Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: DQbfRNPgkqJ+U42lENOzGZ96/4zKCMRqeUVhahUM1Xc=
Subject key identifier: C5:68:12:8C:A9:C1:7B:9D:AF:C6:DB:CC:EF:41:B7:BD:B8:C7:00:1C
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 01A001DD7AF0DA1DF1140478DE3C398B65C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:01:27 +0000
Manifest this update: Fri 14 Aug 2026 20:01:27 +0000
Manifest next update: Sat 15 Aug 2026 20:01:27 +0000
Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: /3t1NEaqJp7fVajKireASIjqJsANm1t5tFMcA3dWgA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:7a:f0:da:1d:f1:14:04:78:de:3c:39:8b:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Aug 14 20:01:27 2026 GMT
Not After : Aug 15 20:01:27 2026 GMT
Subject: CN=c568128ca9c17b9dafc6dbccef41b7bdb8c7001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:47:f0:82:69:34:3b:49:23:54:8e:13:77:
c9:d2:46:45:14:57:10:dd:74:c4:f6:38:6d:ee:eb:
c0:f2:2a:11:85:3b:4b:43:50:a2:15:16:43:ca:ce:
31:6a:4f:dc:4f:e3:83:a4:6b:c9:21:e0:f1:57:b0:
fd:c6:fe:ee:69:6c:3e:ae:30:2d:ae:96:44:cc:d5:
41:34:16:d6:e8:6c:d4:b0:54:54:fa:aa:6c:bb:ee:
d5:91:26:cf:86:7a:dc:7c:f3:5e:09:50:4a:06:9b:
56:43:82:41:ca:db:34:44:4c:ad:08:51:60:c1:b1:
78:cc:e2:7c:7d:c4:1d:4d:e2:11:5b:46:ed:0e:3a:
83:ad:61:f0:83:2f:c3:94:99:33:3f:1c:3e:18:f3:
03:4f:f1:4e:a5:8d:31:5d:db:c8:c2:df:df:c6:5b:
0d:ea:55:51:c8:e3:ec:cb:d4:a5:32:8e:13:a5:81:
be:75:08:ca:df:47:cd:2b:17:68:28:dd:80:9a:43:
4b:5c:af:70:06:45:03:15:9c:16:fc:7c:31:4e:4b:
c2:0f:7a:f1:d5:fe:9d:90:4f:52:80:c4:28:7b:91:
9d:44:f1:de:a2:6f:fb:03:8c:a4:67:78:03:fb:d0:
a0:07:40:16:90:6b:f8:0e:56:e8:97:30:61:fe:04:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:12:8C:A9:C1:7B:9D:AF:C6:DB:CC:EF:41:B7:BD:B8:C7:00:1C
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:02:91:55:da:c5:9c:91:01:52:62:d2:db:77:e5:9b:dd:
c1:20:c5:15:a0:a9:8b:5b:37:07:95:dc:32:81:38:6e:7d:5c:
9f:4d:a6:d7:3c:11:44:1a:69:71:6e:8c:88:e5:55:67:ed:20:
94:10:fa:2f:fa:0f:2d:97:14:76:47:aa:dc:3a:06:53:9e:3d:
43:2b:d2:02:f8:a6:16:bf:65:5c:21:3a:2b:12:8d:c6:7a:c4:
48:e5:ba:b7:24:28:35:72:91:68:ac:7d:88:92:6d:0c:43:58:
3b:94:bd:60:34:f5:a2:7d:41:fd:7f:02:3e:d1:db:e4:b7:71:
22:80:33:7d:00:b4:17:91:35:aa:de:b8:b5:ce:d0:ff:68:5d:
08:df:db:f5:ce:b7:de:89:ee:68:f7:49:6c:c1:ef:30:2f:42:
eb:49:f0:e5:9e:3a:1c:c0:58:5d:93:8d:85:91:04:df:1e:ff:
25:03:4d:08:07:4b:fe:5a:3a:27:96:ff:64:78:5e:b7:14:aa:
18:e3:41:0a:d5:f0:fd:be:93:20:c3:ec:5b:be:85:a4:58:37:
be:68:57:9f:b5:14:24:4f:e8:87:be:c0:81:b3:4c:e5:b5:74:
1c:28:d9:6c:e5:eb:17:ed:6e:23:dd:7e:75:8e:27:1a:20:20:
ec:8a:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:32 2026 by rpki-client