Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: 3E+FEaOP7GMGBXp50RfyTtpLLZ2L+wizEU9Ss/ppad8=
Subject key identifier: 2B:1E:D8:F4:BA:38:DB:DF:67:91:65:28:8F:36:75:AF:BA:8B:8A:6E
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019E1D22EF2F35A2C633D15412301EC45DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 160C
Signing time: Tue 12 May 2026 17:01:29 +0000
Manifest this update: Tue 12 May 2026 17:01:29 +0000
Manifest next update: Wed 13 May 2026 17:01:29 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 71NYZG2HVFlrZauiPNOHmgGZ68yhFFUiy+wbSW1MdRw=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ef:2f:35:a2:c6:33:d1:54:12:30:1e:c4:5d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: May 12 17:01:29 2026 GMT
Not After : May 13 17:01:29 2026 GMT
Subject: CN=2b1ed8f4ba38dbdf679165288f3675afba8b8a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:77:6f:eb:bb:ee:7f:2e:0e:63:47:1d:03:
99:fc:e1:f4:2d:b6:e3:e9:4b:6e:d5:63:1c:f2:a1:
7f:83:80:6b:d4:95:b1:a5:04:76:6a:c4:7d:79:20:
4b:60:40:61:2e:5a:95:a5:99:7f:8d:e3:87:81:80:
79:75:33:ce:a5:cb:bb:03:ef:de:87:47:55:0d:02:
ab:02:a0:65:9d:0b:a3:f4:42:c8:c9:29:4f:f7:16:
70:d9:05:3d:81:40:e6:70:b5:ab:91:e6:7f:5e:b4:
26:67:e2:39:c8:06:39:78:84:b1:26:7b:cc:e8:b0:
fc:9b:e3:13:79:bc:f5:27:ab:e6:ad:ea:38:0a:18:
d5:7e:6c:15:40:3b:63:2e:5e:a3:66:d6:30:a1:57:
7b:6b:5d:71:ca:ef:b4:b1:f0:7f:73:d4:74:c2:6a:
4f:a0:70:77:f6:63:d3:fe:ff:41:31:eb:5a:ff:48:
ef:56:01:3a:bb:f6:36:ab:c2:e4:e5:ec:d6:28:ef:
87:13:38:5d:64:9d:b9:3a:04:cd:74:de:85:d6:a8:
fc:93:b0:db:b8:2c:0e:24:be:0d:bc:ef:00:cd:2c:
af:74:be:79:4d:ee:01:93:a4:f0:c5:89:96:09:e3:
f1:75:e2:5c:2f:ef:4d:41:f1:ec:1a:b9:b2:b0:5a:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:D8:F4:BA:38:DB:DF:67:91:65:28:8F:36:75:AF:BA:8B:8A:6E
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:0b:2f:f8:42:ae:1a:39:78:bc:11:db:06:06:59:d8:c0:
c9:92:f4:30:37:66:e6:c2:f4:c6:36:08:e6:ac:17:7f:4a:f0:
d6:f7:4e:6b:c5:57:1e:0a:06:d1:b4:63:50:4b:22:17:ad:bf:
bb:e5:ee:a0:6a:a2:7b:9f:e2:d7:e8:7b:87:1a:e1:8d:94:02:
7c:81:8c:c7:32:dd:64:60:bf:b0:82:f7:97:3a:f6:be:f2:ed:
37:df:97:66:1c:2a:3a:33:3f:95:58:4b:ab:07:5d:74:81:aa:
08:16:fe:6b:6d:e0:1f:d3:e2:35:dc:85:0e:7a:8f:8b:bd:fa:
f7:9d:3a:aa:31:14:33:9e:9b:fd:db:28:f4:fd:34:81:66:b5:
d2:79:6f:8c:d2:07:5d:5d:d4:32:f3:b0:92:b2:99:1a:1c:ab:
05:8b:5d:aa:16:ce:cd:3e:74:8d:47:cc:52:e5:cd:ae:fa:ec:
fa:16:21:7e:12:2f:b0:4e:87:e2:3b:fa:2f:c8:ec:0a:39:36:
7a:57:65:2f:b8:3d:de:9d:99:95:4b:54:5c:4e:63:32:a6:2a:
eb:0d:62:65:22:c7:41:e0:d7:b0:f8:11:97:f0:b7:26:0e:cc:
1b:e6:a4:89:97:e7:7a:3e:34:93:21:95:60:7f:39:36:1b:2a:
fc:13:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:12 2026 by rpki-client