Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 5Athtcupc6EUE4HsJa3lvAUeJLEXMDLDzroOGTXxq2Q=
Subject key identifier: BF:00:0A:3B:E2:27:12:0B:1F:AC:A3:A5:57:8D:99:CF:F8:C7:6A:25
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 019D25F1CF4485D01D4B8480D5A1695D7C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 102D
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: 9jVIyUNC_jtqSz5QgzPFxhRriJU.roa (hash: IMd9gg9EGAXTuUYDKOVGT5KovaOc0OoHmBxOdLPHyxE=)
2: IK8rxF0fNpLSKD9Dqm0lXn3gA78.roa (hash: 727Jxwhi3j4ZaKKaAIMgbayUGpDpki6NjCGsamcTESU=)
3: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: vq4/5yoAhjoGCoNHKVE1IP3HbS4/xiz+unCU9Ew3Ofo=)
4: oRyAm1tY1PPV2HUhoPE8LGygZp8.roa (hash: v2TjvG71n61mmtBwzf8Bvh8DYEC21zypAmmL8cNAlmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cf:44:85:d0:1d:4b:84:80:d5:a1:69:5d:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=bf000a3be227120b1faca3a5578d99cff8c76a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:f2:41:77:eb:f4:29:03:87:e6:68:fc:94:
a2:2a:8e:56:67:f0:40:dc:4d:46:f5:fd:7b:51:90:
df:ce:be:45:fc:21:39:c8:3b:5f:79:a5:ba:3e:ca:
8c:6b:41:bd:bf:ab:2c:f7:4f:97:d6:7c:f3:ef:3d:
36:9b:e0:1a:5e:05:48:e6:07:94:d1:76:61:8a:40:
00:a8:28:59:1f:bd:21:3b:f8:c0:fd:23:eb:5b:54:
c8:18:6f:0e:38:04:ee:27:ef:86:88:de:62:74:12:
05:27:e6:3d:1f:a9:41:47:65:d2:53:52:13:2b:a8:
ad:40:f7:11:9a:b6:11:45:5e:2d:64:b1:d2:ac:4b:
8e:61:8f:b5:dd:dd:5f:0b:b9:0d:d3:08:53:a0:5b:
ef:6b:ba:1c:1f:6e:c5:c7:17:fd:37:08:d9:4e:9a:
bb:26:31:8f:a0:c1:d6:6e:da:54:94:68:8d:f4:02:
ce:14:71:9f:8f:af:3b:e4:12:35:46:f9:e8:eb:57:
76:18:f2:79:92:d8:32:5d:a8:b7:6e:7b:60:7d:e1:
bf:06:e3:af:70:45:f7:ce:b4:d4:a6:3d:98:a9:fe:
22:c1:36:fc:8a:b0:7b:72:52:4e:05:fa:39:68:ac:
c9:b8:82:bf:f5:2e:8f:fe:d8:78:7c:02:f2:b8:ae:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:0A:3B:E2:27:12:0B:1F:AC:A3:A5:57:8D:99:CF:F8:C7:6A:25
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:10:99:ae:f4:24:ad:1f:70:29:2a:ca:06:c3:e0:77:31:
78:d9:d6:3d:17:70:4b:8d:7e:04:92:df:29:47:b4:8f:e2:b7:
19:91:c8:6b:2a:59:97:03:4a:ef:e0:4a:d7:cc:56:89:fe:a0:
d8:23:91:77:85:a2:09:9f:29:7d:f6:ea:16:99:f2:4c:f6:0c:
40:55:18:59:8d:1f:f1:b3:e1:8f:5b:45:30:32:50:4d:5d:71:
98:27:07:43:6c:5c:7b:bc:42:8a:d3:6a:0e:a8:90:8f:4e:d3:
fe:31:be:75:4d:aa:9f:be:92:c3:f8:ff:d3:1c:7d:40:8e:20:
44:6b:ac:52:92:90:e7:d5:2f:a2:06:d9:bf:11:b9:4f:9f:62:
a3:1e:a7:a0:27:68:d3:59:0a:94:01:42:27:7e:b6:78:e5:9f:
b5:eb:ac:73:d1:da:9e:c7:78:28:27:06:6a:5a:e3:d2:8a:c5:
8e:63:82:b0:96:c2:a4:c4:7f:5c:f2:3a:a9:e1:cf:4c:0b:5d:
17:fd:ca:c0:23:66:05:4d:1d:29:93:73:0f:57:0b:a0:ca:a5:
0b:a6:b5:6b:b9:16:27:05:ee:4f:6c:37:d4:8c:b6:24:d1:38:
f8:85:3d:77:39:0e:2a:1e:5a:97:82:97:da:cd:13:99:c2:69:
fc:43:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:13 2026 by rpki-client