Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: gMBCsXQLpPgj0LQgeBXzUG0pF/QEzYxBJC6WBcOeMEo=
Subject key identifier: D7:84:95:83:12:88:B2:51:58:F3:76:E7:5D:0E:1E:FB:02:4C:94:87
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019CAAFD3E4C80442AE1291223ABDBF37C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0D30
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: wq2Pjp7TrfHgDySDmFhUB5dQrTZlz1LZLESL8lWWhdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3e:4c:80:44:2a:e1:29:12:23:ab:db:f3:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=d78495831288b25158f376e75d0e1efb024c9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:04:ef:25:0b:20:26:e1:8f:a9:b6:66:d0:
ac:c3:42:5b:3d:62:ed:d3:ad:9d:25:3b:bf:9e:99:
60:7c:d9:17:ab:dc:2c:9c:99:6c:f9:74:88:8b:ee:
8f:53:77:5c:6e:83:f1:16:56:3b:5d:bc:e4:7b:29:
0e:4a:ed:61:9c:f7:f6:9f:46:1b:a0:c1:08:fd:8e:
86:a5:17:05:a9:86:36:db:a7:31:09:e4:a1:e9:ae:
54:6e:62:b5:15:2c:78:1f:a3:8f:37:a3:71:4a:04:
a8:07:fc:20:08:80:cd:35:20:fb:f0:95:82:7b:4e:
74:ea:4f:ca:3b:76:50:96:c4:e7:11:50:7c:59:a8:
16:fa:be:2f:9d:fa:a8:9f:f0:93:b3:44:65:f5:b5:
06:40:c2:0c:79:01:d3:27:d8:5c:0f:99:13:74:4c:
7d:67:69:ff:ed:9f:5a:7f:48:b1:83:74:41:52:a6:
3c:41:48:5c:5a:a7:96:35:07:cb:4f:6b:15:aa:a9:
38:3a:1d:0d:9b:1e:24:7b:37:b7:7d:d3:e6:94:29:
de:c2:fe:b7:42:3e:73:ae:8b:56:ff:e2:01:b9:7c:
21:ff:39:49:0f:15:a6:9a:ae:de:57:a7:98:c2:df:
d8:91:3c:43:ad:95:35:d0:ee:f5:70:47:47:dd:52:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:95:83:12:88:B2:51:58:F3:76:E7:5D:0E:1E:FB:02:4C:94:87
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:4d:72:9e:88:20:50:19:9a:9c:6e:7a:41:a1:47:4b:79:
a7:75:e7:e6:52:27:d9:9b:84:1f:f5:e1:4f:85:13:4c:9e:70:
a3:94:a0:0f:c4:7f:5c:f0:ed:e4:78:bd:f9:cc:e2:88:03:1b:
a5:45:17:a5:99:69:68:06:12:25:d7:0e:dc:a8:a5:61:9a:49:
49:c4:6a:7e:d6:41:9f:09:7e:a3:b7:89:f8:2c:6d:20:19:74:
a6:70:28:f2:8b:e0:59:4b:94:32:9e:b7:5f:92:a0:49:d6:0f:
51:b9:47:0f:0c:b5:b8:84:a7:a4:3a:5e:81:ae:20:85:aa:72:
f8:13:e8:59:40:73:e5:c4:9b:e1:68:08:fd:80:98:d5:c3:92:
95:aa:31:1c:f6:ac:4c:f4:30:df:ae:43:2b:bf:8d:d6:01:33:
df:c7:dd:18:67:ac:fe:07:fb:c5:26:54:8c:64:ca:65:d2:b8:
db:5a:12:3f:8d:75:15:ab:03:a1:f9:1e:28:98:5b:e2:8c:e6:
72:f9:eb:96:68:2b:bb:8f:42:e1:79:5f:c9:86:c7:6f:35:af:
68:57:8b:86:2e:86:a2:40:fa:71:83:63:a8:00:35:0f:f8:59:
0a:bc:3f:d5:70:0b:10:14:07:8f:79:88:e0:67:6e:f3:8a:b4:
2e:52:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:45 2026 by rpki-client