Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier: Gagq5O3Xsn2mSTzLWOeVetqdLJlhhGuUT1kFmDIILc0=
Subject key identifier: 4C:00:91:80:0C:FC:F0:7B:AF:BA:FB:B6:90:CA:E0:99:64:EF:88:F4
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial: 019D27724BA3E76887A4F8FE78AA6DBAF83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number: 056A
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: v6hIsc/USgDJJBAveWgnCEqi5DxXtmkWLbfVpLIf15I=)
2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4b:a3:e7:68:87:a4:f8:fe:78:aa:6d:ba:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=4c0091800cfcf07bafbafbb690cae09964ef88f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:7f:c5:07:d3:88:eb:2a:30:64:53:ef:4e:
ec:e5:ed:c8:f6:f6:b4:90:ea:a6:50:38:9a:3d:b5:
27:be:70:e3:72:d6:e6:32:bb:27:98:83:00:f6:03:
49:32:9b:53:33:1d:a4:1d:39:05:b7:15:8d:cb:a9:
ab:f0:ed:53:8b:00:df:09:12:cb:cf:f2:17:23:ee:
bb:06:73:21:76:0a:84:b5:af:17:9e:96:5c:a3:5e:
87:df:9b:16:fe:c4:f8:21:b7:e9:cc:08:56:5b:cf:
a4:20:61:ba:c2:8a:9e:98:26:ba:3e:fd:95:c0:64:
80:aa:2e:9c:d0:42:e0:fc:c0:2c:cd:a9:c8:bf:24:
71:ce:47:13:2a:6c:3f:8a:a1:c8:8a:07:c5:81:21:
f4:06:05:74:1e:df:41:12:7e:86:c9:53:08:ae:5c:
de:71:60:e0:a9:10:85:d8:a5:b0:7d:50:ca:3d:45:
33:db:fa:71:e2:6c:63:78:da:73:fa:bb:40:69:91:
6d:aa:1a:3f:83:04:96:18:12:ae:73:15:e4:99:48:
16:2f:06:50:86:87:df:d7:64:32:a1:41:c0:87:5b:
01:73:a8:16:20:22:13:23:e2:ae:55:54:ad:6f:16:
07:31:33:0a:b4:3f:9b:d0:06:3f:25:66:8c:0c:f2:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:91:80:0C:FC:F0:7B:AF:BA:FB:B6:90:CA:E0:99:64:EF:88:F4
X509v3 Authority Key Identifier:
keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:7d:a2:b0:8b:f8:7a:9f:9c:7e:37:79:ca:d5:31:41:67:
f9:0a:4f:99:36:38:28:4c:98:c5:e2:70:45:04:13:68:18:b5:
ab:4f:2e:88:79:ba:e5:f7:ea:a5:1d:37:2c:00:43:2d:23:e8:
6b:7e:91:4b:cc:07:af:0e:37:f9:3d:73:9c:ee:82:61:b9:da:
55:82:6d:a2:5b:9e:dc:14:1d:21:0b:d2:db:df:9d:39:38:bb:
20:72:9a:2e:7b:56:25:36:2b:31:eb:f3:44:88:99:13:7a:5e:
4c:71:35:87:77:79:81:fd:77:9f:e8:3d:e6:07:fd:d0:eb:e9:
18:c5:db:d0:fb:db:09:45:8b:2e:03:53:38:cc:2b:0b:9b:4f:
96:79:f9:d9:95:cb:b2:4e:98:4d:59:ae:cf:56:e2:76:0e:60:
55:91:42:db:8d:e5:3e:7e:43:fd:a7:03:4b:a3:41:12:79:91:
79:50:bd:63:11:fa:fc:39:1c:72:46:df:00:1d:43:6e:9c:8f:
51:e1:ef:d3:a6:74:36:da:19:e5:c1:c8:05:c5:34:3f:91:00:
38:e8:52:b3:0a:62:ce:c6:47:3d:09:b6:fa:c5:2b:ba:2c:9d:
88:cd:a2:8d:29:37:6b:a9:ca:35:e1:c2:2c:49:af:9e:c6:49:
8a:98:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:25 2026 by rpki-client