Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: SBDni5rZEslUrVH9WUd17f3MVj+/azAvr+c+Z7jqgFg=
Subject key identifier: C0:C9:28:B4:AD:45:57:4E:73:51:94:72:39:0F:4A:92:6D:7E:C2:CE
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 01A1878936D38763B64858057E1FAC7A5BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0743
Signing time: Thu 29 Oct 2026 12:01:18 +0000
Manifest this update: Thu 29 Oct 2026 12:01:18 +0000
Manifest next update: Fri 30 Oct 2026 12:01:18 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: Her/Se0/vpmgiRtt0yhm1tG/6Mg0LXCY3Hq64Z5Euik=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:36:d3:87:63:b6:48:58:05:7e:1f:ac:7a:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Oct 29 12:01:18 2026 GMT
Not After : Oct 30 12:01:18 2026 GMT
Subject: CN=c0c928b4ad45574e73519472390f4a926d7ec2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:ca:dd:06:80:e9:d4:a0:b5:ae:65:12:c2:
1f:fb:d4:95:4d:7f:60:c0:b3:e5:f3:ed:12:a5:66:
71:ff:c0:9f:ba:fd:c7:cc:02:43:62:d7:51:db:b9:
2d:6c:f6:90:f1:1e:1e:1c:65:e6:46:99:be:8c:6f:
e4:69:dc:30:49:1a:10:51:c3:34:36:12:2a:fa:9e:
9f:44:d2:88:fd:03:e3:65:41:0c:80:51:5b:2d:aa:
9f:aa:6c:1e:c2:67:50:74:df:9b:c5:db:ef:ff:14:
87:95:14:82:42:da:de:17:15:94:23:6f:f1:fc:d5:
1a:7c:c3:5f:69:02:e2:a3:c6:fb:29:4a:bb:6f:f1:
80:69:fb:a0:04:41:61:4c:1b:f8:c9:0e:76:46:a7:
55:52:9d:ab:40:66:7a:fa:c3:3e:08:5b:85:e0:e3:
30:b1:47:cb:1a:ba:77:29:02:5f:c2:62:05:68:fb:
78:1a:15:de:d0:78:70:4d:b5:b1:cd:ee:ec:83:4b:
ba:5b:23:a4:9d:a2:49:51:08:9e:35:e5:3d:3f:08:
65:28:f5:e9:62:0c:39:ae:83:a3:7f:26:07:2c:9e:
c7:7a:cc:8a:d8:b9:36:05:9c:bd:f5:df:f6:23:6b:
00:3e:85:7e:ca:e1:91:cb:3d:aa:94:b5:a7:5e:a1:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:28:B4:AD:45:57:4E:73:51:94:72:39:0F:4A:92:6D:7E:C2:CE
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:50:d6:27:19:0b:d2:ed:95:08:ee:a8:48:d5:79:30:49:
ae:a8:2f:f2:72:1e:3b:e6:e8:d4:da:23:b3:79:45:00:40:77:
71:9a:97:35:c1:a2:12:3a:c5:c8:c0:82:38:58:31:dd:81:d0:
82:11:13:64:43:29:55:d2:f2:27:75:20:8e:7d:2c:5c:54:02:
ec:bf:3d:31:fc:f5:73:89:a9:5e:0b:c3:6b:a1:bc:13:45:0e:
80:cd:2b:7c:10:ae:67:45:92:24:6d:f8:38:b5:84:49:a5:db:
78:9d:9f:11:4b:66:e4:67:85:a9:92:3b:bd:e8:95:00:2e:97:
9a:c8:84:f8:6d:29:20:5d:b2:ab:88:4b:80:57:32:e7:a5:ed:
f1:ef:b0:1d:a7:e1:57:fb:23:05:c0:18:15:86:04:a3:c1:a4:
35:2e:b3:fe:80:1b:f7:5d:53:bb:15:fe:7b:94:bc:11:42:a9:
1c:15:e8:68:bc:86:37:47:89:87:4f:5f:c9:5e:ec:9b:ce:bd:
d7:9b:45:37:cd:77:e8:96:63:c8:99:76:9a:b1:c5:dd:08:c4:
dd:49:17:ea:ff:09:4d:f1:28:dd:1e:d3:82:84:8f:a5:62:59:
c4:ad:71:ab:54:c6:34:cb:70:c5:8a:e3:66:a8:22:84:e2:d6:
b8:36:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:59 2026 by rpki-client