Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: W8La7mSNoL5jYwDKIbjflZ5/+3aKzgrR+86fWqKqot8=
Subject key identifier: 45:B4:EC:38:53:0F:AB:3B:6C:1C:AD:95:29:54:6A:3F:34:65:60:82
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 019FA0E0B602134854271F3ACE576F29F023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: 0647
Signing time: Mon 27 Jul 2026 00:01:48 +0000
Manifest this update: Mon 27 Jul 2026 00:01:48 +0000
Manifest next update: Tue 28 Jul 2026 00:01:48 +0000
Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: JdnkDhvNcNRoMSrEwiUe+CEZDmYLQkymcJn5tidF6OE=)
3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:b6:02:13:48:54:27:1f:3a:ce:57:6f:29:f0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jul 27 00:01:48 2026 GMT
Not After : Jul 28 00:01:48 2026 GMT
Subject: CN=45b4ec38530fab3b6c1cad9529546a3f34656082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:a8:1a:2d:87:3a:da:ad:c9:d5:e9:8a:c7:
98:15:6c:60:93:33:f3:7a:ed:c7:e5:6e:13:71:31:
ec:95:a5:cf:40:d7:d2:18:d0:c7:71:a0:18:c2:aa:
af:0d:ec:4c:40:02:ca:2b:40:23:d4:2d:52:8f:94:
94:10:0f:bd:86:63:13:12:bf:81:b8:d0:cf:d2:92:
9d:90:58:d7:0c:33:a7:a9:d2:23:a3:38:cb:17:7a:
44:6d:88:6c:5b:d9:09:a4:b2:b8:37:cc:fc:6b:5f:
9c:f1:82:e8:c1:0d:fb:dc:0b:3d:af:f8:ea:05:d9:
7e:a6:15:6b:9e:76:8b:70:d0:b0:64:2a:5b:10:eb:
92:31:72:66:18:82:12:cc:21:37:fe:fd:e1:f5:19:
89:16:11:a7:fe:69:2d:12:12:df:8f:02:69:5d:e2:
a9:ab:ea:53:b7:e9:c7:b2:81:fe:88:3d:c5:b8:f2:
5b:e5:73:e2:3f:99:77:13:e0:30:53:fa:4f:33:88:
a9:29:9b:f2:5d:46:b6:bf:6a:dc:c1:b4:60:49:42:
26:3f:bd:90:9c:50:65:26:99:9f:72:16:2a:88:65:
d2:e6:d4:e2:60:a0:c4:f5:91:f5:47:2a:79:f7:79:
49:26:0d:57:98:28:bb:7c:79:14:a4:80:ea:35:d5:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:EC:38:53:0F:AB:3B:6C:1C:AD:95:29:54:6A:3F:34:65:60:82
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:18:3a:80:d7:2f:a9:3d:f2:0a:af:5a:87:a1:a3:64:da:
4e:4b:c7:77:7f:55:79:86:c7:31:9b:ca:a2:92:98:f7:87:df:
9f:73:19:45:84:28:4f:b1:1c:61:93:c4:31:d6:4a:f8:b3:85:
8e:39:42:19:cf:7d:df:d4:a0:3c:a2:45:ec:7e:6e:1d:a3:8f:
70:f2:46:72:13:94:b8:05:c2:89:60:30:e1:59:5c:68:ca:02:
87:ef:da:52:a5:b6:85:e4:c7:02:da:39:c4:81:8e:d1:46:64:
5c:68:4b:ae:23:43:e5:4e:2b:12:41:c0:ac:99:15:ef:82:0b:
6c:62:cc:de:fa:45:67:3e:8e:4f:01:73:23:20:0d:84:24:ee:
e4:2a:80:1d:4c:56:c6:03:02:26:da:83:23:4e:96:88:a1:89:
a4:c5:1e:29:27:ca:2f:ae:7f:42:b4:2b:9f:cc:f4:5b:3f:39:
b9:0c:d7:6d:72:f5:e6:15:0b:49:2b:a1:8d:54:29:f9:f9:91:
a4:25:00:db:3f:d8:a4:5d:2d:7d:72:aa:27:76:55:57:b7:18:
8c:cf:73:38:0f:df:28:b3:77:87:39:c6:b2:09:7e:5c:8c:d5:
16:2d:bb:ad:a0:02:da:e7:3e:f2:2e:26:35:32:59:85:91:97:
5e:f9:09:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4LYCE0hUJx86zldvKfAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz
ZTJjOTAwHhcNMjYwNzI3MDAwMTQ4WhcNMjYwNzI4MDAwMTQ4WjAzMTEwLwYDVQQD
Eyg0NWI0ZWMzODUzMGZhYjNiNmMxY2FkOTUyOTU0NmEzZjM0NjU2MDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BGoGi2HOtqtydXpiseYFWxgkzPz
eu3H5W4TcTHslaXPQNfSGNDHcaAYwqqvDexMQALKK0Aj1C1Sj5SUEA+9hmMTEr+B
uNDP0pKdkFjXDDOnqdIjozjLF3pEbYhsW9kJpLK4N8z8a1+c8YLowQ373As9r/jq
Bdl+phVrnnaLcNCwZCpbEOuSMXJmGIISzCE3/v3h9RmJFhGn/mktEhLfjwJpXeKp
q+pTt+nHsoH+iD3FuPJb5XPiP5l3E+AwU/pPM4ipKZvyXUa2v2rcwbRgSUImP72Q
nFBlJpmfchYqiGXS5tTiYKDE9ZH1Ryp593lJJg1XmCi7fHkUpIDqNdXhHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW07DhTD6s7bBytlSlUaj80ZWCCMB8GA1UdIwQY
MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt
ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh
LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe8YOoDX
L6k98gqvWoeho2TaTkvHd39VeYbHMZvKopKY94ffn3MZRYQoT7EcYZPEMdZK+LOF
jjlCGc9939SgPKJF7H5uHaOPcPJGchOUuAXCiWAw4VlcaMoCh+/aUqW2heTHAto5
xIGO0UZkXGhLriND5U4rEkHArJkV74ILbGLM3vpFZz6OTwFzIyANhCTu5CqAHUxW
xgMCJtqDI06WiKGJpMUeKSfKL65/QrQrn8z0Wz85uQzXbXL15hULSSuhjVQp+fmR
pCUA2z/YpF0tfXKqJ3ZVV7cYjM9zOA/fKLN3hznGsgl+XIzVFi27raAC2uc+8i4m
NTJZhZGXXvkJlw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:43 2026 by rpki-client