Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: XhINRQUgFTYVHNuBLlx7P3+ueAVjJ4mPSSnph/amy9I=
Subject key identifier: FE:FD:98:E4:CE:73:A7:F2:2B:EB:F3:EA:F8:63:41:9A:04:A4:62:F5
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01A17B16405E18FC3E5CFBFA7E99B5599763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0FAE
Signing time: Tue 27 Oct 2026 02:00:18 +0000
Manifest this update: Tue 27 Oct 2026 02:00:18 +0000
Manifest next update: Wed 28 Oct 2026 02:00:18 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: VEGu1NKZkafISpqN4qtODf64zkykLE8poPR5fEfqd+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:40:5e:18:fc:3e:5c:fb:fa:7e:99:b5:59:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Oct 27 02:00:18 2026 GMT
Not After : Oct 28 02:00:18 2026 GMT
Subject: CN=fefd98e4ce73a7f22bebf3eaf863419a04a462f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:74:08:05:4e:68:16:a0:41:67:40:1e:39:
d5:2a:31:f0:3d:76:53:05:eb:b7:cd:24:9f:af:e7:
3e:5c:f6:4a:c1:c8:46:cb:9f:50:1b:64:f9:22:f2:
03:28:fb:1a:7c:be:76:52:a0:3b:25:be:9a:ae:3f:
87:db:d5:ca:10:ad:a8:9c:b5:56:6e:e0:31:80:c4:
b2:a1:4e:9b:f4:f1:64:5d:13:96:be:78:f5:ad:a6:
75:58:d0:0a:4d:16:aa:e4:19:08:5c:a4:33:1c:a2:
8d:dd:73:22:e1:49:9a:03:6f:d0:69:4e:23:8c:19:
5b:43:f9:46:62:5d:25:ea:75:4d:4e:9a:55:1e:5b:
92:27:3b:11:76:dd:2d:90:10:d1:93:90:ed:9f:96:
dc:ce:b1:64:f4:19:83:a1:32:e0:a6:f7:c1:1e:42:
22:1c:27:92:21:15:19:4b:b5:6f:ef:ae:1b:ea:02:
87:bb:e1:a8:a8:2f:bf:20:d9:58:14:0b:31:e4:7d:
ec:1c:3c:df:95:e0:42:f1:44:46:64:9c:f2:a1:98:
14:47:0e:ba:01:a3:15:14:4d:95:91:d3:af:01:02:
13:dd:d8:75:60:38:ef:1c:c5:4b:98:5e:a8:1a:9a:
45:1e:c7:64:ae:6e:69:af:5f:5d:f7:7e:85:3a:a1:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:98:E4:CE:73:A7:F2:2B:EB:F3:EA:F8:63:41:9A:04:A4:62:F5
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:61:06:83:19:7c:36:c1:49:3e:69:c6:2a:77:e6:36:75:
9e:dd:5c:07:40:01:e9:23:f6:5f:37:3b:ff:ab:54:ba:b3:fe:
5d:31:44:d8:f7:2c:d4:52:d1:7d:e7:6f:5f:08:90:71:06:06:
76:66:4f:bc:8a:26:ed:a1:01:ea:06:91:5b:2c:ce:30:b5:0a:
27:18:52:51:20:e2:dd:ed:c6:25:6c:1b:b0:57:18:bd:03:2e:
f2:0e:4b:15:e7:81:0a:18:00:71:e2:01:26:c4:e4:b4:56:e7:
5a:05:c4:57:a7:bb:58:34:20:b2:3c:ae:67:99:7f:06:88:88:
fb:63:39:05:69:8d:22:96:f8:d0:8e:e1:f7:ab:c6:6d:0f:94:
e4:66:bf:58:db:b8:67:85:12:c4:31:26:3c:1f:94:67:9e:22:
79:3f:49:97:99:d3:34:6f:f0:e3:12:72:c7:14:de:6a:80:d4:
7f:b8:84:89:c7:9e:53:06:db:42:c6:f3:7d:0b:34:86:dd:0a:
0f:34:a2:92:31:4b:57:ef:fa:26:49:04:da:da:a7:45:a9:cd:
50:89:3e:3f:d3:68:25:46:3e:6d:07:6c:be:4f:34:38:f6:d0:
b1:e5:34:c6:ef:72:bf:73:b4:9a:12:5b:83:1e:56:8b:8c:6d:
f0:f9:b7:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FkBeGPw+XPv6fpm1WZdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjYxMDI3MDIwMDE4WhcNMjYxMDI4MDIwMDE4WjAzMTEwLwYDVQQD
EyhmZWZkOThlNGNlNzNhN2YyMmJlYmYzZWFmODYzNDE5YTA0YTQ2MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tt0CAVOaBagQWdAHjnVKjHwPXZT
Beu3zSSfr+c+XPZKwchGy59QG2T5IvIDKPsafL52UqA7Jb6arj+H29XKEK2onLVW
buAxgMSyoU6b9PFkXROWvnj1raZ1WNAKTRaq5BkIXKQzHKKN3XMi4UmaA2/QaU4j
jBlbQ/lGYl0l6nVNTppVHluSJzsRdt0tkBDRk5Dtn5bczrFk9BmDoTLgpvfBHkIi
HCeSIRUZS7Vv764b6gKHu+GoqC+/INlYFAsx5H3sHDzfleBC8URGZJzyoZgURw66
AaMVFE2VkdOvAQIT3dh1YDjvHMVLmF6oGppFHsdkrm5pr19d936FOqGmJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP79mOTOc6fyK+vz6vhjQZoEpGL1MB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHthBoMZ
fDbBST5pxip35jZ1nt1cB0AB6SP2Xzc7/6tUurP+XTFE2Pcs1FLRfedvXwiQcQYG
dmZPvIom7aEB6gaRWyzOMLUKJxhSUSDi3e3GJWwbsFcYvQMu8g5LFeeBChgAceIB
JsTktFbnWgXEV6e7WDQgsjyuZ5l/BoiI+2M5BWmNIpb40I7h96vGbQ+U5Ga/WNu4
Z4USxDEmPB+UZ54ieT9Jl5nTNG/w4xJyxxTeaoDUf7iEiceeUwbbQsbzfQs0ht0K
DzSikjFLV+/6JkkE2tqnRanNUIk+P9NoJUY+bQdsvk80OPbQseU0xu9yv3O0mhJb
gx5Wi4xt8Pm3PA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:06 2026 by rpki-client