Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: j7pMv3vsPSStRp7vLjlpRpkXsvvhDV8c3Lzs+h+Aexc=
Subject key identifier: 65:10:9E:59:84:36:CC:2C:AC:A1:FF:A3:79:01:FA:9B:FA:D7:A3:A4
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 01A0CCA3DFD66E88A4C0EA44B1B74AAB0572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 05:01:26 +0000
Manifest this update: Wed 23 Sep 2026 05:01:26 +0000
Manifest next update: Thu 24 Sep 2026 05:01:26 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: X66SpWjlfMV8akF04Hq12AfibfvqdfyTicb+k4wdUIo=)
2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:df:d6:6e:88:a4:c0:ea:44:b1:b7:4a:ab:05:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Sep 23 05:01:26 2026 GMT
Not After : Sep 24 05:01:26 2026 GMT
Subject: CN=65109e598436cc2caca1ffa37901fa9bfad7a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:57:94:80:bf:34:52:d1:35:14:f0:3d:ed:
cc:dc:5d:d4:19:78:f9:e8:be:3e:a5:c1:9c:3f:f6:
9b:d0:1d:43:58:33:7c:f4:f6:27:02:98:87:78:1f:
7e:7e:d9:d6:70:7a:41:63:be:ca:8b:e4:13:66:00:
42:95:29:f7:8e:78:94:cb:20:b9:c3:69:c5:f2:8f:
95:d4:80:25:f5:c3:07:a6:2d:1a:89:44:80:e4:dc:
6d:a8:af:8b:77:3f:dd:7a:35:7e:11:08:6b:67:32:
ae:a9:2d:25:b7:c6:e8:db:fa:44:bb:d5:ca:56:00:
95:2b:3a:ef:b3:42:78:c4:5d:17:a5:2f:68:dc:e4:
22:98:36:fa:40:7c:fa:2c:c9:ac:6d:4d:7a:1c:a3:
df:0d:74:a9:4e:14:89:09:80:61:b8:db:68:4a:7e:
5b:97:2c:b2:03:bc:b9:2d:08:dd:84:0c:9f:82:21:
00:85:5e:78:44:fa:83:a2:d6:ac:37:e3:73:3b:eb:
17:15:7f:b7:43:0a:98:c1:c7:a0:d4:ca:7f:fe:8d:
b6:6d:cd:4d:54:e4:0e:74:a1:6e:2f:b0:8d:88:4b:
72:d7:de:e2:cd:21:85:08:2a:e6:c4:4d:6d:fd:b2:
1a:a8:78:5b:73:b5:04:a4:8e:5a:c8:b5:87:43:9c:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:9E:59:84:36:CC:2C:AC:A1:FF:A3:79:01:FA:9B:FA:D7:A3:A4
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:4a:24:99:e7:e7:8a:59:d9:ad:14:2c:fc:64:30:13:e2:
4a:e2:b7:3a:0c:db:64:8f:90:40:60:b8:9a:b0:26:3d:95:bf:
f7:30:93:95:f1:43:ce:3b:1f:bf:54:5e:e0:b0:97:12:df:ca:
a5:a2:56:11:09:41:aa:10:5c:44:be:f2:28:eb:fe:b4:a6:e8:
ee:de:3e:13:50:73:ec:93:41:d4:77:51:e2:a2:87:39:8a:f5:
d3:42:57:ab:84:ec:c1:ad:c0:7f:bc:8f:ef:d9:2d:55:51:76:
97:1f:cc:f2:52:d6:00:71:f6:86:34:a6:ef:22:53:59:3d:6f:
a6:4b:27:ef:36:2e:5c:54:8a:ed:75:58:c4:d2:8d:75:fa:95:
33:98:2e:30:59:b4:a3:a5:63:12:d2:6b:c0:45:54:8a:98:75:
41:be:dc:5b:41:b1:3f:5d:69:a9:74:fc:d6:4b:ca:30:73:de:
d2:46:62:51:8d:f6:bb:fe:f0:24:6f:cc:8b:da:25:da:6c:6e:
d5:f9:34:f4:aa:75:58:53:34:ac:53:5b:a2:0f:bd:dc:e9:84:
87:99:09:dc:e6:81:cc:ed:e0:85:b2:23:2b:89:66:fe:ed:c1:
b2:1e:d6:1b:bf:ea:6e:5c:46:7c:bf:ae:bc:c4:10:24:39:7a:
82:a7:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:18:11 2026 by rpki-client