Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: A1KqdfgMktwstAxqIhtypVMeQvUeu0RNoIePKD5G/00=
Subject key identifier: D4:18:F8:CF:52:F3:41:14:9C:28:63:87:55:01:A6:F0:64:D8:72:E7
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 019D28F25AA304FBD5021A86AB839ECB7035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: ON+WV9QI7QKUHBFtIJA3UTgIPJtecevgAuxj6TxxlFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5a:a3:04:fb:d5:02:1a:86:ab:83:9e:cb:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=d418f8cf52f341149c2863875501a6f064d872e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:32:a5:75:dd:9d:3c:d5:65:61:28:4d:07:
03:e1:49:48:e4:21:ff:64:cb:e2:e4:9c:c6:b8:d3:
44:83:76:38:68:89:52:10:e1:9e:fb:1a:3b:51:e3:
f9:9c:3d:ad:b3:53:73:c2:a6:81:ca:68:13:37:48:
cf:c7:88:ee:86:67:2e:0c:aa:87:65:9e:f9:54:b6:
bd:83:85:a8:ce:f8:67:38:b3:3c:0b:b5:51:63:96:
f6:6f:d6:d0:6f:3b:50:b0:18:06:7d:c8:cc:78:4b:
d2:18:8f:bc:c5:9d:67:93:66:67:7f:14:ad:69:f8:
30:0e:74:2d:b1:0f:d0:35:a2:c8:37:d8:14:7c:5d:
b6:44:d7:e4:f5:6b:b2:41:c0:5d:f4:04:cc:bb:b1:
d0:c8:8f:68:43:a4:ee:25:1d:a0:95:c2:ff:b8:d1:
cc:98:c0:c7:60:99:f3:ce:69:9e:88:f2:81:21:e0:
0b:7b:4d:a5:48:e9:ac:33:e6:38:2d:ab:88:f1:ee:
6d:e4:4e:d5:03:65:a3:5e:fa:f0:e3:ed:44:6f:0d:
42:79:d1:0b:7d:af:82:c9:e5:02:45:e8:ef:3f:7a:
1b:cd:79:96:77:e0:61:33:06:78:38:42:72:fd:92:
9e:b9:ed:66:1d:36:b1:4b:34:74:63:46:1c:fb:31:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:F8:CF:52:F3:41:14:9C:28:63:87:55:01:A6:F0:64:D8:72:E7
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:60:eb:f9:02:d8:ac:f2:3c:a5:0f:26:d3:a5:52:11:53:
6f:8b:7d:61:f0:05:74:0b:97:36:e2:87:d7:aa:94:14:bf:70:
03:84:f0:82:fb:ee:5d:d5:02:0e:4b:74:0d:31:e7:c1:a3:df:
e2:d0:81:62:b7:2d:a1:c4:2c:03:d4:21:08:3e:90:a1:47:d7:
14:e3:4e:f5:03:64:2e:a9:46:07:89:0d:f0:55:41:ef:db:72:
8b:70:2a:c8:03:75:66:53:34:2a:a8:a9:c8:11:b4:df:5c:63:
d4:3b:de:c2:2d:ab:31:c8:87:af:ba:4d:52:71:62:b5:15:3a:
7c:10:8c:ff:41:a3:8d:97:31:1a:bd:fd:5c:51:b7:3c:67:03:
86:ab:cb:c8:b8:02:dd:28:d2:ae:ed:dc:42:4d:88:9e:35:35:
8d:22:9a:fe:5c:79:45:cf:2d:7b:b9:f9:c2:7a:0b:59:32:00:
96:34:5a:58:23:c1:ab:21:d0:2d:8b:38:9a:4d:5e:1c:8a:3e:
26:b0:58:ed:94:5b:f1:69:8a:87:ed:3a:4f:94:2c:ec:a0:28:
28:ab:21:fa:0f:f2:22:e9:13:ee:ad:fc:95:40:65:b5:01:0b:
5e:ce:ae:24:bb:9d:c6:a9:59:f8:ef:fc:a3:31:a2:90:26:f5:
28:e8:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:00 2026 by rpki-client