Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: 5Chyl4FwWlVfWcYtSmRIx7X8fPPGzE6yRDw1hzjMGuI=
Subject key identifier: D7:67:F8:C8:C0:6F:27:B4:CB:EB:D5:AD:9B:FF:80:A7:FF:D4:49:A6
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 01A1408325E3F5FCF49F72CAEA327FAC5CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 17:01:38 +0000
Manifest this update: Thu 15 Oct 2026 17:01:38 +0000
Manifest next update: Fri 16 Oct 2026 17:01:38 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: J91d5ndY640vSQRLuQc59Pz0M3PSgY2AFbAQaTZ5AgU=)
2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:25:e3:f5:fc:f4:9f:72:ca:ea:32:7f:ac:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Oct 15 17:01:38 2026 GMT
Not After : Oct 16 17:01:38 2026 GMT
Subject: CN=d767f8c8c06f27b4cbebd5ad9bff80a7ffd449a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:b9:de:87:b6:1e:b5:3c:6d:79:a4:29:77:
ea:f3:04:ff:1b:19:74:8a:bb:98:dc:88:3a:f7:f3:
a6:30:d0:46:a4:62:ff:40:8a:94:de:d0:45:14:39:
87:e0:b8:d9:23:c2:8d:fc:ed:fb:d3:e0:cc:a9:6c:
f0:6e:d9:d2:f7:d3:8f:66:9c:8b:96:2e:c6:04:93:
03:98:04:19:f2:3d:37:b4:3b:4d:d5:be:bd:36:85:
20:4c:65:fa:ff:ff:81:65:1f:91:de:c7:64:1f:fb:
97:de:d9:27:c7:6f:9b:40:45:a0:1f:87:6c:c1:e8:
d9:6e:6c:5e:88:36:b7:6c:e6:2a:b0:3d:32:a5:21:
56:bc:7e:e7:e5:7b:97:83:d1:38:a8:8d:82:51:9a:
cd:99:a5:aa:a5:89:a1:58:7e:7c:19:17:f1:e7:76:
25:85:80:6f:c0:33:d3:47:83:0c:6c:c2:32:bb:b8:
4c:4e:69:26:00:7f:58:1d:d8:00:6b:de:3a:f3:19:
f0:8d:a9:c2:f0:d2:1e:97:83:9e:11:f8:05:2b:c8:
79:32:75:3f:6a:f8:22:c3:4b:7e:80:61:47:3a:06:
67:7c:d2:09:27:5a:2d:ec:e9:9f:01:e8:f7:fd:4c:
7a:95:6b:52:d6:18:27:30:76:ee:6b:7f:97:04:e5:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:F8:C8:C0:6F:27:B4:CB:EB:D5:AD:9B:FF:80:A7:FF:D4:49:A6
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:b8:c3:f3:b4:b2:6a:a5:90:0d:08:22:a7:11:89:2f:fa:
12:ed:45:5f:85:b8:db:85:b7:ab:cd:bf:08:f5:27:49:23:7b:
13:14:d1:f5:5e:aa:d6:d6:e1:bb:29:b8:e4:5b:ff:3d:dd:98:
a0:2f:95:0a:ef:c4:48:8d:37:65:46:02:82:15:af:ab:87:1e:
fd:d8:d4:09:c0:70:65:0a:b2:0a:10:a2:1c:d5:bb:34:d8:f9:
07:78:21:80:76:96:c4:98:8a:51:9c:dc:59:24:56:3a:b6:ec:
7c:b3:3c:21:df:e9:e9:fe:56:c2:4c:bc:26:a9:32:8f:e0:37:
84:54:f6:61:3c:eb:06:20:fc:fb:41:f3:d5:0f:bd:75:c8:ad:
69:8f:56:48:ce:eb:99:6e:8a:eb:e3:25:b9:75:43:85:90:0a:
cc:f1:10:9a:9a:e1:a4:cb:6b:53:bc:97:87:05:b3:ff:b4:a3:
46:f1:37:72:e3:80:cb:0b:3d:52:bd:49:b9:42:a6:00:93:6b:
47:ec:0d:bd:d9:8b:bd:a2:5b:9a:6c:fb:15:fd:c4:30:d8:fc:
e9:d8:cb:23:f6:d7:d0:3b:8d:83:b3:1a:fe:d3:ea:41:a1:d1:
2e:14:5a:a8:87:aa:08:df:23:fa:89:ed:df:05:bd:a2:4d:2a:
a0:9a:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:47 2026 by rpki-client