Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: hah9u1mrxwicIWT0cqP4DoADHtdOwGxKqoyQsk3B4sY=
Subject key identifier: C1:70:10:FE:0E:A7:4C:97:CF:9A:A2:0B:55:98:20:98:C2:2C:1F:ED
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019D27E024F3D4F2E862DED78693C4389BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 158D
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: kfYyPIjB8FTdDKCWQgYFJa8FHHcFQMrLVVAqVwf1Ypg=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:24:f3:d4:f2:e8:62:de:d7:86:93:c4:38:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=c17010fe0ea74c97cf9aa20b55982098c22c1fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:52:eb:d6:31:ea:c4:bc:43:d6:a6:5d:45:
78:7d:95:1b:64:40:ba:a4:8c:4e:38:cf:21:eb:82:
f4:20:ef:8d:da:53:0e:3e:bc:e8:33:21:53:91:c2:
73:8d:6e:2a:ec:61:c2:a5:e5:21:88:f5:db:3f:c9:
3f:d9:b5:0f:31:df:47:5e:7a:42:00:88:89:b8:4e:
ef:28:c9:13:a1:34:88:32:32:04:9e:fb:db:05:78:
a0:e5:d6:23:a4:bf:7b:93:26:ca:9b:4d:cd:5b:98:
ff:86:5d:1e:f9:e0:e2:d6:d6:ef:c6:7f:f6:10:5b:
5c:20:e8:4a:ea:64:08:ba:ae:07:c5:dd:00:8f:d0:
78:5b:06:f5:44:d2:14:80:10:89:6b:10:c3:83:5f:
e9:59:71:45:4b:76:5f:0d:5b:7c:94:40:83:22:89:
47:f0:fd:8c:b3:d6:72:fe:4d:39:6e:84:48:fb:47:
c2:ac:f8:72:2e:1d:1f:c2:79:62:91:a9:ef:4c:2c:
fa:c9:05:60:a6:9e:39:08:04:d5:51:0d:e3:80:01:
02:a6:ff:2e:d6:ec:83:e7:69:4b:a6:93:fb:bc:db:
59:9b:bf:ee:a1:e0:bf:7e:59:30:8a:92:c0:67:a9:
57:e9:6f:bc:92:36:0c:6f:c8:bc:36:02:2e:5e:ac:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:10:FE:0E:A7:4C:97:CF:9A:A2:0B:55:98:20:98:C2:2C:1F:ED
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:10:22:88:f1:65:fc:c2:ea:9d:b6:89:61:9f:f0:62:f2:03:
32:54:74:dd:0f:9f:44:b9:82:d2:59:de:30:b3:09:8e:71:1f:
42:34:a0:ad:27:a1:cf:41:e3:f5:86:e5:60:43:7a:fb:15:46:
15:50:8a:9a:31:dc:f8:32:fe:78:4a:0b:47:85:b2:0b:0d:9a:
89:2a:93:ae:d6:06:cc:bc:25:f2:6f:f7:43:10:a3:de:14:de:
eb:3e:cf:ec:58:9f:d9:da:a9:3d:cc:0f:f5:25:47:85:a9:6c:
8f:6b:6a:54:e1:81:f6:b0:fa:7b:62:eb:1a:97:24:c3:98:6f:
12:d8:7b:f2:f9:45:d3:fc:ad:67:47:e9:3a:53:36:8e:3e:bb:
ff:65:9b:23:b6:bf:0a:ff:6f:00:7c:8a:43:a3:9e:5a:bb:3f:
b7:eb:4a:4c:e8:67:c4:a1:f4:27:23:ee:30:09:87:f7:15:32:
e5:b0:be:47:11:b7:91:19:e9:a2:38:a1:20:74:d4:75:bb:65:
bf:48:93:c8:9e:70:34:85:fa:8d:fe:7b:55:63:05:9a:51:40:
a0:45:ff:eb:46:f8:f3:9b:c6:35:00:68:1d:3f:c4:4f:f5:0d:
91:a2:94:8e:94:93:7f:25:61:d3:64:cc:b5:5f:64:a4:3b:03:
ee:1c:4d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4CTz1PLoYt7XhpPEOJvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjYwMzI2MDIwMTM0WhcNMjYwMzI3MDIwMTM0WjAzMTEwLwYDVQQD
EyhjMTcwMTBmZTBlYTc0Yzk3Y2Y5YWEyMGI1NTk4MjA5OGMyMmMxZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0FS69Yx6sS8Q9amXUV4fZUbZEC6
pIxOOM8h64L0IO+N2lMOPrzoMyFTkcJzjW4q7GHCpeUhiPXbP8k/2bUPMd9HXnpC
AIiJuE7vKMkToTSIMjIEnvvbBXig5dYjpL97kybKm03NW5j/hl0e+eDi1tbvxn/2
EFtcIOhK6mQIuq4Hxd0Aj9B4Wwb1RNIUgBCJaxDDg1/pWXFFS3ZfDVt8lECDIolH
8P2Ms9Zy/k05boRI+0fCrPhyLh0fwnlikanvTCz6yQVgpp45CATVUQ3jgAECpv8u
1uyD52lLppP7vNtZm7/uoeC/flkwipLAZ6lX6W+8kjYMb8i8NgIuXqzYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFwEP4Op0yXz5qiC1WYIJjCLB/tMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhAiiPFl
/MLqnbaJYZ/wYvIDMlR03Q+fRLmC0lneMLMJjnEfQjSgrSehz0Hj9YblYEN6+xVG
FVCKmjHc+DL+eEoLR4WyCw2aiSqTrtYGzLwl8m/3QxCj3hTe6z7P7Fif2dqpPcwP
9SVHhalsj2tqVOGB9rD6e2LrGpckw5hvEth78vlF0/ytZ0fpOlM2jj67/2WbI7a/
Cv9vAHyKQ6OeWrs/t+tKTOhnxKH0JyPuMAmH9xUy5bC+RxG3kRnpojihIHTUdbtl
v0iTyJ5wNIX6jf57VWMFmlFAoEX/60b485vGNQBoHT/ET/UNkaKUjpSTfyVh02TM
tV9kpDsD7hxNSg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:46 2026 by rpki-client