Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
File: aMXwmzqQOVDz_NGyVQhu3kh26xE.mft (raw, json)
Hash identifier: tCdS9ng0lUPxoclTpGBpGNzocLZvAGAAxVQgUKQSWqk=
Subject key identifier: 00:A4:AF:FB:9F:31:CF:24:1A:56:25:16:13:37:64:51:A7:8A:C2:71
Authority key identifier: 68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
Certificate issuer: /CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Certificate serial: 01A1396DD1C2E4DEF5A8D56D00FC723001EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
Manifest number: 19F6
Signing time: Wed 14 Oct 2026 08:01:00 +0000
Manifest this update: Wed 14 Oct 2026 08:01:00 +0000
Manifest next update: Thu 15 Oct 2026 08:01:00 +0000
Files and hashes: 1: HqknbCtl1Axe3TPw1P6jDONpLVc.roa (hash: ZnfnJYZ+e5B0J97RREAVHfbNjcFtOONy33iXAx75Pag=)
2: XUSo3Kod1tZHWF61VODjOx3wrpM.roa (hash: QhGQD15vAX85W4GYn0mpZU7ZappGzzCqkYs2qWxrAto=)
3: aMXwmzqQOVDz_NGyVQhu3kh26xE.crl (hash: TWnvtkBUu2107uIsPPxvKskmT018vtos/3ZL5BbVX9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:d1:c2:e4:de:f5:a8:d5:6d:00:fc:72:30:01:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c5f09b3a903950f3fcd1b255086ede4876eb11
Validity
Not Before: Oct 14 08:01:00 2026 GMT
Not After : Oct 15 08:01:00 2026 GMT
Subject: CN=00a4affb9f31cf241a56251613376451a78ac271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:f6:73:b5:6d:ac:73:0f:66:ad:58:43:12:
d6:05:82:c0:52:cf:ad:22:bc:88:a9:90:83:39:a9:
e3:fa:33:39:2f:fc:15:6c:cb:5b:88:34:b5:8a:00:
ac:4e:95:bf:d0:0a:e2:7e:33:a5:fe:14:ae:b3:3d:
d8:fe:0c:b5:73:9c:26:ef:85:bc:a2:55:34:35:11:
1d:48:7e:b8:8b:5f:be:b7:dc:88:cf:75:45:d9:39:
b6:ae:fc:71:7e:6b:4c:bc:99:d7:39:0e:95:7e:69:
f8:ce:46:bf:1b:69:c9:42:47:75:7f:41:61:e4:e8:
af:72:ce:22:a7:25:f7:ae:89:e3:6a:c8:8f:02:be:
ef:96:4c:7f:c8:cc:c1:26:f6:0d:47:00:8c:71:5e:
7b:b3:68:be:a8:5c:10:df:34:c5:43:20:54:88:50:
78:2e:f7:11:4e:07:6e:1a:bb:00:b5:c6:c9:40:00:
dd:9a:74:6f:71:b3:a3:95:5b:68:3f:66:e6:11:93:
c8:65:c9:56:b3:2c:e4:02:43:a4:e3:09:17:bf:b8:
fe:3c:fe:af:bf:42:87:79:47:49:52:49:84:5b:0c:
f9:ab:70:8d:ca:b1:cc:a3:33:28:d5:ae:eb:2b:83:
2a:bd:cd:2b:1d:5b:ee:19:7d:31:9f:e9:b2:6f:82:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:AF:FB:9F:31:CF:24:1A:56:25:16:13:37:64:51:A7:8A:C2:71
X509v3 Authority Key Identifier:
keyid:68:C5:F0:9B:3A:90:39:50:F3:FC:D1:B2:55:08:6E:DE:48:76:EB:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMXwmzqQOVDz_NGyVQhu3kh26xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/efa18d-0907-4593-abb8-94802636bad9/1/aMXwmzqQOVDz_NGyVQhu3kh26xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f2:f2:9f:f4:17:b9:44:51:cd:e8:32:45:de:e1:7e:e7:e8:
af:1d:02:c7:88:75:3f:3b:4c:d2:5e:26:94:e1:55:6e:42:73:
c0:bf:7d:c0:a3:5f:57:0a:3b:01:b7:4f:cc:cd:b8:e4:16:86:
c3:6f:d8:5c:f8:c5:54:8f:4b:fb:d3:2d:b1:a6:e4:b0:06:e1:
f8:f2:c0:98:47:bb:14:3d:ff:d8:d6:d4:14:b7:4a:90:5f:a5:
b3:49:a2:ef:24:5d:14:3b:d7:68:9e:be:d9:18:ba:96:54:c9:
2c:85:f1:2b:01:c4:ee:1a:1b:5c:09:fd:b4:24:f5:a3:d8:83:
cd:4d:4b:e1:da:1a:b9:1a:19:2c:fc:83:b6:af:c6:de:1a:4f:
fb:46:7e:40:2e:69:9f:51:08:5a:a9:e9:05:88:f1:b4:20:93:
70:28:37:83:61:83:04:cd:aa:33:e5:38:8a:02:08:df:31:ac:
ca:71:fb:dc:07:e0:8c:91:28:04:38:e8:64:cd:b3:39:5f:d3:
f8:1d:b9:5d:5a:ec:fd:3a:ad:8f:7d:81:98:66:58:c5:1b:53:
2f:2e:b6:5a:2b:1a:98:4f:a1:60:84:ec:d4:ef:14:f4:0a:c9:
d2:d6:98:5b:97:df:26:a9:c5:e8:11:f5:c3:d2:eb:ff:5e:a0:
3f:50:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:02:54 2026 by rpki-client