Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: pun3ViUPebYGPT0QSsFSyVQsAjhgu6wsYnk4veBokhQ=
Subject key identifier: 58:65:CA:47:DC:76:2A:6B:0D:61:CC:D1:F1:00:B5:8F:8D:D3:62:84
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019CB8F0329A8768BD1A2623D0AEF786BE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 02F0
Signing time: Wed 04 Mar 2026 13:01:15 +0000
Manifest this update: Wed 04 Mar 2026 13:01:15 +0000
Manifest next update: Thu 05 Mar 2026 13:01:15 +0000
Files and hashes: 1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: 6ieevn6pT6SXRgw9NJ3HQHraDrJD6RDa+BhzMxh4mbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:32:9a:87:68:bd:1a:26:23:d0:ae:f7:86:be:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Mar 4 13:01:15 2026 GMT
Not After : Mar 5 13:01:15 2026 GMT
Subject: CN=5865ca47dc762a6b0d61ccd1f100b58f8dd36284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:f2:6f:79:b0:4c:bd:b6:6c:40:17:d0:48:
4b:b4:e3:6f:f3:72:ee:31:e8:94:f5:ef:7b:52:64:
fe:6c:b3:fd:89:48:38:a7:2d:0b:c7:e6:4b:5e:57:
ac:25:7e:5a:fd:4b:4c:8f:e7:90:1f:9e:26:05:13:
2c:7a:13:dc:63:bc:27:91:45:4c:ec:bb:21:58:fa:
35:76:20:28:9d:3b:37:29:a7:eb:b6:c3:f8:6f:ab:
4d:01:69:ec:61:df:98:31:ac:e6:ec:eb:fa:1e:4b:
5a:c2:3f:46:c5:54:50:ba:dc:3e:c4:98:25:2c:87:
e9:49:23:94:15:0f:bd:40:c8:ce:77:88:a4:88:7a:
f9:7e:0d:f9:02:ac:d0:6a:4f:a3:c8:22:f2:b4:97:
9e:cb:14:a5:14:28:4b:d1:9a:46:c3:47:63:dc:d8:
46:7d:81:73:20:f3:fd:a5:94:0b:d7:f8:3e:e5:b4:
3a:42:81:c3:73:ea:4b:5e:b6:5e:a1:c1:05:64:e5:
f7:8c:9c:7d:91:39:20:ea:a8:c1:14:d2:e4:3a:d7:
d8:8c:53:c1:b8:53:74:9d:d6:45:6e:0c:fe:85:65:
51:2a:10:52:a4:f4:79:89:77:c2:be:1f:8d:6a:4f:
d8:07:4c:e3:c9:23:e6:cf:27:0e:68:c3:a9:35:a0:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:CA:47:DC:76:2A:6B:0D:61:CC:D1:F1:00:B5:8F:8D:D3:62:84
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:ba:73:6e:01:41:fa:6a:48:60:34:aa:a5:43:dc:a0:dc:
b8:87:2d:83:16:fc:01:99:4c:19:09:9e:7f:bd:64:65:4a:2e:
28:bb:05:eb:ed:55:1a:52:58:ec:a8:f1:ad:b1:ed:4f:88:7b:
15:67:6e:d1:c1:94:ed:b9:63:ef:c1:88:ae:46:09:1e:bc:45:
3e:04:d6:05:52:3f:ef:69:00:5e:6e:bb:62:a3:8f:77:7b:9a:
d0:9c:1d:cc:c9:d2:83:5d:2f:6e:b4:37:73:77:ae:15:8d:6e:
42:00:92:45:30:ed:4f:13:37:d3:8e:a6:17:07:cf:e6:3d:51:
9d:ab:9e:f5:15:b1:d2:81:8d:a7:e4:cc:47:4c:a0:ed:f7:50:
67:d0:69:7d:52:09:6a:f2:a7:c1:a1:3c:48:30:f2:d4:0d:fc:
d8:21:25:09:36:1e:47:c9:93:c0:61:23:66:16:8e:d9:4f:29:
56:46:b9:c6:8a:72:f5:57:99:6b:a2:52:1c:e3:c9:87:87:67:
75:58:32:67:a1:bd:c9:3c:28:10:44:8b:1a:38:a9:d3:dc:f5:
62:2e:a6:6b:3c:d9:4d:0a:68:e6:36:2e:48:1b:15:5d:f2:81:
5d:b1:14:9f:b1:9c:17:db:e0:02:e9:5a:a5:c3:f5:3d:4b:86:
23:87:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 21:57:20 2026 by rpki-client