Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: 404NoIspYnMn71KxJ5/ufMdKmJatpU8pyxIRSGkxDWg=
Subject key identifier: 27:97:76:65:66:82:1C:FB:F8:1B:32:64:CF:CC:F2:4A:06:8D:AA:4B
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019CE5C8B42A039A2B1BAF33A3CBF9CAB7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 04DD
Signing time: Fri 13 Mar 2026 06:01:01 +0000
Manifest this update: Fri 13 Mar 2026 06:01:01 +0000
Manifest next update: Sat 14 Mar 2026 06:01:01 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: Le/441Zh3+JHD0wcPBlMAEsuvqpDadeJNafeEUdKSKI=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:b4:2a:03:9a:2b:1b:af:33:a3:cb:f9:ca:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Mar 13 06:01:01 2026 GMT
Not After : Mar 14 06:01:01 2026 GMT
Subject: CN=2797766566821cfbf81b3264cfccf24a068daa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:7d:00:19:59:94:be:2a:57:86:04:97:d3:
13:5e:32:44:53:38:94:62:47:84:27:a2:96:f3:f0:
b1:26:5a:62:aa:1b:95:5d:32:fb:79:c5:be:d3:b6:
1b:c9:2f:28:8e:c2:44:50:15:4f:68:cc:dd:78:a4:
54:51:04:0c:37:a1:38:05:f0:8c:dd:9b:d1:48:5f:
85:1d:4e:b9:97:a1:35:80:d8:d4:03:df:49:7e:89:
47:05:18:9b:01:5e:1d:15:01:ab:3b:51:59:7c:e5:
9c:62:41:c5:58:9f:a9:99:bc:0f:c1:ec:55:d0:6a:
d1:87:db:f8:84:2b:b9:f1:4e:9f:51:af:33:88:d9:
07:1d:5f:77:93:a1:2a:86:91:12:31:2b:75:3b:1f:
85:57:f0:83:18:c3:d4:1e:27:d9:82:e6:83:5a:32:
4b:3e:ef:88:8f:18:b6:c4:43:b8:b7:d7:bf:9c:68:
d1:57:8b:1a:08:6e:fe:a3:84:73:df:3d:27:47:ed:
ad:3c:7b:3e:b2:5f:ed:b0:f9:06:ea:93:78:aa:97:
f1:30:3f:2b:7a:f8:d6:63:9c:de:df:0d:0a:84:3d:
22:30:36:a7:66:20:4b:87:27:f2:33:59:0e:f7:58:
ec:cd:a5:fb:a5:f8:92:17:8c:44:4e:9c:69:c0:7d:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:97:76:65:66:82:1C:FB:F8:1B:32:64:CF:CC:F2:4A:06:8D:AA:4B
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:36:1a:6d:40:8a:57:a0:bf:be:ef:8e:cb:06:ea:34:87:46:
70:1e:d5:8e:a6:c4:df:3c:1d:07:c1:e8:cf:ba:ba:25:48:31:
3d:81:a0:0c:3c:09:cd:12:cb:0b:49:6a:29:52:0a:3d:a7:02:
c1:32:9d:a2:fa:ed:77:ed:66:3c:3c:09:f1:62:87:63:15:fc:
a5:ad:5e:fe:11:9f:5a:39:0e:cb:55:52:0a:bb:e1:e7:fa:bc:
e7:ef:76:24:98:15:b5:ed:34:46:38:30:f5:f0:f1:e8:0c:8d:
88:69:a0:7f:fe:37:2a:f4:09:f5:a5:1a:a5:9b:62:77:7e:ca:
43:ab:3a:40:27:57:b7:13:09:65:b1:4a:74:cd:0f:51:89:0f:
76:8d:30:69:88:c2:ae:52:d4:63:a0:de:e3:1c:37:8d:e5:43:
4b:03:79:30:40:54:3b:c8:26:2c:3a:12:fc:9c:29:6c:46:f5:
3e:97:3d:cb:24:81:2b:f6:46:e9:3d:04:e2:30:3d:dd:53:79:
72:73:37:e3:30:6b:c7:19:36:00:d6:40:c7:b7:20:d6:13:2c:
f0:03:4d:a9:ce:df:91:f6:b4:fc:30:c2:45:58:59:4c:9b:0a:
34:a7:17:b9:9a:e0:fe:17:d4:8e:b2:b7:68:02:9c:0b:eb:3d:
51:ea:57:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyLQqA5orG68zo8v5yrfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz
ZTJjOTAwHhcNMjYwMzEzMDYwMTAxWhcNMjYwMzE0MDYwMTAxWjAzMTEwLwYDVQQD
EygyNzk3NzY2NTY2ODIxY2ZiZjgxYjMyNjRjZmNjZjI0YTA2OGRhYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8B9ABlZlL4qV4YEl9MTXjJEUziU
YkeEJ6KW8/CxJlpiqhuVXTL7ecW+07YbyS8ojsJEUBVPaMzdeKRUUQQMN6E4BfCM
3ZvRSF+FHU65l6E1gNjUA99JfolHBRibAV4dFQGrO1FZfOWcYkHFWJ+pmbwPwexV
0GrRh9v4hCu58U6fUa8ziNkHHV93k6EqhpESMSt1Ox+FV/CDGMPUHifZguaDWjJL
Pu+Ijxi2xEO4t9e/nGjRV4saCG7+o4Rz3z0nR+2tPHs+sl/tsPkG6pN4qpfxMD8r
evjWY5ze3w0KhD0iMDanZiBLhyfyM1kO91jszaX7pfiSF4xETpxpwH3QAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeXdmVmghz7+BsyZM/M8koGjapLMB8GA1UdIwQY
MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt
ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh
LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzYabUCK
V6C/vu+OywbqNIdGcB7VjqbE3zwdB8Hoz7q6JUgxPYGgDDwJzRLLC0lqKVIKPacC
wTKdovrtd+1mPDwJ8WKHYxX8pa1e/hGfWjkOy1VSCrvh5/q85+92JJgVte00Rjgw
9fDx6AyNiGmgf/43KvQJ9aUapZtid37KQ6s6QCdXtxMJZbFKdM0PUYkPdo0waYjC
rlLUY6De4xw3jeVDSwN5MEBUO8gmLDoS/JwpbEb1Ppc9yySBK/ZG6T0E4jA93VN5
cnM34zBrxxk2ANZAx7cg1hMs8ANNqc7fkfa0/DDCRVhZTJsKNKcXuZrg/hfUjrK3
aAKcC+s9UepXUg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:14 2026 by rpki-client