Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: ize3h8TdfgRrN/5TLP2/Re/aIAK1lIo3jPsvhIKpYcU=
Subject key identifier: B8:B7:72:20:C5:8E:87:2B:E7:D3:E0:2C:D0:08:07:6D:FE:5F:40:76
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019DCF7543671BC905C12C24694071D11C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0556
Signing time: Mon 27 Apr 2026 15:01:01 +0000
Manifest this update: Mon 27 Apr 2026 15:01:01 +0000
Manifest next update: Tue 28 Apr 2026 15:01:01 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: ++DMRZeTpxTTK7zb62MroPH/OIUzrZ55ob+vilySXzU=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:43:67:1b:c9:05:c1:2c:24:69:40:71:d1:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Apr 27 15:01:01 2026 GMT
Not After : Apr 28 15:01:01 2026 GMT
Subject: CN=b8b77220c58e872be7d3e02cd008076dfe5f4076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:9b:0f:ab:91:08:49:e4:29:59:fc:2b:17:
77:36:b1:08:4a:78:66:df:6e:d0:5e:3b:68:bc:1e:
df:f3:e9:9b:23:ce:44:94:59:d8:46:74:aa:81:ab:
18:a0:56:9e:ba:e4:92:e5:62:d9:e4:8f:35:36:82:
17:d2:f7:53:8b:b9:9c:39:cc:41:2f:76:65:c2:ef:
4b:71:13:c7:31:19:63:7b:67:06:09:ba:ba:5e:e1:
2b:ef:44:c3:b8:e1:41:14:dc:f8:21:22:f6:2e:d2:
2e:45:a5:ca:07:85:05:26:32:79:b3:ca:85:26:64:
36:60:a3:af:89:82:2f:38:77:3d:8c:c0:a2:9d:39:
67:b3:ad:43:d9:19:b3:67:1b:f6:ed:2a:d8:75:8b:
76:7d:52:47:2d:8b:b9:b5:af:fe:9a:04:08:93:ba:
32:ff:38:1b:32:c5:4f:3f:03:f6:2f:33:b5:31:ef:
84:6a:81:db:66:e6:61:73:66:01:ad:67:5b:4a:16:
dc:cb:45:a7:3d:b3:c1:19:c6:9d:c7:4d:2d:ec:0e:
93:dc:06:b5:4c:db:e6:d5:3d:07:2a:98:69:d9:1e:
6e:e6:45:36:e5:d1:f5:2f:cb:8d:df:58:cc:28:c6:
0d:a1:5d:8d:bb:dd:a3:d4:d4:a9:82:22:a7:e9:89:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:72:20:C5:8E:87:2B:E7:D3:E0:2C:D0:08:07:6D:FE:5F:40:76
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:9e:09:5d:87:35:4e:5a:36:41:75:27:8d:09:8d:48:fb:
8a:d0:ba:bf:0b:48:f4:20:82:47:7e:de:f3:4d:ee:43:da:ca:
19:6e:2a:69:cd:79:49:f6:fb:6e:79:54:af:ef:3f:2e:b8:51:
a0:7f:ba:94:69:f4:2c:08:0b:cb:9d:50:2a:f4:6d:b7:12:30:
40:b3:53:1c:72:3e:f6:6c:46:89:72:7c:cb:6c:ae:3c:54:6f:
60:0f:b1:fc:c6:bd:fd:66:c8:2f:03:6e:9f:d2:48:16:60:96:
1c:d2:a5:ce:05:19:44:0f:a2:74:63:1a:b1:ca:f3:38:8d:8d:
c0:11:f6:fa:34:69:fb:38:b8:94:45:bc:dc:0e:b2:80:4b:23:
ea:47:d1:42:4b:7b:f1:a7:3c:3e:12:ce:9c:d8:68:46:83:c6:
61:3e:b5:08:52:93:f0:18:1b:b1:54:0f:16:88:65:8d:50:3a:
4b:0b:12:7b:96:94:8a:ae:e4:80:34:85:65:60:5a:2a:74:0f:
97:ea:df:eb:2b:19:f1:3c:9d:ef:92:25:49:9c:06:e7:70:c3:
af:c2:71:9f:0b:7d:31:a6:6d:e7:57:c1:55:31:5f:c5:06:98:
63:4b:f6:98:8c:18:98:95:fb:d1:92:1b:81:cc:1c:03:79:92:
a2:1e:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:28 2026 by rpki-client