Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: SctBObSLAf8ToDB9pTKj2iSwKrkdDYd8W0xIXNc+w3Q=
Subject key identifier: 2B:1F:25:61:59:50:82:3F:AB:5B:6D:54:11:DB:39:B0:12:12:1D:5C
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019F946DC7FA88FF3D25E1EB4A094DE8877B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0EB2
Signing time: Fri 24 Jul 2026 14:00:50 +0000
Manifest this update: Fri 24 Jul 2026 14:00:50 +0000
Manifest next update: Sat 25 Jul 2026 14:00:50 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: DapGmi+Shaf0kfx2scZj7u58X8PvXaNW94xYkWLppz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:c7:fa:88:ff:3d:25:e1:eb:4a:09:4d:e8:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jul 24 14:00:50 2026 GMT
Not After : Jul 25 14:00:50 2026 GMT
Subject: CN=2b1f25615950823fab5b6d5411db39b012121d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:25:90:77:ad:c8:b1:2a:37:20:51:c4:3e:
18:86:ae:42:bd:a0:92:ea:90:11:e5:d4:99:74:41:
9a:88:a5:7d:70:28:20:d8:b7:56:f4:11:d7:d4:74:
38:9a:df:10:90:49:a3:fa:d3:9e:03:55:74:24:d3:
30:70:6d:34:24:18:dc:15:1b:fd:98:84:e1:8b:cd:
b7:68:94:13:2c:bf:5c:b8:dc:dc:34:db:e2:b2:29:
f9:52:76:b8:9a:93:d4:ac:12:da:2d:fc:5b:54:2d:
7a:d5:07:d5:5c:e8:ee:7e:68:08:fb:6b:01:c1:f0:
20:7d:b9:96:87:0d:e1:e3:64:6d:52:ba:ec:f2:20:
b8:0b:d2:89:6f:cd:ba:51:f1:f8:01:b2:be:23:fc:
4c:ef:85:f1:bc:d2:b1:9e:56:4f:9d:27:0b:3b:4e:
a6:23:93:df:dd:ee:1d:09:98:9b:cf:a8:69:51:36:
13:62:5a:ca:d8:ee:4b:fb:60:1f:44:ff:9a:f6:1d:
41:8e:fc:19:e1:c7:b8:27:3b:68:14:97:1a:71:fc:
93:f1:cb:4a:0a:bb:fb:b3:7a:1b:d4:a4:e5:01:10:
cf:b3:c7:1c:f4:9b:0d:f6:56:12:67:bb:7f:86:37:
20:d1:70:74:f3:68:2f:1a:9c:ec:3e:0b:58:fb:48:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:25:61:59:50:82:3F:AB:5B:6D:54:11:DB:39:B0:12:12:1D:5C
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:29:b3:1a:8d:00:2d:25:8f:57:9b:2e:94:7c:fe:4e:4d:ac:
e2:15:36:79:99:e4:4c:d1:a2:96:99:cd:62:0e:96:ca:5f:38:
fb:61:84:1e:e9:09:f1:27:9c:94:e2:02:6b:4a:ff:3a:fa:cf:
1c:b8:d5:80:d4:2d:e0:0b:81:d3:c7:87:0e:26:05:21:5e:f8:
a4:9d:fd:a5:5a:0b:40:a4:72:0a:df:c6:d4:28:d1:09:98:96:
bb:50:cd:dc:74:91:79:86:85:de:08:b1:4e:3c:b8:a4:8c:85:
02:f2:bb:c0:bc:4b:7b:0f:8c:63:a7:ac:b1:3b:37:cc:5f:8a:
35:1d:8f:d5:7d:33:14:1e:ac:5a:c4:90:d6:84:a9:21:ec:21:
7a:6f:17:42:78:15:81:2c:50:0b:c7:a1:af:f6:9b:a7:32:5a:
e3:b5:a8:2b:fd:45:43:9a:e7:c9:61:54:9e:f2:f3:56:46:c8:
59:a8:37:a8:fa:72:ac:96:d0:a8:44:19:2f:61:03:2b:1b:ec:
49:5b:23:14:49:1c:69:c7:17:7c:39:c3:17:96:ad:19:54:97:
82:76:3a:bf:e4:4b:5b:a9:70:a5:60:af:33:af:2c:40:2c:eb:
e6:b8:00:7c:6d:c4:4a:39:33:d2:24:c2:79:ce:b1:66:58:17:
c8:d3:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:44 2026 by rpki-client