Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: o81Pd+HwJsV3xrMD5uUI9es5cT5DaSCN86pVfal+X3o=
Subject key identifier: 73:41:F6:5A:54:EA:E7:47:D0:C9:43:BE:CA:49:0D:A6:57:68:0E:A4
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019CABD96A4578C33AD71CF492583AAF2A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1723
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=)
2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=)
3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: jmdTWGKPx54HjMLTTP8W5SvcMA8OK0xzm13hmLLw8sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6a:45:78:c3:3a:d7:1c:f4:92:58:3a:af:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=7341f65a54eae747d0c943beca490da657680ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:6e:09:7f:bd:de:b6:df:b7:fa:ae:45:e6:
b3:d8:81:97:83:f8:f8:1b:80:2a:89:0d:63:44:76:
00:61:a1:37:7b:11:a9:9b:26:9d:02:75:b3:d3:a5:
75:ef:0f:08:92:57:a2:01:96:55:bc:75:d3:42:8a:
d3:b0:7a:59:e0:5b:21:d7:c0:f3:ce:4a:75:8d:6d:
cb:2f:aa:97:07:ea:94:26:02:cb:16:d7:6a:d1:eb:
30:00:a7:12:1e:20:25:38:94:64:8e:4d:7f:c5:fd:
bf:a6:d9:e5:cd:00:61:71:44:1d:0f:e6:b3:32:c7:
3f:8d:4c:a6:77:82:da:80:37:e3:ea:fb:dc:ee:ab:
e8:dc:83:65:59:c0:f0:d1:8b:b6:94:de:25:a7:f5:
3b:23:8f:55:8a:cb:7b:ce:a8:ab:48:08:b6:c2:b6:
62:ff:2c:35:e6:03:c4:70:15:19:1e:ab:50:68:3f:
82:72:c9:21:29:b5:25:2b:a9:1e:83:9f:3a:4e:a6:
20:01:1d:10:ca:13:43:b1:d1:45:9c:ac:77:d1:ce:
db:83:bc:20:62:f3:5c:ec:4e:7b:c1:b5:34:48:ae:
f6:b7:6b:1e:1a:76:95:b0:67:a0:94:55:3d:df:99:
2c:2c:c3:bf:4b:ad:16:42:02:fe:92:93:50:b6:8d:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:41:F6:5A:54:EA:E7:47:D0:C9:43:BE:CA:49:0D:A6:57:68:0E:A4
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:78:13:5a:9e:c6:dd:57:00:ce:65:30:30:79:47:5c:1e:
bc:63:42:e3:9f:bd:5d:12:05:86:9e:55:b9:ae:1d:9f:99:60:
10:0b:44:0f:13:65:46:57:4a:7f:30:0f:d9:30:cd:b3:72:eb:
36:55:68:30:ad:31:bf:2f:e1:cb:df:33:1f:8f:18:95:5d:65:
d8:4b:9a:c4:17:9a:1d:e4:be:f1:d3:1b:07:7e:05:a6:aa:1c:
3b:be:ac:09:a4:7a:d4:75:0b:70:91:ba:5e:88:a5:07:cb:c7:
4b:f7:cd:74:d7:54:8a:f1:c6:7f:c7:d6:2d:5e:05:43:7c:87:
18:3b:01:54:ce:d2:3c:e6:f4:5c:d3:8c:64:4a:0c:2b:12:4c:
f6:1b:2c:c9:1a:ea:35:bf:b5:68:a0:6b:64:ec:92:45:7e:28:
07:b4:c1:d6:c5:df:a4:95:bd:26:9a:8d:c2:ad:fe:9a:d9:b1:
c5:16:f3:1b:3e:bc:8f:d9:6b:cf:26:57:77:13:d6:b3:cf:5f:
5a:f7:0b:32:50:18:88:69:fc:a0:bb:43:de:b5:65:f0:16:8d:
6f:7d:5f:bd:f6:96:ab:45:cd:5f:b6:1e:19:76:c0:6b:ad:0b:
e4:fd:3f:40:30:6a:ff:c5:c8:ad:43:f2:82:db:15:2e:02:52:
20:b0:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:14 2026 by rpki-client