Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
File: amgjORLYCZ5O3U5ZBtsfxiOubPk.mft (raw, json)
Hash identifier: QHzALw8XjEzQDx38csfx3wr8cQjPzfF9cofP2CCeIVs=
Subject key identifier: 5D:D8:DE:C8:75:A2:B0:B0:DB:10:B5:05:AE:57:75:9E:3C:18:88:80
Authority key identifier: 6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
Certificate issuer: /CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Certificate serial: 019D3A548457E15A433F788EF71870E2464F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 16:01:50 +0000
Manifest this update: Sun 29 Mar 2026 16:01:50 +0000
Manifest next update: Mon 30 Mar 2026 16:01:50 +0000
Files and hashes: 1: amgjORLYCZ5O3U5ZBtsfxiOubPk.crl (hash: GEw4dfd0qwqLmSyuayu5m0ILk3uRoHA9vPuDBTkoP8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:84:57:e1:5a:43:3f:78:8e:f7:18:70:e2:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a68233912d8099e4edd4e5906db1fc623ae6cf9
Validity
Not Before: Mar 29 16:01:50 2026 GMT
Not After : Mar 30 16:01:50 2026 GMT
Subject: CN=5dd8dec875a2b0b0db10b505ae57759e3c188880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:f7:92:ff:aa:29:89:70:f6:f4:9a:c9:ef:
47:29:df:cf:82:b2:45:66:17:5f:ff:8d:23:c0:4a:
65:e5:9d:8e:16:d3:74:e1:7f:54:17:b3:c4:71:34:
56:55:4f:3e:f8:f1:cb:ac:29:4a:27:ba:48:96:dc:
c9:6f:00:e8:a4:3e:03:fc:09:93:d4:bf:1f:74:b8:
03:7a:63:19:90:a3:23:74:1c:21:5c:bd:a1:da:b3:
78:20:20:b7:c1:41:d4:90:10:2f:22:82:ea:b3:5a:
83:cf:c3:be:09:cb:70:bc:7b:0d:eb:7e:d0:5f:2a:
3f:88:d3:34:62:91:00:84:86:95:76:8e:f2:c7:1f:
4e:ad:f2:a7:df:86:e9:0a:42:ff:9e:4b:44:6f:36:
ab:d0:46:93:aa:e2:df:66:41:71:5d:6f:79:a2:7f:
41:94:b0:e8:b2:e4:3b:1d:99:38:87:ee:35:74:c0:
75:26:31:d1:4b:a0:d8:28:93:bf:6e:e6:96:09:22:
a5:9e:8a:44:8b:25:29:11:67:78:a2:b5:e2:a9:70:
9d:e7:e9:a9:63:b4:49:23:b4:5e:44:4a:2e:97:26:
fa:90:f3:ec:3d:15:b8:7e:86:ba:2e:8f:fc:ce:f7:
09:27:99:5d:47:34:fc:4d:3f:74:3c:e9:84:97:60:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:DE:C8:75:A2:B0:B0:DB:10:B5:05:AE:57:75:9E:3C:18:88:80
X509v3 Authority Key Identifier:
keyid:6A:68:23:39:12:D8:09:9E:4E:DD:4E:59:06:DB:1F:C6:23:AE:6C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amgjORLYCZ5O3U5ZBtsfxiOubPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be0630-b2b0-4cb1-b2dd-741188dfa27d/1/amgjORLYCZ5O3U5ZBtsfxiOubPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:c9:06:b5:71:fe:df:db:7f:5e:4f:53:d9:cb:00:63:fa:
4f:38:45:e8:01:b4:ac:30:b9:dd:ae:d9:8e:e4:18:80:3f:da:
be:f7:c5:a6:4b:a5:8b:22:e6:4b:d2:0e:bb:84:0e:1e:26:75:
fe:b7:cb:31:64:48:b6:0e:6e:19:93:dd:8b:d7:68:dd:45:3a:
30:15:ac:f7:62:95:d6:88:44:f5:ea:4b:98:7f:7a:d8:12:a9:
3c:e2:6a:a0:4a:8a:d4:6c:3c:2d:1c:2c:77:2c:9b:0f:56:ed:
fb:68:7c:38:ac:03:b0:2e:fe:b1:f6:22:9f:95:c3:5b:90:d0:
0c:0b:52:71:b2:df:3f:7b:fb:01:13:61:ca:9b:ed:d3:02:b6:
a5:5f:67:82:84:53:fd:e9:91:33:30:62:76:a7:2d:f9:07:d7:
03:d7:8d:0d:02:27:55:c8:9a:ea:eb:f7:8d:3e:24:9c:c4:1e:
39:ff:e8:1c:b6:ea:db:4e:31:85:1b:d4:5a:2c:ee:c8:84:ae:
40:cc:31:d8:fd:17:9d:5c:8a:f8:15:f8:5b:d9:7e:97:5d:9a:
16:d2:31:80:88:7d:e2:c3:7f:ac:20:2b:0f:44:8d:6a:84:9a:
04:61:d4:15:4e:ed:43:82:19:6b:54:ff:ce:22:be:bd:ab:2e:
85:69:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:27 2026 by rpki-client