Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: w2QC45S2Qei7wz1dsvJob4ZOrrekJ10e/L1Rjt8DhWc=
Subject key identifier: 8D:B7:D4:73:F7:E3:72:EC:37:EC:62:34:55:5C:E4:CF:8B:43:11:10
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01A0E098C8BCD453718FDDFD7361F47810A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0F5E
Signing time: Sun 27 Sep 2026 02:01:44 +0000
Manifest this update: Sun 27 Sep 2026 02:01:44 +0000
Manifest next update: Mon 28 Sep 2026 02:01:44 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: yzl//9i5d9y0i7g48dPzWVjp/PunqMI4E3I3WY1Iz7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:c8:bc:d4:53:71:8f:dd:fd:73:61:f4:78:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Sep 27 02:01:44 2026 GMT
Not After : Sep 28 02:01:44 2026 GMT
Subject: CN=8db7d473f7e372ec37ec6234555ce4cf8b431110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:44:32:4d:be:67:0b:1c:bc:a6:3f:97:d2:
ac:d3:53:ab:b0:df:57:08:9a:ae:ee:19:55:8d:a5:
ab:a4:99:8d:fa:fa:93:a0:30:cf:4b:93:3e:bb:25:
0b:7e:4c:d8:63:1f:75:09:ee:84:ba:e5:5e:4b:cb:
b0:f1:52:39:94:dd:52:ea:2e:de:fc:38:f5:e8:61:
7c:f9:cc:37:12:05:59:fa:32:d5:4f:b7:21:b2:63:
30:02:a3:e5:f5:64:69:98:4a:ac:1c:6b:a1:59:86:
55:2d:68:0a:f7:98:c2:0e:8d:cc:18:a6:52:26:a5:
74:f3:c1:69:f1:6c:82:6a:8e:9a:21:49:2c:3d:9f:
31:0d:b6:5e:07:29:73:ea:f4:99:f0:2b:d4:f8:e1:
f6:ca:d2:95:c9:ff:7e:ae:19:b2:8a:f8:ce:39:99:
55:ec:2e:53:6a:fa:54:05:9b:d4:0b:49:16:ae:95:
99:97:06:94:b9:c8:c2:b6:3d:96:d1:58:89:cc:af:
04:67:e6:73:0e:d8:4d:45:9c:b6:43:35:14:4f:2e:
1c:ce:d8:a7:99:8e:b7:c5:31:83:6e:bb:d3:dd:79:
7d:78:2b:b7:a1:ca:4f:d2:72:4f:58:3b:22:32:6e:
3b:eb:c9:ef:59:bf:70:90:d5:df:c5:a9:55:b7:3a:
19:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:D4:73:F7:E3:72:EC:37:EC:62:34:55:5C:E4:CF:8B:43:11:10
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:22:8e:83:de:71:4d:7f:38:84:a4:1c:05:78:9f:0d:22:97:
8d:d5:d4:ba:23:2c:ac:54:21:01:5a:2e:21:9c:db:7a:5f:f1:
14:8d:e0:7e:6c:7b:19:bb:6a:05:a8:84:45:f7:ca:07:e3:71:
41:0e:ae:f2:25:fa:2c:bc:61:b8:14:98:43:fc:27:92:b4:9d:
59:da:bf:de:b2:54:c0:67:4d:8e:3f:ff:7c:33:c3:26:11:cc:
e1:e3:1d:83:73:e0:d1:14:38:68:24:0c:a8:d6:1b:f7:b4:18:
6c:a2:84:47:47:e9:00:ab:d0:e8:76:39:73:47:e3:01:ce:e4:
85:f3:24:78:25:e7:2f:95:f2:7c:8d:02:ca:a2:e5:04:f2:0e:
08:e0:4b:f6:98:b4:8c:42:23:93:8f:fb:38:2f:06:6c:2e:e4:
fe:bf:09:39:bc:2c:2e:71:2d:8a:b0:d8:43:c5:00:22:c9:59:
1f:ef:89:c8:2b:3a:06:a1:a8:d3:46:32:72:02:c8:03:76:ae:
fa:65:99:82:6c:91:1e:fb:31:48:51:82:2c:6c:30:76:9b:f1:
7f:9e:86:5d:79:99:55:c8:91:c5:53:4c:b4:36:20:95:f1:33:
94:e8:45:14:68:35:17:68:34:74:06:1e:7b:ee:c8:be:94:51:
de:48:6d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:38 2026 by rpki-client