Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json)
Hash identifier: I3yC3Wxp8DrC+U15rg6JJqz/HS3NL6FjCWtm15f8Tzs=
Subject key identifier: 30:49:83:D8:22:DF:28:D9:15:DC:96:99:D7:59:77:87:85:7E:FE:C9
Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Certificate serial: 019D2884CEECDFEBB582F3BB8B5037C8AC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
Manifest number: 028B
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: ZXj+cUqZBgxOaqJtX/vBdVVEsaz+YR3ts+fqDlO22cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ce:ec:df:eb:b5:82:f3:bb:8b:50:37:c8:ac:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=304983d822df28d915dc9699d7597787857efec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:ec:8e:ce:83:e3:18:26:04:c6:39:7e:f9:
ae:9e:69:e2:d5:9a:71:8a:68:14:a1:b4:11:87:67:
0e:64:b2:1a:a3:c5:5c:18:4e:5a:33:6a:74:d6:95:
b6:f1:b0:2e:a0:99:7c:05:90:fb:3b:17:95:a6:72:
14:11:8d:31:8c:e4:45:c8:63:8f:99:38:23:ec:d7:
8e:37:d6:4b:e7:aa:d4:71:54:7c:0c:3e:9a:1c:39:
9f:93:c2:ba:55:da:9a:91:39:2f:3a:2a:67:7c:62:
9b:97:7c:ef:93:b9:a3:2d:20:92:6f:46:cf:b9:90:
fe:d2:42:a2:f1:f0:3a:85:3e:0e:0c:6d:e9:bd:ef:
4a:f1:19:4c:e5:f3:1b:45:79:6c:61:c2:cb:3d:c1:
2e:6b:d5:d3:ad:ae:25:44:6b:43:db:a7:53:35:d6:
d5:4c:78:85:c2:b2:fe:87:c0:47:66:ab:43:b3:17:
48:f3:f7:ae:ee:5d:bb:fe:86:30:f1:ae:81:52:66:
50:5d:6e:4a:89:fa:14:8f:8e:1b:31:a8:7b:14:f0:
b7:e3:9d:2c:e7:ae:ea:09:49:b5:8d:3c:eb:86:c5:
2f:a7:cb:6b:5a:dc:c2:06:b5:7a:c9:5a:b8:c9:e4:
46:81:bf:05:63:33:9a:ae:32:18:d9:e8:5d:65:2f:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:83:D8:22:DF:28:D9:15:DC:96:99:D7:59:77:87:85:7E:FE:C9
X509v3 Authority Key Identifier:
keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0c:b8:00:5c:2c:52:6c:c1:37:3d:4a:82:68:ea:52:d2:bd:
2b:21:9c:1a:ed:6f:35:16:61:f3:1e:67:a1:35:c5:f8:27:17:
6b:39:b4:df:44:f2:66:28:9b:4a:a4:20:4a:0f:5e:8d:3f:3b:
34:19:f2:d5:c5:84:10:ee:b7:4f:2d:b3:b7:d7:ca:3f:06:73:
eb:d4:6f:d9:a6:d3:f6:c1:d9:38:f8:5e:f3:10:0a:a5:c6:e9:
c9:e7:44:40:61:cc:12:aa:0c:cf:04:32:c4:a8:98:3c:bf:37:
18:c4:29:dd:d8:20:08:54:79:c9:63:61:10:42:96:26:6b:02:
fa:a3:46:69:14:71:84:8b:a5:3a:32:7b:8b:ce:fe:88:70:c6:
3b:bf:34:9a:7f:7b:b8:75:5a:43:08:c2:29:54:bd:58:2a:b3:
a0:8f:10:88:38:1e:fa:69:27:93:8d:b5:ab:dd:05:2a:e4:ee:
30:d5:29:59:67:67:b3:b6:50:5d:f7:92:5e:0e:fd:b3:bb:c6:
21:c6:7f:d9:71:5f:63:f8:4c:8d:78:ce:db:06:49:64:d7:f2:
04:4c:ba:6a:52:5b:17:bc:35:e9:bd:ae:0c:e0:24:4c:9f:b4:
30:87:31:90:84:38:aa:af:40:9a:86:b1:b0:29:aa:8c:dc:c3:
6f:10:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:26 2026 by rpki-client