Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: gLJ3NQPpnebFF3Y/4+HKNXLYDXCsSJqjusuaJvrpB6w=
Subject key identifier: 02:11:2B:1A:3A:FC:DB:FD:7C:87:23:58:AD:C0:94:47:B5:16:60:B4
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01A0D83C21B6E570F940F068C2AC4188D14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 11:03:34 +0000
Manifest this update: Fri 25 Sep 2026 11:03:34 +0000
Manifest next update: Sat 26 Sep 2026 11:03:34 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: 43X1WwtrzFqNvypFZ7BiKaSwevrKdurUUhvVepCn6t4=)
2: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (hash: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=)
3: 6qswnHV8JvW6cu6cSwBLoqp6-Ng.roa (hash: IUM2z/m3IjX5AfUXwWnD2PsPO+D6A7StpRGqMV8Cn/Q=)
4: c-q-1btZT4jua2JDzrYBPweRMfo.roa (hash: T3Vq03V1v96UVyz+QAoFvPmYD+d9eRiyCI2mm1ddpyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:21:b6:e5:70:f9:40:f0:68:c2:ac:41:88:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Sep 25 11:03:34 2026 GMT
Not After : Sep 26 11:03:34 2026 GMT
Subject: CN=02112b1a3afcdbfd7c872358adc09447b51660b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:49:0e:97:b8:4e:1a:38:4b:8a:0b:c4:4c:
8b:76:5b:b3:32:50:19:01:c4:25:e4:e4:6e:4e:2a:
a5:eb:eb:ea:8b:9b:27:5d:a5:20:fb:e8:8c:46:23:
93:b6:78:aa:b1:8a:11:4b:ab:b2:d4:77:e8:9c:2f:
e6:8f:5f:ca:fb:1c:6f:f4:3a:98:63:fd:07:85:18:
02:e3:bf:77:97:1a:80:e3:58:7a:b7:da:e2:b8:f3:
00:89:04:2d:d7:f8:6b:98:aa:ea:8a:8a:a4:11:09:
94:60:97:87:d3:91:bc:ad:29:32:f3:32:53:24:8e:
ad:18:b3:f3:9d:6d:11:59:b2:c9:5e:b5:ac:30:2e:
6b:64:35:dc:5f:73:09:25:3c:eb:4a:fa:6a:3b:bb:
99:83:fd:c2:94:76:da:26:3d:74:19:0d:56:5a:47:
89:4e:ec:59:6d:a5:cc:eb:7b:62:5b:c1:c6:c1:b9:
3d:2d:a7:82:a1:7d:b7:23:84:4a:68:2b:93:d5:bb:
79:7c:db:50:21:f1:90:98:05:7b:d1:e0:53:2a:3a:
de:fa:c4:a5:cc:56:d8:05:aa:08:74:52:b4:01:15:
28:95:4b:f7:38:9b:16:f2:12:90:b6:5f:48:41:e5:
03:07:df:21:bc:c5:3a:9e:80:f4:21:66:6e:3a:8e:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:2B:1A:3A:FC:DB:FD:7C:87:23:58:AD:C0:94:47:B5:16:60:B4
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:75:11:86:db:9d:83:e7:71:1b:f0:17:58:cf:18:66:01:
20:06:eb:2d:8c:3f:ae:88:4c:8f:f4:74:2e:c1:ec:01:c7:73:
11:af:a4:80:3b:9b:06:c3:4a:e4:f8:f9:79:f3:35:bd:d6:8a:
26:5d:c9:7b:6c:94:82:88:83:b2:0f:c4:33:b9:72:73:a6:22:
af:22:32:00:b2:f9:b6:ad:d9:f5:49:c2:26:89:85:b5:87:19:
70:45:96:1f:26:f7:2b:37:51:6a:6c:f4:66:b2:8b:63:f2:b0:
8f:cd:16:6f:d1:28:4d:82:c2:ba:f8:0b:b4:cb:7a:7c:08:e1:
3e:27:2a:4a:2e:b8:a7:f3:c4:10:b9:22:cb:c0:7d:4b:d0:7c:
0c:26:bd:b6:6b:e5:68:f0:73:74:83:11:dc:5b:87:16:9a:e5:
90:80:cf:d4:05:fb:cd:46:aa:31:10:1b:12:e4:cc:09:d0:79:
bc:ed:4c:e1:1e:72:72:4e:2d:4c:bb:02:6f:e2:b4:cb:ef:70:
18:15:a2:de:e4:b5:75:36:75:30:37:1f:1e:fa:50:c0:ad:17:
58:42:58:6b:f0:75:0f:3c:6f:fb:c9:80:62:7b:ea:17:9e:df:
3d:9d:d1:37:f8:4f:3f:9e:05:50:76:2e:a0:5b:a1:a6:7a:0c:
ff:83:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:15:57 2026 by rpki-client