Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: jI/q2a9LUdoTXq4SLTKHa4GGAqrs077I63awLKTFm0k=
Subject key identifier: 2C:B4:9C:5D:57:87:F1:5A:AD:8C:6C:38:FF:40:3B:DF:00:A5:72:A5
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 01A10693DAFC6EC9C3B95314AFC9028B3F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 11:01:55 +0000
Manifest this update: Sun 04 Oct 2026 11:01:55 +0000
Manifest next update: Mon 05 Oct 2026 11:01:55 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: P2LV7jeuK09kV3jlyKHQrI1NxVOhi0AvONU5uYORudI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:da:fc:6e:c9:c3:b9:53:14:af:c9:02:8b:3f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Oct 4 11:01:55 2026 GMT
Not After : Oct 5 11:01:55 2026 GMT
Subject: CN=2cb49c5d5787f15aad8c6c38ff403bdf00a572a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:ff:0d:59:df:bd:74:38:57:29:8b:32:85:
6e:60:8b:7c:70:22:42:b0:94:0e:ce:cb:d1:59:a5:
da:fa:89:e9:a1:00:df:b1:39:e3:b1:dd:84:15:35:
e7:85:f8:21:e4:ea:9a:c5:9a:38:ee:00:90:b0:5c:
99:30:4a:78:cf:04:9c:2c:c1:13:a3:92:3b:af:02:
e6:70:3c:e6:30:e7:58:bf:76:ab:18:f5:c5:cc:d2:
55:a4:5a:36:f8:f3:b0:87:7d:e4:a0:42:7a:49:ff:
99:68:f7:b3:e3:bb:18:fe:e2:ab:7c:e4:b8:c7:37:
87:43:7b:1d:a7:60:63:4a:3d:37:44:1b:36:52:eb:
6d:bc:3f:81:7a:bf:40:a8:49:40:d2:90:83:51:a0:
b6:9c:7c:5d:7f:13:e1:3e:05:41:01:05:50:e1:3a:
e1:f0:95:b3:84:44:d6:c1:33:b7:69:71:96:44:78:
06:a6:76:e6:e4:b4:eb:eb:2e:cc:fb:31:92:d7:42:
7b:72:3e:f2:4b:18:ae:b6:1c:d3:b5:23:92:7b:65:
86:9d:00:56:53:f8:c4:ad:9f:35:12:08:29:f1:42:
f8:62:2c:30:44:12:0f:3e:b5:4c:1c:62:06:5b:77:
b7:6e:e3:b9:57:62:6b:7a:80:45:0a:21:a4:33:25:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:9C:5D:57:87:F1:5A:AD:8C:6C:38:FF:40:3B:DF:00:A5:72:A5
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:12:a0:88:46:f6:1d:d0:e4:f9:b4:06:42:52:fc:ce:22:
bf:3e:35:85:d9:ee:10:a9:22:ec:de:98:2f:f2:92:07:b3:44:
9c:d3:43:0f:ec:e7:4c:58:fa:dc:5c:4a:9a:41:38:f9:ef:d5:
f7:4a:49:22:de:bf:97:86:ae:25:c3:43:8d:44:1c:27:57:af:
a7:83:d1:59:f6:45:30:2d:32:7a:a9:24:90:5c:e6:a6:39:83:
1a:9b:9f:d0:ad:e4:77:6a:3f:65:ab:9e:b0:29:7b:f9:69:49:
75:68:29:41:f5:0d:c3:5c:b8:d7:dc:1f:dd:b5:39:65:f5:e6:
67:8e:05:e8:fc:d0:94:0f:81:a3:0a:e5:96:b1:6f:ce:9c:c1:
ee:d8:cd:eb:2d:6d:64:43:10:7f:d7:4a:b4:ae:54:0a:01:f4:
4e:70:d9:8a:91:90:62:85:6c:1e:15:50:a9:87:ad:53:59:8c:
45:c5:f1:d0:00:8f:ff:ed:aa:ad:6d:36:50:f8:fe:69:28:86:
6a:21:9f:79:3f:30:9b:8d:8d:ca:d0:15:d7:57:49:1e:51:00:
f2:c6:de:3d:f7:89:1f:1c:39:3a:80:59:6e:15:97:ba:7b:f5:
dc:16:47:2f:b5:25:ec:6d:28:05:12:fe:d2:fd:5b:8b:b5:2f:
ea:ac:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:28:58 2026 by rpki-client