Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: TJW+OeFNFPLh3U47IYp4P07wITe0xZDcCW9uvzpeHjw=
Subject key identifier: AF:E8:35:3B:0C:C9:7B:7A:47:07:5A:6B:15:FF:EE:93:71:C5:A0:E7
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019DCE999C23B0D62B5CD7B99529842D8EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0DC7
Signing time: Mon 27 Apr 2026 11:01:06 +0000
Manifest this update: Mon 27 Apr 2026 11:01:06 +0000
Manifest next update: Tue 28 Apr 2026 11:01:06 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: L5wagZ1V8GQiNcVgKuPG8kgzNQ7obYvHMhKLNbuhSeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:9c:23:b0:d6:2b:5c:d7:b9:95:29:84:2d:8e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Apr 27 11:01:06 2026 GMT
Not After : Apr 28 11:01:06 2026 GMT
Subject: CN=afe8353b0cc97b7a47075a6b15ffee9371c5a0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3f:48:ee:93:96:a6:51:8c:28:a5:22:4c:e5:
29:ec:d0:15:14:62:d0:b8:f9:d6:1b:18:94:4a:22:
52:48:87:c8:e8:41:44:7f:02:20:0f:f1:4c:75:99:
97:5b:1d:c4:be:ae:60:b8:06:7c:d1:20:53:6e:68:
47:7b:b0:96:29:61:7e:76:9f:aa:13:bb:eb:83:1d:
93:14:cd:95:d0:c2:2b:d5:11:30:7f:a3:30:dc:7b:
83:0c:7d:18:28:2f:12:3c:ff:0f:a6:41:d9:29:09:
7a:5d:58:13:74:1d:90:79:16:e3:50:62:b3:3d:c3:
ed:39:65:f1:cf:8e:9d:72:40:f6:20:42:37:e5:a8:
61:70:69:bc:83:62:30:6f:7a:03:20:e4:bd:88:97:
dd:93:f9:a8:5a:bc:5e:b3:75:44:8a:00:a3:0c:0d:
de:80:7c:d5:8a:79:f2:22:28:ba:f5:9c:29:39:44:
d7:4e:ad:d7:a1:5d:15:6a:0e:a7:ef:41:00:4c:4d:
80:53:98:9e:b2:8d:de:20:9d:f8:d0:03:c6:d5:b1:
89:8c:1e:df:65:c1:9d:11:4b:d0:99:b2:33:de:ae:
fc:58:8f:db:9a:d3:c9:61:50:22:16:b9:33:cc:8a:
07:ea:93:99:f1:a7:1e:59:f6:5f:66:f6:58:02:ba:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:35:3B:0C:C9:7B:7A:47:07:5A:6B:15:FF:EE:93:71:C5:A0:E7
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:60:01:de:af:77:b5:c9:20:62:f8:2f:8a:31:52:97:32:
0b:85:62:28:4f:ba:94:c1:14:00:22:d6:e7:68:23:0b:c9:78:
d7:db:d3:e0:ef:61:ab:41:e3:cc:bb:99:dc:c2:89:8b:f7:1b:
68:c2:da:45:bd:2b:5d:67:42:fa:0e:25:9a:9d:6f:54:53:a3:
71:16:e6:a8:6e:da:e6:1e:21:50:cb:10:10:1b:51:38:4d:8a:
a0:18:9a:24:c7:4b:a9:5e:73:c6:78:50:af:52:83:e3:2b:7d:
f3:e5:36:10:4d:f7:73:22:49:5b:bb:e9:65:87:41:8c:a8:d3:
f1:5d:3a:67:a9:b6:94:1e:14:f9:9c:7b:57:e3:e3:38:80:e1:
74:b2:74:63:aa:c8:74:67:06:49:30:52:a3:72:e7:e7:59:21:
9b:86:2f:4e:60:de:55:3a:68:9a:1b:48:6c:bb:2d:ff:f2:9e:
b2:65:9d:64:4a:f5:e9:2f:24:84:c2:2f:6a:d6:6f:07:70:22:
cf:43:72:f1:02:9c:01:83:b4:f6:81:18:26:63:c5:ad:8b:04:
e8:1a:4e:f1:6a:5f:1f:98:f7:5f:c5:18:59:ed:c3:29:8b:22:
ea:21:b6:ac:22:b6:75:1c:6b:f9:25:81:1d:e6:16:55:fe:2c:
86:45:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:41:59 2026 by rpki-client