6:3e:9c:57:53:3c:c8:
99:c8:99:b1:f2:44:2e:f6:c6:c2:8f:b3:d7:c4:44:dc:e5:4b:
db:7a:03:a5:e5:c0:82:94:18:6e:a7:5d:db:c2:70:ed:38:7b:
e8:a4:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:26 2026 by rpki-client