Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier: Dh9t86XcA5H+YYZozzncEP9yJfAjwT1XczMzcCPe26g=
Subject key identifier: 96:0B:42:F1:3A:AA:4A:B8:D3:0B:2C:0D:E5:F0:D4:1C:5D:EF:61:30
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 019E1D5942F1DA14533601CEDD5F721D7BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number: 0A5D
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=)
2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: lxRyx350DjbSAoLCtbCYSg2BXZ9f5WAE/c3zky1iM2g=)
3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=)
4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:42:f1:da:14:53:36:01:ce:dd:5f:72:1d:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=960b42f13aaa4ab8d30b2c0de5f0d41c5def6130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:f3:e8:60:d0:70:eb:2c:31:08:4c:1f:bc:
28:c7:f0:9a:33:0c:bf:6f:0d:12:53:43:36:4f:09:
5e:c9:34:d6:ca:28:e4:99:44:cc:e1:f6:69:34:64:
ca:7b:29:86:42:61:92:7b:d3:73:b9:c9:57:6f:7c:
42:f6:e0:ba:76:60:ed:cf:f4:49:da:57:26:01:29:
df:7d:95:20:13:f8:67:6c:5b:4f:62:73:82:66:97:
3a:3a:e4:be:8f:f3:cd:a5:d1:ae:8a:d6:bf:25:13:
b7:ab:64:54:4e:f2:77:28:95:27:f3:b0:78:c1:b1:
55:39:2e:38:cd:7b:54:5a:85:90:38:d7:e8:d0:05:
ee:37:55:ad:05:0e:59:48:84:2e:01:fc:4e:0f:e8:
be:95:0f:af:f3:6d:fa:d2:57:66:df:07:25:57:84:
ea:48:a5:66:d8:e9:d6:60:df:e6:80:2f:15:77:52:
88:d7:fa:d3:1c:ce:f7:77:d2:89:f9:ae:d0:05:3c:
d9:4c:20:fb:6e:68:49:77:ed:20:6b:d2:fd:26:36:
b5:da:3b:f9:0f:99:89:16:ee:45:ea:db:7b:6a:80:
a7:ab:ce:02:89:e4:3b:1a:e0:73:b5:cd:c9:d0:5d:
47:18:c1:bb:2d:c1:62:82:5b:f2:64:b1:e6:10:69:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:42:F1:3A:AA:4A:B8:D3:0B:2C:0D:E5:F0:D4:1C:5D:EF:61:30
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:c6:14:0f:e9:cf:2d:3a:24:7f:a2:50:ab:76:fa:36:95:
9c:be:2d:e1:71:a1:71:a2:f7:93:9d:be:6a:94:aa:63:d1:53:
d2:72:8f:62:f4:47:51:5a:5d:9c:cf:b6:86:9c:d2:6c:f9:d3:
18:a4:30:eb:a8:cf:28:fb:5e:af:a9:b0:78:46:5e:15:95:90:
87:23:9f:ab:dc:83:39:ff:60:3e:bc:b1:e8:57:ea:80:11:7f:
5e:75:f6:0e:4e:aa:4c:29:92:c3:ea:d8:a2:15:6b:85:1d:bf:
e3:43:ec:c8:e8:71:9e:2e:d1:4d:4a:68:28:12:fc:d1:c4:cb:
64:1f:88:a6:c6:44:a8:45:29:81:b8:c9:c4:17:5e:ac:b4:dd:
4e:72:0e:5b:fc:f2:4e:89:f3:f6:3a:d9:1c:b0:9e:96:b6:f9:
d9:8c:4a:ad:b8:3d:5c:bd:6f:4e:cf:39:94:ee:a8:d3:c3:f4:
b5:86:fd:40:95:93:69:7f:a9:10:b7:b1:a6:5e:1c:b5:42:cd:
16:a5:c5:0c:c6:45:6f:c3:6c:b6:5e:f9:33:db:ab:db:a2:51:
ac:f3:23:a7:5b:03:ff:26:c1:30:5e:13:3c:60:39:86:d6:e8:
6b:d9:b8:19:20:ab:e2:35:35:5e:33:6d:40:8e:a0:13:31:dc:
3b:71:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:10 2026 by rpki-client