Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: V87T6QzBEIFUBQ7rC0zspNwlqVAf3loQQcFtaGEyWvA=
Subject key identifier: A3:2D:BC:1C:D7:31:89:2E:53:7E:82:B1:79:43:4F:2A:29:F7:6F:EB
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019D29610DABB981406A0E3F109C16E923C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0500
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: SRqUeRvlyDNklGDycXlxfrg2dXH9PdfWwFHGpSyI4i4=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0d:ab:b9:81:40:6a:0e:3f:10:9c:16:e9:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=a32dbc1cd731892e537e82b179434f2a29f76feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:76:0b:bc:3e:d0:91:00:c4:17:0c:35:b7:
a3:19:36:38:34:42:18:97:68:94:62:4c:e5:ad:f7:
95:4e:87:d2:da:08:a9:8f:a9:b8:86:da:c4:e1:f4:
2c:8d:b1:ea:db:70:67:8e:d4:23:50:94:7e:92:c5:
90:81:bb:ac:81:0b:6e:da:85:ad:a2:af:23:8e:27:
cd:23:79:dc:b7:09:d8:3e:ac:17:8d:6a:73:ff:0f:
65:85:84:9a:d4:1d:28:f9:3e:8b:4e:b2:2c:e2:12:
82:85:b0:ff:c7:95:12:d7:b3:42:ed:5c:ba:8a:83:
99:7b:2e:d4:06:37:c4:3d:0f:e0:0f:cc:9b:92:c1:
16:bd:e0:a8:d2:bd:2b:df:d2:b9:2f:7d:df:ef:5d:
2d:4a:83:65:83:4c:d5:e5:40:7b:1b:3f:0c:15:59:
1e:03:a7:c0:9d:42:b7:75:87:6f:34:a7:b2:ec:f6:
e3:55:61:d1:c7:18:08:5f:de:67:e1:48:d2:34:55:
37:d1:32:74:d5:e8:f1:47:ae:56:17:88:e7:e7:3d:
bc:72:b1:4c:1d:75:a7:0a:11:b5:c0:b6:ea:9f:39:
44:44:2c:f7:78:ac:f6:ec:c1:97:3a:58:9a:f9:25:
7e:3e:32:9f:dd:0e:e5:13:a3:27:cf:89:fd:75:79:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:BC:1C:D7:31:89:2E:53:7E:82:B1:79:43:4F:2A:29:F7:6F:EB
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:05:03:bf:13:d7:a5:5f:c2:92:23:28:fd:ab:87:1c:4a:1d:
45:5e:1c:18:47:dd:52:86:79:d0:2e:2a:ff:77:54:a3:12:38:
03:54:94:0c:2f:50:8e:90:ca:00:8a:67:63:34:d3:af:43:ef:
14:0a:2a:b8:b5:d1:41:3b:57:9b:67:80:fd:77:23:9a:d9:46:
10:91:4d:a7:20:84:b2:7b:d9:06:46:7d:2a:b7:a6:7c:d8:3b:
25:ac:01:ee:58:ee:4d:16:47:4b:3f:88:4a:ae:c5:8a:8a:25:
39:a2:4f:56:17:8f:0c:00:6c:25:e0:6b:a6:fa:79:e7:01:60:
c0:b0:b7:5f:0f:3b:dd:bd:7e:49:8b:68:62:85:e3:8a:37:54:
4e:21:f4:82:10:fe:e8:fd:8f:b9:75:91:7d:54:b5:51:b9:79:
6c:e4:30:8c:41:13:61:e4:04:c6:c2:f1:14:1c:2d:e8:53:a5:
5c:17:c3:f1:67:00:6e:c7:0a:27:0c:2c:0e:fd:8f:ee:de:09:
1c:22:2b:88:71:7c:8f:48:ae:72:2a:32:1a:48:76:ed:14:23:
84:ae:73:71:bc:5d:ee:63:cc:53:3e:22:6d:69:39:7f:bb:6c:
47:13:7a:88:28:a2:9b:54:4c:d0:6d:49:be:8e:03:ee:b3:b6:
6f:a2:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:59 2026 by rpki-client