Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json)
Hash identifier: l3RLoctHcnenF1xEc4T8d84BKyPfvaXKV2qK5ZbDWQc=
Subject key identifier: 8A:46:2A:3C:DF:A4:7F:9D:0B:57:02:4B:28:18:89:D6:5A:C6:7E:59
Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Certificate serial: 019D37F734DC47C5C3D1AA4A15E8072D6678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
Manifest number: 0293
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: k8Ua4iln2ofrXVvU6oZahpabpulEadzcnO/yYhb3iN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:34:dc:47:c5:c3:d1:aa:4a:15:e8:07:2d:66:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=8a462a3cdfa47f9d0b57024b281889d65ac67e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:b5:13:79:35:aa:3d:bd:16:4b:77:ab:da:
a4:ce:9f:cd:16:62:23:5a:eb:af:e5:b6:55:5d:a8:
32:d2:14:74:90:2a:9b:14:04:3b:2d:5c:b8:1d:2c:
a1:6c:58:4b:2d:0b:d3:d2:6b:a7:26:c6:c8:77:bc:
b4:32:69:c9:3b:34:ed:73:36:3f:1f:79:0e:85:2f:
44:6f:b7:53:b1:71:6e:ea:d4:c9:c6:1e:b2:f9:ed:
5f:0f:10:70:28:7d:f9:40:d6:b7:8f:6e:6f:93:d6:
0b:0a:07:cb:9d:14:7b:60:81:25:66:ef:9d:24:89:
9d:e4:3f:e7:cc:bf:bb:70:aa:f1:a9:a2:f2:6b:d0:
fe:a5:dd:70:0d:94:d4:3e:61:16:ce:d1:77:58:21:
8a:e2:02:cb:13:2d:c9:99:2c:a5:fa:98:f5:23:10:
eb:02:7e:65:56:74:a2:18:06:3f:c2:31:d7:64:74:
ae:f7:8f:be:27:18:5a:bd:75:0b:b8:2d:62:f7:ec:
84:be:e0:98:d5:c0:3d:32:77:14:01:76:e1:49:fe:
c2:81:ce:4e:f7:a9:66:4f:d9:7a:d6:06:87:4e:3d:
30:0d:c8:88:8f:4b:fd:26:b8:51:86:4f:e0:75:d8:
3e:19:bc:65:a6:1b:27:74:d8:44:ae:02:9c:9a:50:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:46:2A:3C:DF:A4:7F:9D:0B:57:02:4B:28:18:89:D6:5A:C6:7E:59
X509v3 Authority Key Identifier:
keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:81:20:f2:90:8f:6c:83:03:f4:d5:13:19:d4:d5:71:71:
90:8f:08:7d:c3:a0:e6:a8:8f:aa:fc:de:f3:fd:65:b3:66:94:
5a:ca:e8:1c:cc:fa:1a:dd:08:df:2a:a0:84:30:12:22:67:ed:
7d:39:27:84:21:cd:34:b2:fa:9f:79:8f:1b:9a:5c:52:c5:8b:
ec:0a:80:5d:e8:9b:1f:ff:01:e3:19:f1:53:bb:e8:48:c9:4b:
f8:f7:a1:f5:9e:d3:b6:d8:f1:9e:e9:cb:12:89:d3:01:81:e7:
74:0e:d3:f8:95:62:75:66:f7:a9:a2:58:29:34:08:a8:33:07:
c3:34:bd:38:c4:ca:c9:95:62:6c:38:39:ef:6e:29:8b:91:9f:
71:50:14:e4:c7:44:30:bd:cd:cf:54:9a:a8:b4:1d:f3:13:2b:
72:03:b6:b6:6a:2f:bd:e7:14:1f:08:dd:26:e5:8e:0f:51:a5:
a7:94:fe:09:38:b2:2f:c2:92:46:08:38:40:70:bd:23:cd:fc:
1a:23:09:2c:e9:b6:de:e7:fd:64:fc:6c:cc:26:6b:21:d5:96:
c3:dc:ed:56:37:a5:e9:88:f1:78:1a:8d:ce:6c:ec:84:2e:c1:
39:1b:e1:b3:f8:aa:66:53:49:e3:ca:7d:f4:e0:ca:90:b4:15:
fc:78:79:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039zTcR8XD0apKFegHLWZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNmNiNjhkZmEyZTM2MzgzOTM0ZGU2ODBlZDAyNTFhYzNh
ZWRjY2EwHhcNMjYwMzI5MDUwMDQwWhcNMjYwMzMwMDUwMDQwWjAzMTEwLwYDVQQD
Eyg4YTQ2MmEzY2RmYTQ3ZjlkMGI1NzAyNGIyODE4ODlkNjVhYzY3ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1y1E3k1qj29Fkt3q9qkzp/NFmIj
Wuuv5bZVXagy0hR0kCqbFAQ7LVy4HSyhbFhLLQvT0munJsbId7y0MmnJOzTtczY/
H3kOhS9Eb7dTsXFu6tTJxh6y+e1fDxBwKH35QNa3j25vk9YLCgfLnRR7YIElZu+d
JImd5D/nzL+7cKrxqaLya9D+pd1wDZTUPmEWztF3WCGK4gLLEy3JmSyl+pj1IxDr
An5lVnSiGAY/wjHXZHSu94++JxhavXULuC1i9+yEvuCY1cA9MncUAXbhSf7Cgc5O
96lmT9l61gaHTj0wDciIj0v9JrhRhk/gddg+GbxlphsndNhErgKcmlCjMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpGKjzfpH+dC1cCSygYidZaxn5ZMB8GA1UdIwQY
MBaAFGpsto36LjY4OTTeaA7QJRrDrtzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzIt
ODdmZjZlNjkwNTkxLzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzItODdmZjZlNjkwNTkx
LzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzOBIPKQ
j2yDA/TVExnU1XFxkI8IfcOg5qiPqvze8/1ls2aUWsroHMz6Gt0I3yqghDASImft
fTknhCHNNLL6n3mPG5pcUsWL7AqAXeibH/8B4xnxU7voSMlL+Peh9Z7TttjxnunL
EonTAYHndA7T+JVidWb3qaJYKTQIqDMHwzS9OMTKyZVibDg5724pi5GfcVAU5MdE
ML3Nz1SaqLQd8xMrcgO2tmovvecUHwjdJuWOD1Glp5T+CTiyL8KSRgg4QHC9I838
GiMJLOm23uf9ZPxszCZrIdWWw9ztVjel6YjxeBqNzmzshC7BORvhs/iqZlNJ48p9
9ODKkLQV/Hh5qA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client