Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: PaloYSjDcUtKzuyFTbhZ0Mm9NWoM3nUEPF1hKO7ZYpk=
Subject key identifier: 52:11:78:5A:31:EA:A2:6D:A7:CE:BB:C4:DD:7C:1C:FE:F0:D3:5F:63
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019D3940937C0679B65F31ECBD10BDDC4221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: KrxKUvXq9xK/ZM2/Wj4/eATNd8Frh6CB/4isig+ObFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:93:7c:06:79:b6:5f:31:ec:bd:10:bd:dc:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=5211785a31eaa26da7cebbc4dd7c1cfef0d35f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:08:41:df:1f:77:f0:d9:ac:2a:73:b4:58:
4c:3e:93:46:31:23:18:97:af:fd:d6:65:66:31:23:
51:9f:0c:71:ad:7c:70:3b:de:69:f0:ce:89:2e:08:
ac:34:34:f4:95:3b:90:f3:bd:9a:30:e2:9c:40:63:
29:ba:49:e4:3c:ee:51:f6:5c:73:b9:ce:4a:57:19:
60:14:d8:da:dc:d2:86:da:aa:41:5b:79:df:31:13:
10:3c:3e:25:47:59:41:b9:65:c5:fd:50:f9:bb:a3:
e5:02:b3:66:b3:30:c7:c6:20:0f:a2:73:f6:07:0a:
ee:0c:9d:13:39:28:aa:fa:3b:eb:07:cc:87:72:08:
76:39:08:b5:18:34:1b:54:8f:97:c4:2a:87:8d:74:
c4:b3:dd:8b:0d:4b:8b:94:a2:3c:03:24:30:d2:b4:
d9:b9:5b:7c:1d:c3:2f:09:58:84:7d:d3:38:f4:f0:
db:04:29:16:b9:7b:4c:4b:3e:da:7b:07:64:53:c7:
85:42:00:f7:47:80:09:08:1f:17:91:f2:ae:bc:4e:
a5:e6:e8:95:93:63:d8:45:9f:28:89:57:42:dc:ea:
e6:33:65:ea:b0:49:37:34:f4:4a:cf:4f:e5:ad:28:
4d:15:a2:61:99:33:2f:09:e8:e4:44:8f:ef:b8:2a:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:78:5A:31:EA:A2:6D:A7:CE:BB:C4:DD:7C:1C:FE:F0:D3:5F:63
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:eb:0f:e4:fe:eb:ae:4b:aa:af:d4:f2:bd:9c:07:a1:e2:9d:
3f:4b:58:d4:fb:9b:fc:3f:b2:5c:84:00:a1:29:e3:13:6d:36:
62:56:e4:5c:38:a3:dd:86:cf:99:4a:62:a6:1e:94:66:e1:3a:
da:56:ca:3c:7d:32:15:a4:24:d9:42:28:e6:3a:e3:d0:b2:56:
de:76:5d:14:d4:1a:32:35:00:47:7f:37:ac:0d:d2:64:d1:b0:
81:75:61:2a:7c:a9:c8:8c:cb:1b:96:e0:1a:8a:3c:d7:91:8d:
f8:b4:2c:40:4c:15:d6:24:8f:e3:01:39:7b:29:c1:31:25:0c:
92:d8:49:a5:cd:2c:48:f4:65:0f:d6:5a:d1:28:11:ed:40:25:
0d:30:c0:a4:39:d7:00:1f:5c:ac:b6:54:e9:05:ec:b1:bf:6f:
ea:b8:c0:4e:96:0d:e2:c8:12:c1:bd:ab:8d:e9:0b:7b:91:25:
49:59:7f:54:a0:ee:7e:f9:b1:ae:a9:59:12:67:80:0a:1f:e5:
01:dc:ca:b9:56:2d:c2:eb:30:c0:31:be:73:34:1f:63:bc:9d:
f1:c2:20:49:03:86:6e:b5:a5:f9:47:3b:0b:06:1b:ed:7f:78:
15:d0:aa:0e:f5:9d:69:7b:cc:75:f5:cb:2e:d0:cf:7a:bf:41:
37:29:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:14 2026 by rpki-client