Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier: y+cxvBui/MryOp3inPB/tAc0z3MOyKPQZ7KM6WxBagA=
Subject key identifier: AC:BF:50:A4:44:6A:CF:BE:2F:3A:BA:08:01:EE:2C:34:04:43:04:5F
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial: 019D38663876D3F03503DB870EA6B40691AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: 2HMnBjwbn8wTTEg/rJrKcvxxSNoYGQPHqBgt0f9GqYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:38:76:d3:f0:35:03:db:87:0e:a6:b4:06:91:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=acbf50a4446acfbe2f3aba0801ee2c340443045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:43:aa:4f:79:f4:55:19:00:ba:2d:ab:45:
22:fb:8b:7d:36:fa:25:22:40:16:a4:79:af:ca:ea:
e9:10:67:2d:92:d8:70:11:a1:2c:da:61:ee:b0:3c:
15:61:5c:cb:70:6e:92:69:c0:96:63:e8:7a:d9:61:
03:2b:76:94:82:15:6d:10:f7:d8:5d:b9:01:4a:b6:
ff:19:2b:4d:c1:5f:96:71:4c:38:e3:f9:37:10:58:
04:f0:02:58:ce:4b:e3:7c:b4:9c:b1:4e:66:b8:61:
56:88:20:7f:96:ed:31:66:36:cd:c5:6e:f3:44:7c:
93:98:d1:2e:e1:c5:f4:a0:bf:eb:84:cd:54:36:d1:
2d:d0:36:12:a6:2b:17:b0:a1:da:ad:2e:43:cc:28:
6d:c3:07:97:23:18:7e:53:e7:b1:96:51:3b:a7:37:
e7:b0:f9:1b:aa:4c:48:08:08:e0:14:50:62:66:32:
ac:04:95:d0:2f:72:60:f4:33:df:93:bf:5c:11:83:
21:08:10:d5:77:2f:46:25:0c:62:a3:33:fd:95:6c:
77:f2:59:da:b5:42:51:e3:b4:5f:de:3c:8f:59:9e:
db:8e:05:43:d0:5d:ed:31:8a:41:cb:59:67:d0:2e:
2a:20:bd:04:88:7c:a1:c4:91:9a:46:f4:69:2f:66:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:50:A4:44:6A:CF:BE:2F:3A:BA:08:01:EE:2C:34:04:43:04:5F
X509v3 Authority Key Identifier:
keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:51:f0:59:9c:f0:94:86:1d:13:3f:85:82:97:5f:73:47:
c5:ed:32:15:3a:73:fd:de:0f:9d:bc:d7:58:c1:e3:6b:fe:3e:
46:2d:5f:60:fe:e9:f8:f6:ae:2c:ee:72:47:fe:ea:0e:d5:6b:
a4:ef:33:4a:30:47:70:50:30:6a:91:42:45:34:cb:30:05:ed:
d2:62:b0:18:c4:9e:12:4a:2a:69:d3:b1:4e:29:20:43:45:32:
e7:4f:73:8b:bc:34:6d:7b:7d:57:dd:6c:23:3c:5d:24:36:2f:
db:40:bc:0c:ee:db:15:98:60:4c:61:1a:63:83:91:01:80:d8:
48:fd:36:54:67:71:83:5d:b8:57:f2:39:6d:d7:6c:cf:2b:87:
c7:09:9e:ff:8d:4e:20:36:2f:88:7f:bb:2c:56:9a:a4:c3:f1:
0a:09:f9:e4:9c:38:5b:94:35:70:56:d2:c4:db:42:9f:e8:58:
11:0c:37:32:42:9f:51:e0:d0:9b:d3:be:79:c4:9c:fb:88:c4:
5c:99:49:cd:b2:65:9c:ee:a5:5d:de:df:06:ed:76:5f:db:00:
5d:b0:c4:87:5c:94:03:f7:cf:05:58:a6:89:1c:dc:f5:22:70:
4b:22:2d:fc:c5:e4:1d:67:3b:cc:6a:62:29:a4:a8:e8:dd:e4:
dc:cc:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:18 2026 by rpki-client