Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: xLxTMIIxqXUKHmZK8Lj+GYPif5EqpMCx4aahFN6lKNQ=
Subject key identifier: E5:A0:F1:B2:BA:1F:46:6C:01:E1:BC:28:65:71:7C:34:C9:14:05:5C
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 01A0D6F11AE3AC2596C277B7504C56791252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: 0318
Signing time: Fri 25 Sep 2026 05:02:00 +0000
Manifest this update: Fri 25 Sep 2026 05:02:00 +0000
Manifest next update: Sat 26 Sep 2026 05:02:00 +0000
Files and hashes: 1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: SKFDXZ0OwEhi9IXu2PT/XRDY/OonGEg/EIYHuwvQJ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f1:1a:e3:ac:25:96:c2:77:b7:50:4c:56:79:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: Sep 25 05:02:00 2026 GMT
Not After : Sep 26 05:02:00 2026 GMT
Subject: CN=e5a0f1b2ba1f466c01e1bc2865717c34c914055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:71:75:27:c4:43:8c:d7:88:4f:e8:60:96:
42:84:ce:5b:ec:a0:82:68:5c:4e:1c:59:4f:42:83:
40:c1:31:d1:6b:70:c2:47:39:c6:bb:3f:a9:9f:e6:
5b:91:27:7b:72:ce:72:70:2d:9d:9d:3c:5b:6a:0d:
4f:57:f5:cf:7b:2d:55:97:ff:ba:f7:48:62:b8:6a:
77:b3:5a:83:ee:f8:76:e3:bd:2d:f6:20:14:b5:de:
de:76:9b:0c:63:07:3c:5f:80:57:48:02:94:d5:c7:
ff:75:6d:69:be:90:64:0b:07:98:c2:f4:9d:2d:b0:
17:9f:30:05:36:c0:7a:63:87:8b:a6:34:f3:52:db:
ed:3a:df:ad:69:c6:5a:b5:3e:f4:69:57:77:10:1e:
39:6f:e9:47:4f:ce:65:a8:cc:b2:da:16:d7:72:2f:
b8:af:da:4b:f9:37:36:d7:d8:ab:a3:33:54:9d:e9:
66:69:09:02:28:02:c5:5a:f6:9d:82:7e:f8:1e:d9:
46:0f:79:ef:28:9d:62:13:f8:f7:9f:08:f1:94:eb:
87:6b:01:1a:88:f1:4a:10:bc:73:03:58:49:21:ed:
12:d5:9b:63:66:7b:54:29:25:ba:48:d6:c9:cb:06:
c5:e7:7a:de:a7:ff:84:4d:d4:8e:53:d7:a8:2e:ab:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:F1:B2:BA:1F:46:6C:01:E1:BC:28:65:71:7C:34:C9:14:05:5C
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1f:dc:b9:a5:2c:4e:a4:45:75:31:8a:6e:17:22:60:18:1a:
b1:87:e5:3d:3f:e5:53:e5:80:5c:86:b0:6f:85:de:41:00:d3:
74:97:38:d1:ef:e1:59:96:bc:e4:0b:fe:fc:ad:f3:ab:59:92:
bd:71:86:c4:0b:c4:2c:63:bb:01:76:61:c0:13:d4:bd:72:85:
b6:7a:0b:ee:76:37:17:33:34:e4:36:fc:b3:ee:51:d9:df:25:
a0:69:f5:89:52:a1:34:cf:29:b1:c4:80:6b:f6:fc:ab:9d:20:
c0:78:f3:6d:a3:62:49:b3:6f:bf:ed:6e:fa:3a:8a:1b:2c:fa:
1e:c3:0b:29:e3:11:c1:2e:08:4c:77:6d:8c:6f:5c:d9:7a:4e:
a1:63:26:e9:49:b3:8c:58:de:9e:63:f5:c1:c6:80:fd:be:7e:
68:e7:93:0e:e5:cb:53:f2:1a:22:8a:20:9b:fc:7b:ce:9a:3d:
20:d4:61:fc:14:9e:13:90:f5:cc:3c:e2:22:d3:d3:16:dc:5b:
38:87:c7:2a:27:91:a2:e6:f3:5d:cf:9a:92:69:f9:17:4f:47:
48:a4:6c:ad:22:af:58:3c:14:db:57:38:49:18:2a:53:a2:7d:
ed:da:9c:20:82:7f:38:d8:c3:81:eb:d2:5d:27:12:67:19:31:
90:47:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:11:14 2026 by rpki-client