Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: If4iXm0ogVVm0WndYYYlAOoczVzNKWj5VdmmNwxG8Hc=
Subject key identifier: 22:FC:95:EF:58:A0:AF:15:A5:CE:6B:39:8A:B0:A8:FA:BA:06:AD:28
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01A0FD903F51683EF0ECB82809E8211467DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0F6D
Signing time: Fri 02 Oct 2026 17:01:23 +0000
Manifest this update: Fri 02 Oct 2026 17:01:23 +0000
Manifest next update: Sat 03 Oct 2026 17:01:23 +0000
Files and hashes: 1: 3Xdwalw9tG5-0AU6cIbrmwzmFpU.roa (hash: lXBSvWP0c1DLJ/X3Oyc8oTDxP2nv0ID2ImtmEhdpGbE=)
2: Txh89yPjR6ydaZe76t-4uzulsaE.roa (hash: wsaPFra5sogbcbp0OAAr/F2nwvL7a15+JUCBMqiVROI=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: v9iu+gcEBFtvKVRAvy09LpC/CGfuLoXeSN1FmGb2w58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:90:3f:51:68:3e:f0:ec:b8:28:09:e8:21:14:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Oct 2 17:01:23 2026 GMT
Not After : Oct 3 17:01:23 2026 GMT
Subject: CN=22fc95ef58a0af15a5ce6b398ab0a8faba06ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:45:db:62:7c:fe:73:86:aa:b0:a9:69:73:
f9:e8:53:4e:5f:f8:6e:40:b9:d9:28:41:7a:10:48:
69:52:6b:ff:52:fb:81:7d:b5:7a:10:eb:a8:7e:48:
c5:eb:2c:bb:1b:28:49:67:51:2c:00:d0:ec:da:fc:
40:89:65:3e:cb:ca:57:ba:e5:29:93:73:4b:ca:e1:
f8:51:1d:6d:f6:26:9f:8d:0f:12:0d:ba:33:01:a0:
b0:4c:2d:c1:1a:e5:bf:8e:76:3e:5d:34:dc:7f:a3:
1a:7f:b8:82:5d:be:33:36:3d:b0:7a:5c:5e:23:97:
ff:eb:70:5a:15:69:f0:81:78:f9:96:13:c5:13:44:
06:f7:d0:30:59:55:b9:d0:12:0e:42:60:18:89:90:
89:c2:18:9c:45:3c:66:f7:f4:3b:dc:a2:fc:a3:53:
21:a5:01:a0:a3:ed:43:95:b4:e7:bc:f8:f3:14:4b:
13:20:b5:ea:31:7e:0d:75:84:df:a6:e5:ac:12:19:
b2:64:c9:3b:22:dc:d7:0b:e2:b2:35:d8:af:10:2c:
77:a2:b1:95:82:97:e3:a4:25:1f:2d:96:1c:15:41:
1c:24:ca:0f:70:24:77:29:e0:4b:29:93:f4:95:7e:
ae:ca:9c:bb:21:7e:3f:82:61:36:17:96:47:f8:13:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FC:95:EF:58:A0:AF:15:A5:CE:6B:39:8A:B0:A8:FA:BA:06:AD:28
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:ce:26:9d:99:27:f5:9a:4f:92:e7:c2:af:b5:7c:9b:fc:
30:66:be:16:b1:98:3a:c3:97:7d:41:50:08:bf:8e:5d:75:c9:
fa:b9:ca:e2:ca:f4:7d:ac:f3:4b:03:51:4f:86:96:70:3a:ab:
39:ef:4c:22:97:67:53:9e:fa:f5:9d:eb:78:a9:3f:37:f6:83:
7f:d4:ea:2c:be:2f:f2:2a:c8:78:27:9a:b9:86:f6:e1:0c:8a:
1d:de:10:d5:e3:ca:6b:77:ec:49:ef:b0:00:20:e6:29:c0:3e:
5e:7e:75:2a:97:3b:dd:b5:67:b3:bc:88:11:2e:90:51:3d:ee:
78:d9:63:a3:ae:27:27:3c:98:5c:c2:bb:21:e5:85:d3:90:6c:
b3:6a:18:46:f1:f8:6c:96:36:9d:fa:20:96:dd:59:76:2f:97:
33:3e:e6:b8:94:6e:df:df:42:eb:b6:1f:03:04:1f:25:49:8d:
02:89:f7:f6:07:cf:ec:95:4f:31:b6:65:18:0a:9a:0b:4f:2d:
d0:38:8c:d3:10:39:75:39:f9:1c:0f:f6:c0:56:69:2a:d0:89:
70:b7:8d:12:f4:5e:39:53:ca:2f:de:95:ca:3c:a6:a2:db:10:
d4:cd:18:8e:85:cd:42:37:5a:fa:3f:b0:0c:89:9e:dc:7b:76:
e5:11:32:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9kD9RaD7w7LgoCeghFGfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjYxMDAyMTcwMTIzWhcNMjYxMDAzMTcwMTIzWjAzMTEwLwYDVQQD
EygyMmZjOTVlZjU4YTBhZjE1YTVjZTZiMzk4YWIwYThmYWJhMDZhZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLNF22J8/nOGqrCpaXP56FNOX/hu
QLnZKEF6EEhpUmv/UvuBfbV6EOuofkjF6yy7GyhJZ1EsANDs2vxAiWU+y8pXuuUp
k3NLyuH4UR1t9iafjQ8SDbozAaCwTC3BGuW/jnY+XTTcf6Maf7iCXb4zNj2welxe
I5f/63BaFWnwgXj5lhPFE0QG99AwWVW50BIOQmAYiZCJwhicRTxm9/Q73KL8o1Mh
pQGgo+1DlbTnvPjzFEsTILXqMX4NdYTfpuWsEhmyZMk7ItzXC+KyNdivECx3orGV
gpfjpCUfLZYcFUEcJMoPcCR3KeBLKZP0lX6uypy7IX4/gmE2F5ZH+BOUBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL8le9YoK8Vpc5rOYqwqPq6Bq0oMB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrXOJp2Z
J/WaT5Lnwq+1fJv8MGa+FrGYOsOXfUFQCL+OXXXJ+rnK4sr0fazzSwNRT4aWcDqr
Oe9MIpdnU5769Z3reKk/N/aDf9TqLL4v8irIeCeauYb24QyKHd4Q1ePKa3fsSe+w
ACDmKcA+Xn51Kpc73bVns7yIES6QUT3ueNljo64nJzyYXMK7IeWF05Bss2oYRvH4
bJY2nfoglt1Zdi+XMz7muJRu399C67YfAwQfJUmNAon39gfP7JVPMbZlGAqaC08t
0DiM0xA5dTn5HA/2wFZpKtCJcLeNEvReOVPKL96VyjymotsQ1M0YjoXNQjda+j+w
DIme3Ht25REyUA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 21:50:12 2026 by rpki-client