Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: ujklJXDckT/clssfsB+WLR4LfbynOxP19oKRi/nZE0Y=
Subject key identifier: F4:7C:8D:5E:45:7B:1B:6C:EF:09:40:A6:CB:72:89:17:F4:B8:4C:E8
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01A17D05178DAA578F138BD79395CC80EEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0FAF
Signing time: Tue 27 Oct 2026 11:00:47 +0000
Manifest this update: Tue 27 Oct 2026 11:00:47 +0000
Manifest next update: Wed 28 Oct 2026 11:00:47 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: Tm8Vj7ZgJxJQI5Y6aUUcbEzpcuaFnwPz0BLK6MiF6D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:17:8d:aa:57:8f:13:8b:d7:93:95:cc:80:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Oct 27 11:00:47 2026 GMT
Not After : Oct 28 11:00:47 2026 GMT
Subject: CN=f47c8d5e457b1b6cef0940a6cb728917f4b84ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:a4:e7:7e:a3:70:5c:55:07:08:a4:86:c9:
23:0a:42:a7:7e:17:8a:0f:bb:0b:62:73:37:0e:27:
ed:12:56:3d:63:9d:64:3e:68:b9:f0:79:c8:38:1d:
3c:1d:3f:9e:c4:0d:48:7d:61:d8:e4:60:bd:12:db:
b3:0a:ad:57:5b:47:37:1c:93:3f:c3:22:3c:80:40:
a1:aa:ad:25:3a:7e:d9:40:55:26:9c:28:7f:f7:28:
d3:43:ab:b8:1f:7a:d5:5e:a3:6c:54:12:c2:3f:84:
a8:d8:00:98:3d:d1:c4:17:6c:92:af:70:60:10:ff:
0e:a9:80:4e:84:f3:97:6d:73:d5:46:74:8f:7f:c1:
75:49:89:ea:4c:6e:c3:a2:ab:4b:c4:6e:50:4d:fe:
60:33:6f:0e:00:bb:85:6e:ae:84:ed:1f:21:c8:8f:
a8:87:a8:75:cf:ea:a6:31:cd:15:a1:8c:b5:36:07:
25:f6:34:a7:27:de:82:bc:70:20:20:42:73:4b:e3:
58:ce:8b:40:1b:3e:63:5b:b2:25:f8:5f:13:7f:3c:
53:b2:59:ed:da:7b:e9:c1:b4:fa:e8:22:a5:ea:be:
cd:c9:27:54:99:15:c0:e2:9f:0c:41:87:ad:4c:64:
df:dc:b2:03:fe:bd:f3:53:a7:75:61:78:20:ac:86:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:8D:5E:45:7B:1B:6C:EF:09:40:A6:CB:72:89:17:F4:B8:4C:E8
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4e:7f:b7:27:22:ce:09:98:3e:a9:df:26:45:65:7c:ac:17:
26:ca:81:16:3f:9d:8e:e7:29:80:e0:5b:6e:ad:3b:5f:f4:c7:
9c:4d:6e:02:e2:d9:fc:f1:9b:82:02:55:ca:7e:96:21:97:b1:
de:ad:86:e1:ad:8b:d4:be:bd:f8:98:52:3e:e7:59:34:88:37:
b0:11:34:a9:24:9b:24:6c:44:bd:e6:a2:9c:14:60:06:d9:ab:
bf:40:c6:ff:fa:d9:e9:88:1e:a8:a3:17:86:4d:f0:8b:5e:ef:
da:cb:94:e4:41:51:af:59:e9:7f:02:25:9e:0c:8d:be:10:2d:
c3:d3:58:fa:9f:44:51:c3:20:ee:70:a3:70:75:5f:88:d7:56:
9d:4e:34:43:81:aa:b6:d6:93:d8:0e:6e:40:0b:6f:c4:01:e7:
d9:9a:a5:f7:ef:26:aa:a2:9f:5a:21:cb:1d:25:6c:95:40:1f:
26:30:2b:88:ca:7a:21:84:82:73:3e:c4:6d:aa:bc:70:07:e3:
48:82:73:53:0c:c1:1f:cf:2d:b8:74:7b:ff:b6:d2:5d:d8:8c:
1e:81:74:53:12:ad:65:61:18:49:71:ad:6a:25:94:63:ae:12:
b3:8b:5c:6e:99:a2:cc:63:af:e2:46:4a:1f:f9:78:7a:95:ac:
94:68:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:42 2026 by rpki-client