Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier: jqbj24nU3MBW78hYbwHHEBT/62kOGFJAxuP+1rxFuTM=
Subject key identifier: 33:8E:97:4A:6B:E8:BF:E9:5D:0C:DE:9E:FB:C9:84:7A:0B:21:23:0E
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial: 019E295DD2CA111E967FE6CB961FF5BA7FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number: 01B4
Signing time: Fri 15 May 2026 02:01:14 +0000
Manifest this update: Fri 15 May 2026 02:01:14 +0000
Manifest next update: Sat 16 May 2026 02:01:14 +0000
Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: QR1VvUaf/TgOxK2KpYH9eHZog/DKksaBk/2nLdt4F6M=)
2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:d2:ca:11:1e:96:7f:e6:cb:96:1f:f5:ba:7f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Validity
Not Before: May 15 02:01:14 2026 GMT
Not After : May 16 02:01:14 2026 GMT
Subject: CN=338e974a6be8bfe95d0cde9efbc9847a0b21230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:6e:07:07:db:e0:c8:75:7b:ca:f1:ca:ba:
21:9e:b7:1d:51:bd:53:e0:1b:7a:37:0e:25:94:07:
2a:48:3d:49:1c:14:74:d7:d2:99:92:d7:c5:22:0c:
4a:80:53:8e:91:65:e6:81:b5:cf:52:84:48:b7:3e:
4f:76:d6:51:ed:50:13:42:a6:e4:c1:4f:fa:7c:ce:
df:8f:39:55:39:26:6b:da:8f:0e:c2:cf:3b:aa:97:
e7:e0:31:cb:c1:2b:38:7f:81:ca:61:29:c1:ad:33:
9e:39:40:19:79:bc:7a:2b:f1:a1:0f:c2:5e:f1:b0:
56:be:17:9b:42:bc:7a:7d:62:51:80:51:12:16:e3:
05:21:79:b8:7a:55:84:fc:6b:92:6a:88:2a:9a:7f:
28:72:e7:ee:01:ca:bd:ad:a2:d6:fa:39:4c:3c:8f:
a6:38:17:9b:93:2f:1e:e5:61:a9:47:75:5c:5b:41:
92:a2:06:be:2c:9a:1b:e2:22:70:a6:d1:a6:ec:f9:
77:d2:54:c8:1f:1e:51:b7:10:9b:ef:b9:ba:7a:d6:
bf:db:9b:5e:c8:9f:0d:19:91:e5:58:89:78:98:c9:
56:85:73:65:b2:69:2f:c0:6e:4d:b7:61:dc:12:21:
fe:bf:a2:6e:19:cc:19:f4:7e:9a:37:ab:eb:e2:3f:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:97:4A:6B:E8:BF:E9:5D:0C:DE:9E:FB:C9:84:7A:0B:21:23:0E
X509v3 Authority Key Identifier:
keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:e0:dd:52:b6:fa:be:8e:19:9b:cb:60:b4:f3:66:bc:6c:
5a:03:d7:ea:87:bf:b2:26:87:9f:6f:aa:54:c5:41:15:cb:c6:
57:4e:46:32:14:26:42:d3:2a:6d:85:21:f6:32:84:c7:0f:a1:
c3:57:fe:2e:26:08:f8:9a:bd:3d:25:22:f9:26:e8:14:67:32:
76:ff:27:c8:9a:fd:aa:aa:dc:ff:eb:7d:7a:f8:52:7f:91:80:
76:5a:c7:16:3c:d6:9d:47:35:2c:1a:9a:e4:05:9d:7b:40:b8:
a3:ee:c3:c6:48:37:6e:74:da:e8:30:08:44:d4:e5:ad:90:cd:
df:e9:0e:c6:5b:37:ef:4d:11:25:64:d5:6f:5f:01:e0:b3:66:
78:15:68:2b:1a:ec:b6:30:31:f7:54:b8:47:ff:c8:ba:e6:b5:
c4:e5:7a:d9:7c:5e:a0:a2:bb:32:b0:1e:9b:d1:7b:80:07:76:
31:f9:fb:f7:5d:42:a5:0f:ee:89:6b:de:17:1d:15:eb:00:e6:
77:a7:43:a8:c5:00:ae:91:7b:ab:4f:8c:29:4e:5d:d0:50:fc:
f5:bd:cb:9d:e0:10:27:c7:3f:0e:0f:ee:b7:86:0f:ae:b4:d0:
0b:b4:5c:ab:ca:9e:2c:7e:84:24:cd:66:9d:2f:07:c1:91:2f:
fb:e6:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:37 2026 by rpki-client