Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: Ak5+6r7JtLGMiYcb16Ysuxt+egCBRlzUsMEuZ6Mmg4k=
Subject key identifier: 18:9B:68:FD:C1:4A:FD:AA:92:44:62:32:58:20:39:DA:93:4A:E6:7F
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019F916CD9EEAA322D2DA1C35E27623B74B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 063F
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: 5+izvc217ctESWeePAjC7zTwRs7A6U+Befzg8FKSsek=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d9:ee:aa:32:2d:2d:a1:c3:5e:27:62:3b:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=189b68fdc14afdaa92446232582039da934ae67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:02:29:1a:b8:4b:f1:d6:3c:e1:e3:de:95:
5c:ea:34:a9:8b:7b:7b:e1:b0:6f:b6:91:ea:97:f8:
48:20:d6:73:4b:19:16:4a:a1:30:91:50:e5:b1:9e:
ce:fa:63:6e:f1:65:fd:91:69:96:9d:dd:1e:5a:22:
ae:ad:59:b5:43:48:b1:8c:da:c4:9d:ff:a1:9a:38:
85:ee:be:6b:85:db:8d:a9:1b:d8:91:98:da:dd:95:
3c:76:e3:7f:c6:37:42:51:20:18:f6:ce:6a:fc:60:
27:30:81:d2:fc:54:21:22:15:39:87:46:ff:7f:cb:
a8:d9:44:da:e4:22:04:d2:b2:86:c3:ce:6d:fa:b1:
6e:35:a4:ce:a3:9c:92:b4:ce:58:1d:e6:75:35:27:
7f:96:a7:e9:50:0a:c3:96:db:bc:71:70:cb:82:3e:
43:2a:d1:5d:bb:42:53:72:35:8f:c6:90:80:eb:05:
52:d9:93:b5:93:a9:9c:ad:f4:03:cb:74:64:54:df:
1d:95:89:6e:7a:9b:f2:f2:fc:24:75:cb:7f:5e:3d:
9e:f3:de:34:43:6d:c3:d1:67:c1:c1:7a:c5:37:bf:
83:4a:d4:8b:a9:b1:73:15:26:55:e1:42:e3:2b:86:
b3:2f:38:79:9c:79:88:8b:71:74:01:7c:0e:5d:aa:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:68:FD:C1:4A:FD:AA:92:44:62:32:58:20:39:DA:93:4A:E6:7F
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:11:e1:ab:59:15:f8:d2:05:c5:fe:52:c0:a3:72:c8:d6:
d7:18:57:77:86:30:9a:72:35:9e:2a:5c:a1:d4:0c:1b:7d:cc:
79:50:8d:e8:04:9b:4f:ac:68:e7:43:d6:8f:20:95:b6:d8:cc:
fc:c2:23:6e:c9:bf:86:8c:27:f0:84:69:0a:41:01:a2:45:cb:
f0:10:df:1b:67:16:e9:16:65:bc:16:11:cf:6d:62:8c:83:51:
cc:3f:72:ef:1b:36:e4:fb:3c:7f:60:24:a6:05:d5:0d:68:c8:
5d:1a:28:88:8d:1f:7b:06:b1:fa:e2:62:9e:4a:6b:df:6d:06:
e2:0d:00:b6:29:86:02:74:31:59:a5:e7:ce:7e:f9:09:45:d8:
29:df:ad:a3:08:96:dc:cf:6b:c9:ec:c6:16:68:91:63:25:cc:
70:1c:3d:b7:87:c8:10:5f:b6:40:c8:91:17:4c:a4:b5:49:65:
16:a1:8e:bf:93:37:0b:8e:33:8a:dc:b6:e2:70:c6:35:31:de:
f9:01:3b:bf:2a:7e:40:49:88:9b:0e:10:ba:13:59:88:99:fb:
7d:bc:23:01:a8:ae:4a:35:a6:e7:ca:27:db:42:db:a7:4e:b9:
5c:72:6e:e7:cc:44:3e:78:71:d6:af:af:44:a0:dc:ed:61:39:
43:f8:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:10 2026 by rpki-client