Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json)
Hash identifier: ZAWXxYookHfaL7L3104llxf2nqvy+RMon+QmcFBb6jo=
Subject key identifier: A2:01:E8:48:08:0E:92:FE:25:9B:67:53:82:B8:D8:5B:DD:A5:A1:F9
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 019DD91DA9D0FE942B7391BC24205E8C1245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
Manifest number: 0EAD
Signing time: Wed 29 Apr 2026 12:01:32 +0000
Manifest this update: Wed 29 Apr 2026 12:01:32 +0000
Manifest next update: Thu 30 Apr 2026 12:01:32 +0000
Files and hashes: 1: 6JbNABeVsOKFNCbnqqLsOAO6iMI.roa (hash: VdcNh4sy41V5jivfWDOrD3oeEaJzk9/cuPwCt/IQMgw=)
2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: DWHVf1KjL8oL3IIocjkgz+Q0TpdKVvL3Vl4YleRYzX4=)
3: fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa (hash: ZMaEpYYew+t/P0a7GjZLrOHp0tj4LJDHMUsWDrgmO/I=)
4: yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa (hash: AO3PZggrYOo/9vmb5ohU7nlXGncVTS7gulY25fvYV8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1d:a9:d0:fe:94:2b:73:91:bc:24:20:5e:8c:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Apr 29 12:01:32 2026 GMT
Not After : Apr 30 12:01:32 2026 GMT
Subject: CN=a201e848080e92fe259b675382b8d85bdda5a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:b3:54:cb:73:cd:b7:9c:d5:8f:49:7f:2d:
cb:88:7c:57:8d:d5:2c:f6:91:1d:72:2e:b3:54:0e:
3a:ef:77:4d:fb:19:81:77:06:00:14:05:0d:ab:5a:
e1:23:6f:2f:6d:04:d6:73:0b:16:7b:26:0d:e6:e1:
ae:81:1e:8a:36:19:56:fc:cd:b7:ae:3d:ed:54:44:
40:04:fe:72:ac:49:80:d2:be:43:03:5f:88:6e:85:
bf:63:b8:47:7e:9c:e6:d7:3d:29:4e:7f:03:bd:16:
99:6a:15:6c:9c:85:ad:ac:2d:08:31:57:ed:9b:81:
f7:4b:77:90:91:10:57:8c:4d:a0:43:2d:ea:3c:da:
7c:ea:40:c8:4a:e5:33:86:64:68:43:b5:3d:91:e1:
7b:fd:83:81:dc:1e:3d:14:47:db:d2:e3:4e:66:3e:
63:29:4c:20:47:3a:a8:01:33:e1:57:58:d6:87:7c:
7b:c5:08:62:56:39:84:59:68:4a:17:37:ef:5f:cd:
01:da:0d:b9:3b:10:82:8b:9c:87:7f:e3:9f:05:40:
7e:06:f7:0d:84:54:e9:4c:51:2d:09:21:ca:67:14:
20:91:7c:a6:ac:c1:5c:5d:e6:ea:5a:54:8f:7a:59:
2c:38:95:d4:cf:9a:15:f5:cc:b7:8f:f1:ae:33:fe:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:E8:48:08:0E:92:FE:25:9B:67:53:82:B8:D8:5B:DD:A5:A1:F9
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:e1:a1:c2:ef:3f:47:75:f7:96:76:86:ba:34:2f:4e:da:
c5:2d:14:91:24:3b:78:f8:d4:26:81:0a:8e:8b:ab:7c:0e:bf:
81:2a:27:85:a6:3c:f6:26:2c:4e:64:91:b0:b4:61:7e:87:16:
61:bd:24:50:a6:b4:3b:6f:8f:fd:bd:7e:26:17:90:c0:bf:f5:
0a:6b:8c:ea:7d:5a:45:c6:11:d1:a4:68:bc:fa:46:b8:9a:84:
c5:da:ad:1c:9e:dc:ff:cd:2b:77:41:44:c9:72:d1:13:8f:94:
8a:b3:2e:5c:f2:16:42:54:b5:50:7f:5f:e3:77:ec:85:ae:ea:
27:6c:6d:f5:d8:aa:2f:4e:46:0c:31:15:d7:3e:6a:a5:d6:cd:
7d:6b:1f:97:87:34:a0:dc:fb:02:23:15:c6:5a:5f:43:9f:09:
5a:e4:14:e6:8d:27:a9:17:6a:ba:29:bb:cf:7f:95:9f:aa:02:
fd:85:ff:89:7f:60:ec:ec:b9:ba:e4:f1:02:ec:03:dc:6f:70:
45:a8:0b:f3:f0:5d:41:bc:30:95:ce:89:83:05:d2:cc:54:18:
ae:39:c9:f0:2f:4d:9a:f5:91:76:7d:be:ad:3f:fa:4a:98:e2:
03:e6:d1:fb:be:34:bf:14:4e:eb:cb:68:eb:15:a6:f6:08:66:
0c:61:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:49:03 2026 by rpki-client