Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: e21U9iWNLoObfvrERDwYZ5M9TBJKSqWDjqbap3iSGBs=
Subject key identifier: 52:02:31:1D:ED:4F:C0:42:B7:1B:3F:2D:A2:78:A8:D8:2C:17:06:ED
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019F1830FDFD8C46DEFCAA5A55F7638A2CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:01:31 +0000
Manifest this update: Tue 30 Jun 2026 11:01:31 +0000
Manifest next update: Wed 01 Jul 2026 11:01:31 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: zFAlxV8Bzf0Gja4h5cXHqD3Bed1Vkwsma4xevPjl5kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:fd:fd:8c:46:de:fc:aa:5a:55:f7:63:8a:2c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jun 30 11:01:31 2026 GMT
Not After : Jul 1 11:01:31 2026 GMT
Subject: CN=5202311ded4fc042b71b3f2da278a8d82c1706ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:1a:1a:0d:04:97:31:be:07:80:dc:dd:0f:
5d:aa:f0:33:e4:20:0c:b3:ec:76:cd:ad:58:8c:45:
0d:c3:c3:89:56:f7:36:41:43:7c:11:12:d1:d7:e0:
ed:e2:64:eb:36:cb:2e:f3:a0:76:a9:a0:d3:13:99:
02:67:37:bf:45:ce:7d:65:79:18:c7:8b:90:0f:b5:
7c:94:f9:2b:23:cb:d2:13:0e:02:76:26:df:ef:55:
c4:f7:eb:70:c5:d6:cf:2c:f2:e2:ab:c9:3d:35:4a:
2e:e2:53:3c:a8:e9:f1:b5:27:06:64:d3:9e:77:fa:
71:54:90:11:1d:d1:bb:f5:92:cf:b9:22:c6:b8:71:
a2:8a:a9:50:e0:59:08:5d:d1:82:88:77:d5:75:26:
67:15:79:d4:dc:29:fa:b0:31:95:ab:2c:16:db:d0:
81:fc:59:ab:9e:38:49:4a:22:c3:43:b2:84:31:01:
61:f3:e7:e2:6f:be:64:51:1c:c5:87:8d:d6:6f:c7:
82:03:1a:8c:0d:bb:6b:84:c8:84:b9:be:55:e9:ef:
00:da:2d:93:b1:fd:49:a4:01:c4:cc:17:be:a0:9b:
94:13:00:41:47:e8:f7:a5:8f:75:9d:d1:3f:81:83:
86:95:eb:5d:f8:d0:42:80:97:fd:99:cb:f7:1d:c3:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:31:1D:ED:4F:C0:42:B7:1B:3F:2D:A2:78:A8:D8:2C:17:06:ED
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:9b:de:14:26:3c:a3:78:86:36:7f:fd:8d:75:49:8a:ab:
24:5d:4c:7d:55:12:91:99:14:b9:95:ea:d5:99:d2:26:34:21:
5d:aa:a8:eb:64:7c:3c:34:08:8c:cc:56:05:ed:d0:b2:34:52:
1d:b9:f7:d3:13:88:32:dd:51:83:fe:a7:da:92:90:3e:2d:7d:
3a:bd:fe:c3:1a:8d:ed:0e:e8:b8:1c:5a:6b:dd:9a:3d:36:0f:
48:0b:4e:07:0b:26:56:6b:e4:aa:5d:3c:f5:d1:3a:fb:48:33:
fe:01:f3:4d:46:c7:87:82:aa:fa:c6:df:be:bf:42:84:e5:33:
6d:fb:94:db:d4:08:05:9f:21:2c:7e:c0:38:bd:27:08:29:c4:
b1:fc:34:06:eb:e3:d8:a5:bd:f7:23:07:9a:01:ed:84:b7:5e:
e1:f0:08:f6:3b:9f:b9:1e:f8:84:ff:14:d9:2d:eb:15:41:50:
51:43:df:ae:25:17:57:af:a8:7a:14:08:1d:f9:e8:0b:6a:22:
89:02:63:ec:da:89:ab:67:32:da:6d:9b:86:a0:3a:a2:1f:f5:
80:cc:57:c4:d9:b1:f8:45:26:87:f1:dd:0e:66:c3:7e:09:cd:
e3:44:fb:5c:50:c9:67:54:37:fe:90:54:8a:9c:15:8a:d5:8b:
56:84:a5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMP39jEbe/KpaVfdjiiy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx
OGU3NTAwHhcNMjYwNjMwMTEwMTMxWhcNMjYwNzAxMTEwMTMxWjAzMTEwLwYDVQQD
Eyg1MjAyMzExZGVkNGZjMDQyYjcxYjNmMmRhMjc4YThkODJjMTcwNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqloaGg0ElzG+B4Dc3Q9dqvAz5CAM
s+x2za1YjEUNw8OJVvc2QUN8ERLR1+Dt4mTrNssu86B2qaDTE5kCZze/Rc59ZXkY
x4uQD7V8lPkrI8vSEw4Cdibf71XE9+twxdbPLPLiq8k9NUou4lM8qOnxtScGZNOe
d/pxVJARHdG79ZLPuSLGuHGiiqlQ4FkIXdGCiHfVdSZnFXnU3Cn6sDGVqywW29CB
/FmrnjhJSiLDQ7KEMQFh8+fib75kURzFh43Wb8eCAxqMDbtrhMiEub5V6e8A2i2T
sf1JpAHEzBe+oJuUEwBBR+j3pY91ndE/gYOGletd+NBCgJf9mcv3HcNFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFICMR3tT8BCtxs/LaJ4qNgsFwbtMB8GA1UdIwQY
MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt
YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi
LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfCb3hQm
PKN4hjZ//Y11SYqrJF1MfVUSkZkUuZXq1ZnSJjQhXaqo62R8PDQIjMxWBe3QsjRS
Hbn30xOIMt1Rg/6n2pKQPi19Or3+wxqN7Q7ouBxaa92aPTYPSAtOBwsmVmvkql08
9dE6+0gz/gHzTUbHh4Kq+sbfvr9ChOUzbfuU29QIBZ8hLH7AOL0nCCnEsfw0Buvj
2KW99yMHmgHthLde4fAI9jufuR74hP8U2S3rFUFQUUPfriUXV6+oehQIHfnoC2oi
iQJj7NqJq2cy2m2bhqA6oh/1gMxXxNmx+EUmh/HdDmbDfgnN40T7XFDJZ1Q3/pBU
ipwVitWLVoSlzQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:30 2026 by rpki-client