Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: p0Q0hEM32KjyJN0jcav++Ihdopg6eCQOUByXfNBFDjs=
Subject key identifier: 94:9A:40:D2:57:1B:07:8C:2E:F7:70:A4:92:96:DB:E5:33:A2:20:2E
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 019D25F0F5CFA52137BC89E76F1D5C7154FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 0243
Signing time: Wed 25 Mar 2026 17:00:41 +0000
Manifest this update: Wed 25 Mar 2026 17:00:41 +0000
Manifest next update: Thu 26 Mar 2026 17:00:41 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: T51Va0tqdoWtkCiUEweIU6GJxlZfGl7wBgIw7W0UrcU=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f5:cf:a5:21:37:bc:89:e7:6f:1d:5c:71:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Mar 25 17:00:41 2026 GMT
Not After : Mar 26 17:00:41 2026 GMT
Subject: CN=949a40d2571b078c2ef770a49296dbe533a2202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:d7:11:a9:87:39:70:7a:d1:a1:b6:1a:90:
1b:7d:89:db:46:5b:c7:0b:ed:ce:19:32:87:ef:82:
b7:b8:e0:17:4a:09:e4:d2:15:cb:3f:ca:70:0f:4b:
29:11:61:9d:17:18:c0:1d:b0:fa:ab:f4:5b:da:99:
7a:8b:1c:2b:c0:1c:3b:67:39:91:05:ae:6f:b3:d2:
a4:8a:41:42:d0:02:c6:19:d9:08:39:a0:91:f8:c1:
88:e1:1d:b6:37:1a:c4:03:6e:cf:9a:21:2b:2e:c2:
a8:bf:87:21:f0:b1:06:00:71:25:b8:5d:d7:2d:18:
82:c2:3a:d9:be:d9:ac:b4:00:05:64:0c:0f:5c:16:
fe:df:a4:13:02:cb:aa:c1:f1:be:0e:c8:49:c9:f7:
14:c3:ef:8e:49:f9:ab:eb:b2:41:db:20:5f:5d:46:
9a:01:07:27:69:e8:ca:1d:fc:82:a7:82:79:70:c0:
17:61:f6:85:6e:a0:e1:a5:3e:10:e8:5e:2b:01:6d:
7f:c9:6e:2a:23:5c:c0:b8:8c:46:5c:43:98:7e:02:
27:d9:07:2e:27:eb:d6:4f:4b:4f:12:c4:dc:ce:e0:
6a:6f:62:57:7e:ae:42:fe:dd:3c:2a:2f:3a:01:2f:
d7:42:61:35:a1:08:d9:bd:6c:9e:e4:d4:0c:48:f1:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:40:D2:57:1B:07:8C:2E:F7:70:A4:92:96:DB:E5:33:A2:20:2E
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7c:14:a7:59:6b:8d:40:2a:50:73:f1:88:6e:ac:aa:c9:9c:
db:00:19:37:49:4c:9f:38:0e:71:25:82:b5:1e:6b:ec:7c:6a:
31:37:da:3c:25:3e:0c:70:ff:99:62:1d:1f:15:76:6c:5c:7c:
39:97:05:6f:c8:a3:4f:fe:67:78:37:9e:a8:e9:25:a3:1d:f1:
fa:65:30:da:3c:3d:43:9a:fd:89:4e:52:74:c6:0c:77:a7:c3:
2d:1a:1c:2e:1c:0c:fa:4c:81:45:13:37:29:c1:d0:50:85:ad:
b3:71:2f:f1:25:16:d4:d4:6a:f1:11:69:1d:16:fc:0c:ce:fd:
70:3a:0c:08:32:60:8f:3a:a5:c8:b1:5c:9b:04:a0:cf:e2:47:
30:22:96:92:ef:ec:92:e3:64:f2:20:5c:3d:72:8b:ed:56:f9:
f6:6a:f5:67:c3:88:97:fa:68:8a:ae:0c:44:50:37:6b:71:8b:
34:34:5e:0a:3c:de:bc:62:04:57:42:d3:c3:91:a8:68:1b:54:
a8:7c:e5:7d:73:da:e3:5c:9e:e6:fe:65:f1:6a:04:60:a3:4e:
28:43:f0:1e:20:ca:43:e4:fb:1e:fe:f4:50:21:de:fc:ba:54:
92:c3:3b:70:4f:12:0a:da:9b:f1:de:2e:e2:73:6a:6c:c2:69:
dc:0d:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:27 2026 by rpki-client