
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: T+eXDs4BjeIqo9KRpwQm08oBOkewyc+rNvim/ktmDlk=
Subject key identifier: CD:3D:BB:20:21:EE:9D:E9:C8:7F:E7:12:5A:80:D2:8A:27:E3:23:62
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 019F164252CD549A43EEC785DEF0D73C20DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 0344
Signing time: Tue 30 Jun 2026 02:01:13 +0000
Manifest this update: Tue 30 Jun 2026 02:01:13 +0000
Manifest next update: Wed 01 Jul 2026 02:01:13 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: mPve7RxsUPkpFayuEek6qPyoK9ZL5bwfoLGmDzXS/34=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:42:52:cd:54:9a:43:ee:c7:85:de:f0:d7:3c:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Jun 30 02:01:13 2026 GMT
Not After : Jul 1 02:01:13 2026 GMT
Subject: CN=cd3dbb2021ee9de9c87fe7125a80d28a27e32362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:fa:8b:70:e5:ea:99:38:cf:a4:9b:70:90:
75:f6:4d:e8:d7:c3:b9:4b:ea:48:2b:73:ff:e8:54:
92:0f:cd:e6:65:a3:d2:38:84:2d:93:b2:30:7b:8b:
d5:8d:4e:5a:3b:e3:b5:c7:32:b0:61:7f:12:fb:fc:
17:35:85:38:cf:4a:bb:8f:0d:f7:18:20:09:33:65:
b0:5e:c6:22:32:74:97:f5:08:fd:86:11:25:52:4a:
98:05:b1:25:49:1b:bc:e3:dd:fc:55:d8:d1:51:3c:
b7:d3:37:c3:63:6f:44:90:a8:04:26:61:0b:bb:09:
07:46:7f:2e:7f:6d:93:13:1d:0d:9e:dc:80:36:f9:
6c:8f:40:c0:ce:1b:27:c3:21:9b:7c:77:7a:68:62:
17:12:06:56:7a:ce:46:be:f2:f5:9f:e9:09:43:0d:
ac:76:e1:97:2e:1e:57:d0:df:3a:42:74:2a:04:30:
13:22:f9:04:33:d0:ab:cd:b8:2f:46:d8:2a:02:58:
ef:33:c8:fa:84:bc:b6:47:c5:a4:0d:22:51:c1:39:
0a:76:86:dd:27:ef:03:4d:d9:61:e6:78:21:3a:59:
b8:93:3a:d1:49:af:0e:08:93:44:a1:68:03:eb:d6:
8b:e9:42:e4:a5:a0:8e:4f:4b:18:b6:d5:64:d1:39:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:BB:20:21:EE:9D:E9:C8:7F:E7:12:5A:80:D2:8A:27:E3:23:62
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:20:76:72:7a:77:07:69:30:44:5d:e0:29:a2:e6:25:f0:c1:
65:4f:65:5a:97:14:dd:b6:8b:64:7e:79:ad:5f:a8:4d:ab:5f:
5c:10:bc:f2:72:36:66:f1:23:29:6a:43:50:7d:06:2f:68:6c:
e4:4b:c4:4a:8e:45:5f:c0:33:c5:49:43:68:a7:e7:f6:41:ce:
19:c3:8b:09:ba:d4:70:69:96:bc:91:05:b3:fc:fd:05:38:92:
4e:b9:30:d9:2d:9a:57:6d:aa:80:bd:3f:b6:a5:d6:70:98:04:
b8:a6:62:1e:ac:a8:a6:dc:79:b2:a1:17:7b:c1:5d:86:9a:c6:
cb:d3:19:0d:c8:e4:b8:7c:b3:d1:e7:40:8b:18:1a:d4:66:d6:
c0:76:b2:ee:1f:b8:56:5e:0d:ba:7c:cf:73:02:93:91:1f:88:
1c:3e:80:b7:d1:8f:1d:1d:7f:56:ac:e0:01:70:9c:10:28:3b:
99:21:d8:a2:62:b3:be:df:73:e8:d5:79:d2:29:8d:81:77:a5:
b5:15:25:5f:b7:15:8b:04:b1:4d:4d:f2:54:94:f2:c5:01:20:
84:b0:8d:ff:fd:5b:21:2b:0d:13:8f:1b:d1:83:ab:94:2b:41:
ac:f0:bf:54:c4:4f:30:00:bc:21:b4:d3:37:14:fe:ce:c0:74:
b9:15:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 12:01:47 2026 by rpki-client