Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: +tlqGxpSYvIlEUKlkjdhaIAhOROBm39bDssuz+D+rmU=
Subject key identifier: D8:CE:0C:89:42:6B:C7:02:9E:78:35:B7:7A:DB:9D:93:E6:45:A9:3F
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 01A0404DCCD95C24FCA07A56173550132CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: 02CA
Signing time: Wed 26 Aug 2026 23:00:35 +0000
Manifest this update: Wed 26 Aug 2026 23:00:35 +0000
Manifest next update: Thu 27 Aug 2026 23:00:35 +0000
Files and hashes: 1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: 364YMuY7qE8fk1GLfg9te4uT76dxC+2HbR8W4IJNrFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:cc:d9:5c:24:fc:a0:7a:56:17:35:50:13:2c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: Aug 26 23:00:35 2026 GMT
Not After : Aug 27 23:00:35 2026 GMT
Subject: CN=d8ce0c89426bc7029e7835b77adb9d93e645a93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ad:56:8c:6c:23:a1:18:36:b5:30:65:1a:a4:
30:4d:19:5a:05:b9:56:eb:3b:75:b2:46:e0:e0:88:
6f:1d:29:e3:96:c2:b6:36:8d:3c:ff:5f:f6:96:12:
1d:26:da:9f:e5:9f:db:62:f1:77:8e:1f:b6:88:97:
66:f6:90:10:e7:ca:96:4f:e1:3f:e5:41:b0:30:ac:
45:04:84:41:fc:70:5f:bc:69:01:b3:6e:a8:70:6f:
72:ac:6d:78:10:20:ee:05:0a:65:aa:d9:14:2a:b7:
4f:13:6d:a3:19:d1:1c:6e:d3:c6:60:92:63:3c:49:
6a:7b:23:95:27:b7:e2:c9:a9:5e:ed:2f:1e:9b:e6:
9a:c7:95:c3:ae:34:a7:3d:8d:17:7a:e4:bc:c6:7b:
03:7a:d9:44:ae:de:98:bf:48:1a:67:ba:99:d8:21:
77:1e:81:63:2e:10:4a:65:89:d3:f9:a9:d1:92:83:
bc:0e:61:2c:45:df:04:2f:ef:ab:c2:41:2b:d3:94:
a2:6e:e1:fc:1f:ca:d8:e3:de:45:61:52:16:c5:ab:
a5:48:06:3c:1e:c9:3b:80:ac:27:6d:ce:a1:90:1f:
4b:94:d5:17:83:c5:1a:8b:40:59:8a:a1:e8:af:85:
07:17:01:86:8b:f5:e1:34:a4:39:1f:e5:9b:4a:ac:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:0C:89:42:6B:C7:02:9E:78:35:B7:7A:DB:9D:93:E6:45:A9:3F
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:43:b2:86:b9:4a:5d:96:89:c3:db:87:15:aa:fe:49:15:
90:46:6e:7a:fe:a2:85:4e:59:8f:fb:ce:e5:d6:89:76:01:ba:
67:8b:73:0b:56:9c:63:fa:9e:5c:b4:43:20:c7:38:a2:26:ba:
79:64:24:ad:9e:8a:6a:f5:57:de:25:6e:ea:d3:93:6d:b8:92:
40:3f:7a:3a:8a:6b:dd:87:06:5d:e4:9d:71:ea:78:ac:45:20:
79:7c:f2:3f:31:10:cc:7c:25:ae:f2:33:e6:10:05:a0:46:6e:
86:93:95:9a:b7:65:b3:0a:d2:6b:07:d4:a1:ea:6a:48:9c:e9:
5d:12:e9:80:50:29:71:2c:81:82:89:f4:84:d8:93:0a:9c:a9:
12:b2:cd:3c:e6:8c:d1:de:70:4b:34:de:f4:da:f1:4f:f8:6a:
c8:33:95:f9:f7:2d:5a:27:40:dc:7f:0e:f9:d5:f4:00:fe:d0:
1d:02:17:02:b3:63:48:c7:30:cd:fe:de:00:92:e3:cd:cf:55:
28:ed:d3:a4:e5:55:bc:f7:e4:a7:26:94:9e:e1:51:02:1a:28:
30:55:de:43:3c:a0:ec:ad:e5:e2:d2:31:b1:ca:87:4a:ef:65:
07:6e:be:0f:b4:53:72:f1:fb:97:5c:ab:75:65:a5:4f:dc:f5:
a1:e4:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:25 2026 by rpki-client