Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: i3SXgf2ZAPmYT2PMCYxX3x5FgFNdziZ1HRb0WiEk5bY=
Subject key identifier: DA:00:48:B9:EF:7D:3B:9E:4E:22:F4:9A:7B:21:E5:6F:24:89:48:93
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 01A13B5C38C8B5E64BEAD22876F6C6FC9BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 19F7
Signing time: Wed 14 Oct 2026 17:01:01 +0000
Manifest this update: Wed 14 Oct 2026 17:01:01 +0000
Manifest next update: Thu 15 Oct 2026 17:01:01 +0000
Files and hashes: 1: HqknbCtl1Axe3TPw1P6jDONpLVc.roa (hash: ZnfnJYZ+e5B0J97RREAVHfbNjcFtOONy33iXAx75Pag=)
2: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (hash: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: 02nHE/RxAjrlUaVJNUJFzCEuYgafSDv58o2dHWP0nGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5c:38:c8:b5:e6:4b:ea:d2:28:76:f6:c6:fc:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Oct 14 17:01:01 2026 GMT
Not After : Oct 15 17:01:01 2026 GMT
Subject: CN=da0048b9ef7d3b9e4e22f49a7b21e56f24894893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:12:30:39:2a:4c:91:1b:7d:0c:71:c6:d9:
1c:82:68:4e:f7:86:23:8e:e7:9c:19:08:ab:d8:0f:
83:db:3e:b6:cb:f5:43:26:a7:de:d5:f9:9d:33:89:
ec:a4:cd:47:05:8e:68:4d:c0:03:21:c5:d0:5d:ee:
90:e7:84:6d:7b:67:91:04:1e:d9:5c:65:27:aa:ab:
ce:e4:61:c1:96:9b:98:27:00:d1:0a:d6:11:41:fe:
9d:1b:50:9e:9c:c1:c6:1d:a0:71:8e:71:d9:d3:d2:
7b:c6:0f:41:11:4b:00:af:b0:c0:04:41:23:1b:a2:
ad:3b:ee:e2:31:35:4a:a7:24:98:48:d7:1f:8c:e5:
f5:ca:b7:45:c5:66:4b:e9:f1:68:3f:4e:81:f8:cf:
50:95:c5:ef:7b:a5:35:80:c1:6c:23:e9:42:4f:c0:
4c:22:55:66:57:92:01:28:25:15:62:9c:fa:22:61:
b0:da:43:5b:02:1d:10:55:98:a2:5d:74:57:62:45:
bc:f4:d4:02:24:a6:fa:c6:04:b9:99:73:b7:2e:d3:
bd:41:fe:b4:46:ca:0e:12:24:a2:69:a3:63:cc:02:
6c:b4:46:64:f5:fb:83:03:ec:e7:d2:57:d1:3f:92:
ba:8c:6b:91:5d:15:8e:5e:82:d6:d8:15:b2:11:2b:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:48:B9:EF:7D:3B:9E:4E:22:F4:9A:7B:21:E5:6F:24:89:48:93
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:29:50:ae:74:d6:97:c2:4b:c3:3c:69:08:bf:b4:44:29:
c2:6a:4b:8d:7f:d7:da:20:e4:48:a9:3c:49:fd:67:69:cc:f2:
3f:09:ba:54:ee:a3:89:14:ab:66:56:a4:4f:ff:cd:d7:aa:62:
b5:c6:9f:48:d9:96:dc:de:d5:bc:ce:19:fe:75:42:23:8f:2b:
6c:f9:4c:66:7d:29:d3:f0:79:4e:4a:68:19:45:31:f1:d9:1d:
bb:58:6e:68:54:2e:97:c7:ec:eb:b6:4e:2d:3e:e8:a1:9b:a0:
e6:b9:af:47:8c:38:c2:4f:c3:ac:62:56:7f:2b:2e:4f:e4:38:
db:2c:d3:86:1a:5e:d3:0d:55:8f:95:a2:c7:4a:6b:af:6e:73:
ad:68:1a:aa:9f:c5:5c:c3:29:0a:21:62:7b:27:63:dd:a4:c1:
6f:89:23:07:91:c0:92:c9:a3:bc:eb:11:3b:ee:db:5e:99:ef:
47:b4:74:4e:30:b7:db:37:b5:e1:5c:14:d6:ed:fc:8d:a8:1b:
0c:aa:e4:93:54:fc:10:75:8e:b2:4f:8b:77:99:e6:57:3d:52:
1e:55:66:73:07:cf:dd:77:19:35:61:38:9a:2d:9e:19:f3:4e:
48:be:5e:48:49:e5:15:0f:e3:6e:cc:47:b3:c4:d7:e1:c9:55:
28:cd:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:46:00 2026 by rpki-client