Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: mKbsg2wLmD2/XpU8axSvbVPmtXAsi2JegMNKbDZXJcQ=
Subject key identifier: 09:C7:28:AA:CE:F3:29:E4:07:1B:15:17:36:E8:C2:BB:05:D2:48:17
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019CE4EC7ADBCE69DA2104937A6C0B093D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0D4E
Signing time: Fri 13 Mar 2026 02:00:29 +0000
Manifest this update: Fri 13 Mar 2026 02:00:29 +0000
Manifest next update: Sat 14 Mar 2026 02:00:29 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: 8K/2KZHit7Tz0Vup4lQ8jX+Wtdzoenf/+4q/A7g70uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:7a:db:ce:69:da:21:04:93:7a:6c:0b:09:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Mar 13 02:00:29 2026 GMT
Not After : Mar 14 02:00:29 2026 GMT
Subject: CN=09c728aacef329e4071b151736e8c2bb05d24817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2b:26:50:97:70:16:a6:0a:22:df:ff:ba:94:
dd:63:87:e1:ee:d1:0e:51:e7:41:66:b1:31:d2:2d:
71:1f:26:4b:4e:b1:e7:1e:ad:fd:e1:ad:bb:87:8d:
b4:37:a2:bf:8c:4e:6c:99:7a:b0:36:b9:5b:79:04:
de:46:42:1a:ae:65:3f:dd:c4:e9:0e:04:58:03:1f:
0a:f4:82:63:f3:1e:85:63:83:c6:9b:9e:0a:14:5f:
82:a5:b7:e4:cd:2f:02:73:b6:20:2b:97:82:36:7a:
0b:3b:a3:15:31:0f:5a:18:ac:f3:cb:0f:30:02:cb:
77:d2:04:5d:1f:ce:4e:bb:e2:90:2a:da:83:6c:12:
d8:c4:16:fd:df:e2:5b:15:3d:57:ed:a8:cb:77:0b:
9f:96:a1:4a:eb:f1:27:9a:f1:45:b7:5c:8f:fc:8d:
6b:be:c0:7e:25:15:2f:99:b7:f5:cf:df:66:a7:e5:
41:2a:27:b2:bb:6c:7e:f7:44:8e:b2:d4:69:ea:25:
e4:1e:f0:ba:ea:8c:71:75:e0:95:13:7c:74:1b:ed:
c2:8b:4b:9d:29:42:43:56:38:f4:34:8c:33:72:c1:
0d:34:7b:dc:fe:64:a6:dd:09:f1:74:f8:5a:e9:79:
12:fd:a2:c9:1e:98:9d:7f:95:d1:70:d0:e6:8e:5f:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:28:AA:CE:F3:29:E4:07:1B:15:17:36:E8:C2:BB:05:D2:48:17
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:2b:95:ea:0e:32:52:24:2d:49:f6:24:f7:07:c6:33:3a:
d5:c4:8d:0c:a0:1f:ff:a7:8a:9d:3d:82:ff:ec:24:3d:f5:b3:
f4:b7:66:2c:44:c8:7f:0a:43:81:f9:17:56:a4:60:01:35:6b:
b3:5c:9d:76:9e:65:b9:10:7b:b7:b4:68:f1:8f:4e:6e:b5:4f:
17:1b:35:8a:e1:1d:72:64:40:85:0b:5f:94:fe:d7:6f:b9:32:
cc:a1:ce:00:d6:26:cd:7a:89:4c:01:7d:c8:e2:6b:48:c3:3a:
a1:4b:b1:1d:05:b2:1b:79:08:49:ee:72:d6:33:79:03:48:df:
74:bc:87:f0:e8:dd:61:2d:f8:f9:d4:05:75:41:12:6f:a7:c1:
e7:2f:3a:7c:05:27:67:a7:7e:ad:8f:d2:57:5e:46:f2:67:93:
9b:93:30:b5:b4:ac:00:e7:d1:99:f6:13:34:28:28:3a:37:19:
0b:8c:0e:c8:cb:70:09:7b:b7:df:37:35:4f:0c:a8:b6:08:53:
a3:f7:8d:17:4b:f1:eb:f5:79:97:4c:e6:8a:ab:1d:d0:4b:ab:
f9:ac:cb:fa:7f:27:a6:de:79:7d:1a:d5:bd:a7:fa:f6:6f:05:
67:8d:8b:c7:bb:23:10:5f:a9:b7:fe:67:06:0b:b7:c5:e6:62:
2c:66:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:48:05 2026 by rpki-client