Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: Q1E/w+JYLGd1VhB9++Khbxc36reYM7H1vTtnVW6QLu4=
Subject key identifier: 53:BD:F7:CD:03:03:3C:2F:57:8B:9E:2A:87:9B:82:23:F6:D7:D9:30
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019D27726A890A94E7CD64D192B3F4925155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 04FF
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: /lveMX4da4d+itWV9h1OLwE2Pf8vIpFpdnuPaj4zshM=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6a:89:0a:94:e7:cd:64:d1:92:b3:f4:92:51:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=53bdf7cd03033c2f578b9e2a879b8223f6d7d930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:04:88:ae:b6:7e:0d:33:78:3d:cc:6c:b9:
99:3c:b9:a3:62:3f:88:9c:82:91:21:ec:60:7f:c8:
e1:70:64:e1:a6:22:be:02:d9:db:a9:40:f2:10:08:
16:90:cf:59:02:90:e8:0e:2f:fb:5f:c9:96:d3:8c:
fa:56:f9:df:50:03:73:10:62:a2:b2:98:fd:a2:ab:
a1:9d:35:d7:41:e0:a5:97:42:cc:c0:0e:b8:2a:b3:
80:05:bc:70:c2:df:6e:65:7e:22:53:37:5f:a9:41:
ee:e9:1f:21:8e:6a:95:17:ce:6b:d2:66:37:c6:81:
b1:66:6e:ce:4b:19:17:d1:85:68:5b:b2:39:c3:29:
c5:06:fc:07:bf:ae:ae:69:be:0f:13:13:ec:37:4c:
72:19:bc:23:94:74:9c:47:1f:52:5f:f7:91:02:35:
5d:80:e7:df:b7:66:91:e5:53:1b:04:e5:fc:9e:04:
dc:c8:00:7a:dd:05:76:50:19:30:f0:47:e0:2f:d3:
0c:1d:a5:8e:8e:a3:e6:e9:fa:82:4c:e3:5f:85:6f:
05:ed:e9:7b:b9:93:45:67:ed:37:55:6f:ac:40:db:
f5:42:84:b0:fc:28:70:96:27:c9:cc:d6:b2:36:98:
8d:99:dc:89:eb:a9:e8:c8:6b:b5:d9:56:7f:13:75:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BD:F7:CD:03:03:3C:2F:57:8B:9E:2A:87:9B:82:23:F6:D7:D9:30
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:af:1d:12:3d:ed:e8:5b:1d:cc:79:04:d1:2e:10:1c:02:8a:
9e:77:10:88:2d:c3:ed:f5:e0:04:96:6a:3d:fd:e5:a6:7c:ee:
98:c4:fd:99:eb:2a:4f:7c:68:44:44:e4:62:e4:a1:80:23:ec:
da:dd:5a:ed:ff:b7:fa:f8:7c:5c:4a:9c:e9:45:c5:3b:ea:c1:
b0:8d:e4:12:fd:8a:2c:6b:b2:8b:95:ea:01:f5:da:4a:81:4f:
b5:af:d3:67:0b:68:56:3a:6a:ed:77:1e:45:25:de:66:ef:d8:
2e:12:3e:6e:77:fc:87:23:c3:4f:0a:56:d2:96:a8:41:6a:be:
23:db:b5:2d:3f:22:c1:6a:d0:9b:51:52:ae:84:10:84:42:58:
81:93:ad:7e:c8:a3:11:c0:2c:3b:c6:5d:b3:cf:d1:bc:0c:13:
a2:f6:98:c7:d0:76:4b:c1:0b:63:68:35:c4:0a:15:8d:79:24:
c6:23:0c:2f:60:b9:e8:4c:db:85:f0:6a:ee:82:c8:f4:7a:10:
10:6d:8e:c6:d7:5b:43:d9:90:df:24:6b:ab:4c:1a:ff:7d:60:
0f:31:d7:4c:19:23:0a:91:71:17:47:f3:6b:dc:72:bf:af:85:
81:f7:cc:4e:59:ac:83:0c:98:a6:59:f5:42:32:82:24:c8:48:
36:7a:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:18 2026 by rpki-client