Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: e8TbVZ/qLa01+c8w/gmaU2wXWz44cTD7+I3tqEqeuz0=
Subject key identifier: FF:69:84:03:AA:7D:11:85:A5:91:00:E7:A6:48:28:89:FF:C6:44:0C
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01A17694E83468629B0D396B9409E3613998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1AC9
Signing time: Mon 26 Oct 2026 05:00:32 +0000
Manifest this update: Mon 26 Oct 2026 05:00:32 +0000
Manifest next update: Tue 27 Oct 2026 05:00:32 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: jsBdWa+jRtKnoYlM9BEw5W6OaqQGHNT03A6hMkeY6bo=)
2: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (hash: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=)
3: 6qswnHV8JvW6cu6cSwBLoqp6-Ng.roa (hash: IUM2z/m3IjX5AfUXwWnD2PsPO+D6A7StpRGqMV8Cn/Q=)
4: c-q-1btZT4jua2JDzrYBPweRMfo.roa (hash: T3Vq03V1v96UVyz+QAoFvPmYD+d9eRiyCI2mm1ddpyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:e8:34:68:62:9b:0d:39:6b:94:09:e3:61:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Oct 26 05:00:32 2026 GMT
Not After : Oct 27 05:00:32 2026 GMT
Subject: CN=ff698403aa7d1185a59100e7a6482889ffc6440c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:75:8e:4e:76:b0:36:df:45:45:f8:bf:9f:
9a:73:c2:68:67:6e:c3:66:5b:3d:17:1d:32:7b:a9:
9f:5a:b6:66:f9:15:28:3e:ae:4f:d9:f6:03:9f:c3:
b7:fa:b5:a2:da:f0:55:33:bc:87:42:77:0f:e0:92:
44:6d:6f:a2:93:aa:9b:05:d5:7f:93:3b:63:ab:04:
66:74:62:ff:63:15:b8:c7:34:94:19:17:39:3a:a0:
d8:99:4f:2e:be:c8:83:8c:5f:8a:63:0b:bf:74:85:
b4:5c:66:c3:e0:fe:c7:a8:c0:73:ca:0f:f3:9b:98:
ce:9a:b5:13:18:a8:5d:ae:00:9e:7b:3a:1c:62:86:
f8:19:4f:50:49:4c:0c:e6:38:65:7e:08:56:9c:bd:
cc:46:78:47:cf:32:d4:7f:c7:bf:ac:0f:fb:4f:f6:
eb:2d:ab:4f:96:8b:da:d5:61:fa:4c:b8:61:df:df:
18:5f:c7:c5:52:cd:7d:f0:f4:a9:00:de:6c:db:de:
21:b7:9d:11:a2:ec:30:21:2a:c6:7a:14:da:81:67:
57:43:ed:36:0b:63:38:cf:49:ac:83:08:8b:2c:f8:
6f:a3:1b:44:4b:02:70:d4:0e:64:46:d8:27:ef:9f:
07:4f:1c:86:ce:29:91:96:c2:69:b6:c3:55:6f:5a:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:84:03:AA:7D:11:85:A5:91:00:E7:A6:48:28:89:FF:C6:44:0C
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:ef:e8:e8:8f:d8:b3:a7:69:2a:8b:25:59:fc:e5:c4:9c:
d4:9b:4f:58:dc:6b:b7:e3:36:7a:1d:4c:f5:0f:96:0c:89:c4:
92:dc:94:f1:ed:d0:19:70:12:79:6b:cd:f7:67:10:32:4a:5a:
03:8f:a8:25:62:06:41:c3:4c:c3:a4:ec:5e:f6:f2:4b:e4:41:
e8:f2:a7:d1:61:f9:d1:37:18:14:93:68:03:4e:cd:36:fd:46:
3a:96:c0:33:6a:87:c0:6f:51:79:74:ba:ee:0b:c5:ef:b4:8e:
43:ee:9a:ad:da:27:cf:aa:86:6f:88:4b:f1:3e:09:7a:80:78:
6e:5d:86:2e:5d:87:6f:2b:68:2d:4b:fe:56:ae:d8:0d:92:c6:
8e:67:56:02:b0:9e:15:57:70:51:f9:20:74:8b:00:7e:a7:cd:
3d:1a:2c:15:e4:d8:d9:ba:bd:9f:12:6d:7b:64:6e:7c:d6:94:
f4:15:80:78:5d:4e:f9:db:81:26:af:83:2e:a0:ed:79:12:e6:
a3:18:93:13:93:a4:48:51:c5:60:25:72:43:33:51:b3:61:8e:
f9:58:4d:14:a9:d1:33:70:dd:88:9f:45:25:57:37:d8:75:8c:
89:0d:56:a9:c5:ef:5e:22:6f:46:c1:41:e7:79:46:be:d2:5e:
ad:5b:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:52 2026 by rpki-client