Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: ATMG/zcjvlZEi78EEkuM9X55yg9EfER9Gm3v+zJeX00=
Subject key identifier: 3F:9C:FE:97:A7:89:4D:25:A4:8A:CD:4D:1F:7D:7D:AE:22:AC:08:E2
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 019E1D226A8B3B0CA9A2BFE8C5DF052E772D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 17:00:55 +0000
Manifest this update: Tue 12 May 2026 17:00:55 +0000
Manifest next update: Wed 13 May 2026 17:00:55 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: L00mKYTXcJpe4JMQkw8smNuFLjArRrUsklr4Jr7TRkU=)
2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:6a:8b:3b:0c:a9:a2:bf:e8:c5:df:05:2e:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: May 12 17:00:55 2026 GMT
Not After : May 13 17:00:55 2026 GMT
Subject: CN=3f9cfe97a7894d25a48acd4d1f7d7dae22ac08e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:59:80:23:1e:8b:94:64:49:cf:fc:db:42:
2d:93:27:a2:72:04:34:71:43:ed:10:11:f5:c9:82:
bf:e4:5c:43:7f:38:2c:44:39:c0:d0:d7:28:18:94:
ed:f2:ce:70:a4:17:8c:96:f3:d1:54:cb:7d:27:d4:
4d:c3:82:25:73:64:38:12:52:1a:e3:08:ed:06:3b:
e3:4c:db:de:0f:39:4b:65:a1:70:4f:12:b7:00:37:
4f:cb:86:92:bc:e4:1d:53:de:c2:11:46:16:44:3e:
67:7d:5a:c3:85:8c:96:7f:17:ef:47:af:26:36:49:
80:2b:bb:d4:bc:b5:55:75:80:6d:b1:f3:cb:5d:26:
b0:4c:a5:81:02:6c:b7:4c:1d:06:36:7d:b5:42:45:
a2:c5:c8:71:75:24:d6:04:69:27:05:62:e2:12:e0:
78:12:6e:c2:56:5d:5c:17:ef:9e:9c:d5:ad:0b:f7:
63:da:8a:79:b6:f1:a8:ec:76:5a:51:a8:0c:38:3a:
7a:97:8c:d2:a0:b2:8f:f2:7e:a2:f3:08:3f:a6:f7:
fb:70:8b:18:6f:ed:8a:29:31:48:97:3c:0d:d9:9d:
7c:c8:45:4e:84:47:71:0a:1c:08:e2:19:58:8c:0f:
3f:12:da:4a:4c:a9:cc:cd:10:e6:2f:9e:7a:b3:01:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:FE:97:A7:89:4D:25:A4:8A:CD:4D:1F:7D:7D:AE:22:AC:08:E2
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:69:6e:50:a6:08:5f:0b:13:cc:40:e6:9b:f9:58:1a:4d:27:
1e:c4:d7:02:ad:77:e0:38:f5:33:25:97:62:bf:8c:2d:7a:59:
3e:96:66:9c:32:b0:91:92:e9:2a:c0:69:c6:64:dd:62:a0:6f:
a5:8e:8c:aa:ab:27:bd:52:d6:70:4e:d4:46:54:0f:f9:b1:85:
e2:bf:97:a5:58:ce:ed:5e:a9:be:d2:99:82:80:bf:bb:6a:ff:
09:2d:a9:f9:d9:34:d3:6a:6e:a0:35:03:22:a6:93:96:71:69:
d1:18:5d:49:98:79:c4:95:ba:58:94:40:cb:6d:0c:e0:a8:b2:
cf:7b:07:99:67:3d:c5:8b:71:b2:96:89:52:37:b7:93:06:8e:
42:9e:f0:67:43:6e:5a:31:7e:20:8a:2b:87:e0:5a:f4:83:b0:
4a:7c:8c:57:57:67:05:0b:c3:6b:34:9d:73:7f:d5:d0:6e:84:
99:25:93:ca:c1:a3:fe:3a:c1:b3:95:55:c7:d3:36:77:d1:ad:
74:39:86:24:09:bc:46:42:f1:fa:49:ff:3c:70:13:72:fc:87:
b2:bd:e6:35:27:d8:5d:8f:00:f2:b9:d3:76:12:d8:e3:ad:55:
64:18:bd:84:c9:cf:2d:84:f4:dd:34:5f:8c:29:6e:7b:d2:6c:
4b:8e:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:23 2026 by rpki-client