Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: jcEQ1NKzPvybQ0b+N6u02g9IprdYXB9yX5xdqKEBiPs=
Subject key identifier: 03:67:68:B0:34:C1:17:68:AF:D0:AE:34:62:0F:FB:31:62:06:94:6A
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019D9A74F0DECF3EF1000812048A8FEFFF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0DAC
Signing time: Fri 17 Apr 2026 08:00:48 +0000
Manifest this update: Fri 17 Apr 2026 08:00:48 +0000
Manifest next update: Sat 18 Apr 2026 08:00:48 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: v4WPNWY9PRKUAD8FHTC2NzEYTZzcls+LDD0aV1MbEIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f0:de:cf:3e:f1:00:08:12:04:8a:8f:ef:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Apr 17 08:00:48 2026 GMT
Not After : Apr 18 08:00:48 2026 GMT
Subject: CN=036768b034c11768afd0ae34620ffb316206946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:a2:73:2c:f3:2c:f0:15:83:b3:52:fa:dd:
d6:d1:fe:69:f8:76:69:b1:96:4f:98:cd:91:cf:fe:
74:6c:56:35:9a:36:70:ac:e1:dc:97:f8:60:b0:6e:
03:32:10:c2:4c:62:74:b4:2b:cb:a2:f2:57:b2:96:
e1:15:a0:3b:09:49:90:77:37:e5:3c:10:6c:fe:5a:
e5:6a:22:0b:2c:0e:3d:ba:95:8b:b0:b2:7f:d6:2d:
ae:53:a8:9d:47:5c:61:08:f6:6d:b3:69:12:ca:0f:
c2:c4:f9:c3:1a:9d:e5:de:25:15:32:e2:89:af:21:
5a:9b:86:f7:5d:e3:db:b7:f3:62:95:96:fc:c4:75:
2e:d4:cf:04:47:9d:5e:de:2d:2d:c4:0f:b9:00:a4:
d9:2f:89:fb:4f:94:95:a3:27:7e:13:91:71:0a:03:
b5:8b:0e:30:cb:c2:f4:4b:b8:ec:41:85:06:d1:c4:
9e:b8:5c:fe:ff:ec:f3:2d:68:49:14:ba:58:7f:da:
37:9b:c4:29:83:fc:37:b8:dd:be:df:4d:f5:86:a9:
28:02:eb:6d:25:2e:95:88:1d:f9:5c:97:fd:eb:69:
36:85:c6:dc:6f:1b:ed:9d:12:ec:f7:63:7d:f8:66:
56:58:06:3e:b2:28:1e:c3:b6:37:04:8d:44:c5:64:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:68:B0:34:C1:17:68:AF:D0:AE:34:62:0F:FB:31:62:06:94:6A
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d4:89:8a:04:62:64:56:21:c5:47:bd:34:d2:3f:44:f1:ca:
7b:1f:a2:51:bf:67:a9:b1:c1:86:25:68:2b:8b:cb:64:64:d8:
a8:a6:3f:8d:09:48:59:b8:bc:e7:9f:ab:19:eb:ee:2f:f9:1b:
e3:8e:b2:b3:ff:eb:0b:1f:2a:84:a7:d0:dc:2f:ef:b6:d1:72:
97:65:e7:79:2c:62:d0:5f:4b:7f:3b:eb:b6:80:c1:a6:87:65:
77:d2:6d:ba:dd:9c:be:49:bf:d6:22:66:d4:44:a2:48:f3:f9:
b4:6e:ee:81:f6:bf:14:ae:0a:11:5e:bf:63:da:52:f1:ee:33:
2b:8c:04:71:a3:bf:51:2e:97:3a:bc:38:8b:d7:f3:64:d3:18:
db:12:e0:5d:f7:5d:15:27:cd:b8:b7:40:ff:59:81:1e:24:8e:
30:e5:68:82:0d:03:fd:9f:9e:ea:cf:d0:33:a2:8a:8e:84:8f:
5b:77:ca:bb:23:e3:79:e8:bf:2d:6d:e3:b3:3b:1f:f9:4e:9f:
4a:9e:b9:94:8d:b7:33:aa:bf:35:59:c8:8b:d3:b8:d7:7c:72:
a7:35:c1:97:a0:ca:bb:99:14:bd:33:a4:8d:e4:17:8d:4a:81:
6f:37:00:5f:9b:fc:b5:93:90:37:4c:c9:bf:c2:38:3f:d3:a2:
60:05:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:52 2026 by rpki-client