Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: SM/gKl0ZMEyEZS4ptLsLOja6cWR3IWBC98Ken4Bec2g=
Subject key identifier: D5:E9:C5:9D:C0:38:0A:5C:59:52:68:12:84:36:8C:17:20:36:06:5A
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01A08B9ED5D13509118CDA8DFDFCF3B66B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0F32
Signing time: Thu 10 Sep 2026 14:00:37 +0000
Manifest this update: Thu 10 Sep 2026 14:00:37 +0000
Manifest next update: Fri 11 Sep 2026 14:00:37 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: 0XUdMnNiEqibRqiJIQCtUFwxeSqnCsmTeM5lfu3GwUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:d5:d1:35:09:11:8c:da:8d:fd:fc:f3:b6:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Sep 10 14:00:37 2026 GMT
Not After : Sep 11 14:00:37 2026 GMT
Subject: CN=d5e9c59dc0380a5c5952681284368c172036065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:f0:78:e4:47:24:b2:86:63:cc:62:9a:cf:
f1:1a:6c:00:0d:9e:45:c2:94:3e:39:8b:59:fc:b4:
b9:74:86:1c:7a:64:57:10:d1:a4:bc:03:2a:62:d5:
c4:50:62:74:3f:01:a4:f5:06:4b:07:b4:68:14:1c:
1d:a6:30:1c:e3:81:43:fe:09:82:d3:f1:3f:87:57:
2b:32:2c:73:55:00:fe:5a:dd:60:ca:5b:06:ff:af:
78:03:f6:53:a8:31:dc:ae:c7:47:63:97:ab:68:5c:
c7:da:35:18:15:99:cb:3e:c6:51:1d:af:1b:39:55:
c8:f0:3c:db:e0:8d:6e:f3:5f:4d:b0:ed:ae:ac:62:
0f:ca:cc:ff:c7:eb:b2:1a:e9:e1:95:dd:e7:ca:2c:
ac:6f:83:9e:ef:06:22:8c:f0:ec:a3:8b:ad:ec:40:
e9:d6:84:f1:9b:1d:6d:ed:f0:0c:1a:1b:91:7b:27:
f0:0e:8d:96:a6:a5:32:cc:64:a2:0a:b7:64:24:1e:
76:10:5e:c0:9a:bd:90:9d:b9:0f:2a:da:af:49:12:
e7:50:38:62:17:59:f1:43:89:75:72:e0:4f:ed:c5:
2f:10:fa:fd:65:f1:ff:3f:62:41:f3:fb:88:e0:59:
93:f8:5e:e2:0d:84:ac:00:30:da:fc:0d:c6:7f:0b:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:C5:9D:C0:38:0A:5C:59:52:68:12:84:36:8C:17:20:36:06:5A
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:30:95:71:0e:7f:17:65:80:b4:be:19:20:fa:64:df:f4:
22:20:80:7a:b9:3f:fe:41:fe:92:9b:51:07:6c:bb:43:ae:c1:
12:8a:02:7e:3b:6f:fe:0b:27:c4:fe:31:27:a6:57:92:33:20:
ac:42:81:17:12:5d:47:b9:40:ba:01:bd:c6:ac:7b:6f:77:d0:
cb:2f:14:f6:20:87:ed:b7:09:08:8d:9f:5d:f9:38:90:07:c6:
53:e2:3b:aa:a0:1b:23:8b:72:cd:10:8a:7a:13:ce:54:fc:a6:
c7:0a:0a:68:77:16:f8:ae:02:93:08:8c:72:5d:1a:9e:0a:86:
7a:f5:a1:5c:24:79:67:78:f4:db:1e:4e:5d:b3:ea:05:72:1c:
b7:e6:31:46:ef:15:b7:af:49:e8:dc:fd:56:b5:b3:4e:b8:f2:
9a:39:0c:87:27:f7:11:ba:91:86:70:7a:fe:5c:a6:fa:f2:3a:
2a:5d:93:72:15:0c:14:01:61:90:c9:ac:83:26:29:35:49:ab:
bd:bb:87:83:48:0d:39:37:0f:d9:82:c9:77:61:87:7f:77:3b:
fe:9c:f3:ed:1b:1c:77:cc:46:8c:80:87:b1:4f:73:83:cc:b6:
04:61:a5:26:06:1c:97:01:9a:63:6b:b5:ea:24:c1:f7:90:10:
a0:46:d6:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLntXRNQkRjNqN/fzztms1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjYwOTEwMTQwMDM3WhcNMjYwOTExMTQwMDM3WjAzMTEwLwYDVQQD
EyhkNWU5YzU5ZGMwMzgwYTVjNTk1MjY4MTI4NDM2OGMxNzIwMzYwNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJvweORHJLKGY8xims/xGmwADZ5F
wpQ+OYtZ/LS5dIYcemRXENGkvAMqYtXEUGJ0PwGk9QZLB7RoFBwdpjAc44FD/gmC
0/E/h1crMixzVQD+Wt1gylsG/694A/ZTqDHcrsdHY5eraFzH2jUYFZnLPsZRHa8b
OVXI8Dzb4I1u819NsO2urGIPysz/x+uyGunhld3nyiysb4Oe7wYijPDso4ut7EDp
1oTxmx1t7fAMGhuReyfwDo2WpqUyzGSiCrdkJB52EF7Amr2QnbkPKtqvSRLnUDhi
F1nxQ4l1cuBP7cUvEPr9ZfH/P2JB8/uI4FmT+F7iDYSsADDa/A3GfwvdRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXpxZ3AOApcWVJoEoQ2jBcgNgZaMB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7swlXEO
fxdlgLS+GSD6ZN/0IiCAerk//kH+kptRB2y7Q67BEooCfjtv/gsnxP4xJ6ZXkjMg
rEKBFxJdR7lAugG9xqx7b3fQyy8U9iCH7bcJCI2fXfk4kAfGU+I7qqAbI4tyzRCK
ehPOVPymxwoKaHcW+K4CkwiMcl0angqGevWhXCR5Z3j02x5OXbPqBXIct+YxRu8V
t69J6Nz9VrWzTrjymjkMhyf3EbqRhnB6/lym+vI6Kl2TchUMFAFhkMmsgyYpNUmr
vbuHg0gNOTcP2YLJd2GHf3c7/pzz7Rscd8xGjICHsU9zg8y2BGGlJgYclwGaY2u1
6iTB95AQoEbW5A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:28 2026 by rpki-client