Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: cs7NlRvPAAsjwIJruIyz4nnJxjU9WUT1/bTDYVu7BKo=
Subject key identifier: F5:94:1E:8D:D1:98:5B:20:83:21:0D:6C:56:6C:C9:5D:EF:57:B1:E9
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 019D070B2E3C770B8898E2DDB349AB5E7DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1879
Signing time: Thu 19 Mar 2026 17:01:06 +0000
Manifest this update: Thu 19 Mar 2026 17:01:06 +0000
Manifest next update: Fri 20 Mar 2026 17:01:06 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: BjWId1kkgslglaKAZJ3XP/5sS72IkgF2DdeYkqDSuec=)
2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:0b:2e:3c:77:0b:88:98:e2:dd:b3:49:ab:5e:7d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Mar 19 17:01:06 2026 GMT
Not After : Mar 20 17:01:06 2026 GMT
Subject: CN=f5941e8dd1985b2083210d6c566cc95def57b1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3c:81:9d:8a:33:65:d8:0f:c9:32:7d:be:9c:
70:53:76:19:89:43:93:3e:4b:74:d4:f4:af:d4:97:
1c:c4:12:26:df:55:a8:c7:2e:c4:b6:72:9b:10:8a:
3a:4d:8a:b8:b4:3a:f8:b2:34:da:e8:2b:ab:71:38:
c0:28:c7:5d:db:68:fc:de:e1:9a:0e:16:25:e4:6e:
6a:73:e9:d0:07:17:87:10:cb:3f:00:e3:56:e4:e3:
4f:53:50:0c:ca:2c:43:8d:51:d7:07:99:bf:8c:0c:
ed:ab:ae:02:77:22:2c:01:43:fb:81:e3:8e:b5:b7:
a5:4b:e8:f8:df:e8:2d:90:20:d3:80:e6:27:29:3c:
a3:06:fc:0f:b6:e8:04:c7:19:6a:4c:e5:4b:a9:c4:
0e:f2:16:5b:41:3d:78:ac:43:ee:0a:40:42:93:29:
87:e0:21:2b:1d:24:02:ce:08:22:12:e2:c9:25:9d:
63:af:4a:6d:df:d8:8c:20:da:3d:2a:ef:de:1d:c6:
c0:17:65:6b:ed:b8:e8:c6:21:c3:8a:5e:50:19:4d:
04:ba:29:fe:26:cb:86:db:9e:1a:7b:04:3e:83:45:
cf:d9:48:7a:36:d1:6a:40:61:e4:5f:21:67:2f:d8:
f1:2b:cc:24:32:0f:ce:94:4a:10:dc:8f:db:b0:0f:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:1E:8D:D1:98:5B:20:83:21:0D:6C:56:6C:C9:5D:EF:57:B1:E9
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:1e:6e:46:66:9d:50:4a:3d:d1:97:a7:21:83:81:f8:23:
69:6f:73:6b:68:ad:d5:64:67:13:17:84:8f:8f:1c:33:63:14:
6a:8f:f3:8f:89:0f:59:f2:77:77:5b:8e:d1:1a:38:cb:fc:3b:
43:f1:5e:47:7c:c0:62:9e:af:8a:ea:00:fb:0b:7e:4a:4c:91:
e9:f8:38:96:f2:de:db:8a:49:43:2d:5f:ab:a9:77:5e:9c:b3:
59:46:50:71:04:fc:c8:73:de:24:06:44:71:3d:6e:5a:cf:a3:
f0:d6:64:19:aa:18:ae:02:7d:62:48:42:f7:cb:d9:c2:8a:d2:
ca:2b:61:7a:8d:ae:cb:8b:67:72:9f:d9:db:6f:49:a4:83:87:
5a:1d:06:7d:df:d1:6f:f4:e6:54:f5:ce:32:ec:3e:8c:a8:f7:
86:4b:5e:e6:8d:11:42:d7:ed:70:7c:5d:50:b8:ad:dc:38:bb:
49:27:60:ad:86:f6:4f:54:fd:5f:bf:6f:4b:76:a4:f1:87:3d:
ae:fc:8c:28:1a:97:20:10:0e:ab:02:8c:b0:47:5f:77:eb:e4:
82:49:89:40:c3:75:73:b5:2d:d7:c5:c5:8f:c1:39:3d:3c:11:
8b:94:c1:a1:6e:37:3c:cb:95:0f:a1:85:19:9c:e0:df:08:f6:
a7:f7:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 21:33:20 2026 by rpki-client