Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: O/2uvlI9g5gM1AIzzTGN/P8S3wHlsxRUUyjv3ubWOuk=
Subject key identifier: 26:54:1C:C4:DD:6A:8A:FF:C3:47:67:5F:15:CE:54:FF:08:CC:78:0B
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019FA3E073E032EDF30CE74C89D1E0D360C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0EBA
Signing time: Mon 27 Jul 2026 14:00:23 +0000
Manifest this update: Mon 27 Jul 2026 14:00:23 +0000
Manifest next update: Tue 28 Jul 2026 14:00:23 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: PNMNdx31JXB2YdJmJtSOrEOGgrPtW9NxXcAK9iU4OoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:73:e0:32:ed:f3:0c:e7:4c:89:d1:e0:d3:60:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jul 27 14:00:23 2026 GMT
Not After : Jul 28 14:00:23 2026 GMT
Subject: CN=26541cc4dd6a8affc347675f15ce54ff08cc780b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:ab:81:ae:20:e3:e1:8d:6a:5f:c9:b5:24:
89:7a:0b:5f:42:18:38:d3:2b:cd:3e:38:9a:57:49:
1c:d6:43:7a:68:5e:e4:30:48:1b:26:43:32:ae:c4:
c3:e2:e4:57:92:d0:a8:bf:18:f0:ac:db:23:2a:b7:
10:87:2d:e6:26:bf:e1:f2:0c:5f:cd:2f:9f:89:3d:
fa:9f:5b:95:ad:ec:af:51:df:91:10:b5:ac:51:a7:
00:1f:e2:a5:ec:04:3c:71:fa:05:ab:70:50:ea:68:
fb:b5:3f:d3:6b:6c:87:73:d4:cb:a7:8b:8c:18:71:
54:5a:e6:9a:b8:76:79:f8:20:b9:3d:10:26:54:5d:
07:3a:ec:7c:36:42:be:a6:23:c3:92:32:5f:6f:96:
da:62:06:40:7e:cb:f2:33:90:24:34:d2:66:84:d3:
aa:8d:20:60:cf:cc:ae:6f:04:ca:d1:f0:c8:2f:14:
cd:ca:f3:8d:c1:4c:e8:06:50:83:b5:ec:43:9c:fa:
b7:5a:e6:5d:36:54:89:40:70:c0:f6:11:75:b0:22:
92:1a:c3:a1:5a:de:8d:e3:f8:ec:08:e4:12:40:08:
ca:92:49:3d:38:36:c2:86:90:61:a2:9e:d9:81:26:
f2:45:d5:92:5e:a8:1c:d2:6f:bb:aa:3a:39:75:70:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:1C:C4:DD:6A:8A:FF:C3:47:67:5F:15:CE:54:FF:08:CC:78:0B
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:f0:90:3c:df:f1:6b:54:22:c0:e8:6a:56:a6:ce:38:11:
8d:b8:d5:1b:13:95:1f:b5:ce:12:f1:ca:1e:12:bb:60:07:c2:
15:6e:9b:be:3c:d7:7c:df:5f:ed:6e:53:d3:dd:37:c3:69:e5:
cb:97:70:c3:2d:dd:82:b0:31:af:8c:d1:a8:bc:1d:92:a6:70:
b7:f0:6c:73:16:9d:e9:af:cb:6e:42:a7:8b:1e:e7:bf:81:82:
61:3b:10:4c:99:af:a0:8b:53:81:e3:e2:9f:53:af:d2:e5:fb:
90:fa:cc:ad:0c:49:66:d0:2c:8e:78:5c:dc:a0:f9:4b:e2:d5:
8f:88:d2:88:a8:d6:04:ca:e4:4b:f1:fa:00:cc:82:2f:ac:38:
dc:7e:68:ab:5c:65:d7:36:f1:1d:39:d1:48:9f:25:49:24:be:
7a:02:24:c5:b6:a5:f4:96:f4:95:24:12:11:9a:e6:1c:95:12:
e6:0e:12:9d:45:2e:e1:30:84:57:49:e6:a2:3a:f2:a4:ae:32:
ea:06:8d:bc:d3:4d:94:4e:70:ed:ae:d9:62:0f:08:1c:ef:50:
02:6b:37:56:8b:11:1a:2f:27:c8:30:6c:de:ea:0b:bf:f0:2d:
90:73:1a:c6:58:9f:aa:f8:fc:02:f9:9c:d8:32:d2:4f:65:ff:
0e:db:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:21 2026 by rpki-client