Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
File: sAm-idR1R1b5z954-sGjYnrAyBc.mft (raw, json)
Hash identifier: U09LVyXlbTx+aIsspZCAuEHsR/tMe1ciE9WOtGfewbM=
Subject key identifier: C1:EA:6E:3B:87:19:5F:54:26:DC:51:36:DA:4D:02:6F:5F:E7:EE:6B
Authority key identifier: B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
Certificate issuer: /CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Certificate serial: 01A0D3EFBE72ADBB35F4F531221E3D942FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:39 +0000
Manifest this update: Thu 24 Sep 2026 15:01:39 +0000
Manifest next update: Fri 25 Sep 2026 15:01:39 +0000
Files and hashes: 1: TKICB8YOdD6bdiIav5yEIcN-jFE.roa (hash: g+d7zzQluUE41eE7PBez/FLekTdLQ2Gdgu4OxTMnlfU=)
2: sAm-idR1R1b5z954-sGjYnrAyBc.crl (hash: HWNtgGl+2+Aob9ty7eIpJQ3izBTn7oirJNIhiG05dEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:be:72:ad:bb:35:f4:f5:31:22:1e:3d:94:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Validity
Not Before: Sep 24 15:01:39 2026 GMT
Not After : Sep 25 15:01:39 2026 GMT
Subject: CN=c1ea6e3b87195f5426dc5136da4d026f5fe7ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:2e:20:aa:19:65:42:10:81:2e:d1:3b:9e:
64:c9:94:c9:e2:79:f2:1c:2d:9d:48:e3:67:e1:64:
9b:97:45:68:0c:ee:06:f0:47:c4:57:93:b1:f0:1a:
6e:c6:18:3d:45:5d:5e:36:7a:7b:a3:87:ee:60:77:
13:f9:e6:3c:ba:da:65:6b:af:44:7f:4d:bb:62:48:
d2:9a:ef:1e:21:1b:16:f6:99:ef:9e:9a:de:26:e5:
2f:09:8b:79:4e:8c:cf:4c:63:b7:1b:e5:b9:a8:95:
f0:a4:4a:09:00:0c:1a:ae:33:78:77:4e:e8:a9:66:
ac:a5:08:61:72:c2:06:dd:cc:74:a2:8e:1d:ec:65:
f6:52:9d:33:22:8c:c4:64:ec:d8:c5:a5:1a:d2:28:
90:c6:41:12:8b:34:80:88:df:aa:fb:98:fa:15:22:
41:4c:81:a5:1b:d5:fe:5d:4d:3b:cd:cc:72:29:85:
a5:71:96:a2:a8:7b:27:4c:52:d6:c4:49:26:31:e0:
3e:f6:a2:11:2d:fd:63:4e:e9:9a:3b:20:8c:a4:92:
57:02:7e:77:88:69:e3:a6:0a:3f:19:e1:0a:5a:b0:
0d:87:2d:ec:36:d8:3c:db:8c:62:8f:5f:03:c9:18:
f2:7f:b8:0d:c0:2c:ea:43:0f:64:f1:fe:13:b6:8d:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:6E:3B:87:19:5F:54:26:DC:51:36:DA:4D:02:6F:5F:E7:EE:6B
X509v3 Authority Key Identifier:
keyid:B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:0e:73:fb:9f:11:a1:dd:ae:3e:1d:16:68:30:2e:6e:53:
40:2a:bf:58:67:37:8b:71:9c:71:80:c6:ff:4b:3b:44:bd:8a:
2c:2f:1a:8f:a2:94:b4:98:94:8e:74:53:08:73:b8:5d:3d:c8:
7c:ae:d0:88:12:34:0f:6f:e7:54:64:9a:41:74:1d:83:a3:10:
f6:d4:b9:6b:de:bc:c6:7f:0c:c3:99:bb:af:e8:6e:b3:99:30:
a4:50:bf:66:92:a8:6b:eb:d1:f7:fb:91:e1:07:12:65:75:74:
5f:b7:a0:24:0e:c7:bd:bf:65:9b:ff:4c:ad:eb:2b:ce:4d:7c:
8c:83:d9:16:45:96:0d:47:70:a0:4b:4f:01:ea:5e:18:3c:6c:
e0:12:17:48:34:01:eb:51:d6:64:54:36:49:52:ef:fa:b8:19:
d2:d8:cd:20:a2:7d:2d:d5:6b:e6:84:54:28:69:86:25:11:b5:
a2:e0:80:6b:89:c9:d8:3b:97:42:3d:b3:92:cf:30:f6:03:5a:
b8:df:cf:21:4d:43:f7:a2:1c:f8:f4:92:36:f8:71:c6:29:a0:
1d:3f:08:d1:4d:28:73:7d:a5:8c:0e:ff:38:d7:11:92:1b:8b:
c0:7c:9a:ce:d0:b3:80:ce:27:2b:d7:25:02:4b:32:9f:e8:da:
a0:ad:4f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT775yrbs19PUxIh49lC+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDliZTg5ZDQ3NTQ3NTZmOWNmZGU3OGZhYzFhMzYyN2Fj
MGM4MTcwHhcNMjYwOTI0MTUwMTM5WhcNMjYwOTI1MTUwMTM5WjAzMTEwLwYDVQQD
EyhjMWVhNmUzYjg3MTk1ZjU0MjZkYzUxMzZkYTRkMDI2ZjVmZTdlZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym0uIKoZZUIQgS7RO55kyZTJ4nny
HC2dSONn4WSbl0VoDO4G8EfEV5Ox8Bpuxhg9RV1eNnp7o4fuYHcT+eY8utpla69E
f027YkjSmu8eIRsW9pnvnpreJuUvCYt5TozPTGO3G+W5qJXwpEoJAAwarjN4d07o
qWaspQhhcsIG3cx0oo4d7GX2Up0zIozEZOzYxaUa0iiQxkESizSAiN+q+5j6FSJB
TIGlG9X+XU07zcxyKYWlcZaiqHsnTFLWxEkmMeA+9qIRLf1jTumaOyCMpJJXAn53
iGnjpgo/GeEKWrANhy3sNtg824xij18DyRjyf7gNwCzqQw9k8f4Tto1veQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHqbjuHGV9UJtxRNtpNAm9f5+5rMB8GA1UdIwQY
MBaAFLAJvonUdUdW+c/eePrBo2J6wMgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FtLWlkUjFSMWI1ejk1NC1zR2pZbnJBeUJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMDMyZGUtN2I0Mi00MjUzLTkwNzQt
MTk1YjIwMjRhYmVlLzEvc0FtLWlkUjFSMWI1ejk1NC1zR2pZbnJBeUJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kMDMyZGUtN2I0Mi00MjUzLTkwNzQtMTk1YjIwMjRhYmVl
LzEvc0FtLWlkUjFSMWI1ejk1NC1zR2pZbnJBeUJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQMOc/uf
EaHdrj4dFmgwLm5TQCq/WGc3i3GccYDG/0s7RL2KLC8aj6KUtJiUjnRTCHO4XT3I
fK7QiBI0D2/nVGSaQXQdg6MQ9tS5a968xn8Mw5m7r+hus5kwpFC/ZpKoa+vR9/uR
4QcSZXV0X7egJA7Hvb9lm/9Mresrzk18jIPZFkWWDUdwoEtPAepeGDxs4BIXSDQB
61HWZFQ2SVLv+rgZ0tjNIKJ9LdVr5oRUKGmGJRG1ouCAa4nJ2DuXQj2zks8w9gNa
uN/PIU1D96Ic+PSSNvhxximgHT8I0U0oc32ljA7/ONcRkhuLwHyaztCzgM4nK9cl
Aksyn+jaoK1PdA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:45:27 2026 by rpki-client