Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: MeX9uzgyhaLmQwkCd08iieFFWlvc9p945Ik/q4gG1Ho=
Subject key identifier: A3:6B:E0:5C:8B:2F:0E:92:57:71:FD:27:FA:36:D9:F1:A9:74:22:9A
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 019D39407F9AADB85D68F8C95AC48DC189A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 024D
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: oX6gpX4fo2ejruQHi4Rp8Caj5H7DDDfsMPmuzOprzrc=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7f:9a:ad:b8:5d:68:f8:c9:5a:c4:8d:c1:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=a36be05c8b2f0e925771fd27fa36d9f1a974229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:d4:15:05:5e:39:27:20:39:ad:41:b6:be:
8b:c5:91:e4:ed:cc:b1:19:96:12:4f:14:ac:20:83:
22:94:67:ad:75:e5:31:c2:ac:8d:df:f7:02:83:80:
b8:33:59:e1:c0:61:1a:86:04:07:16:c5:e4:05:9d:
09:bc:f3:63:83:e2:41:2a:f9:94:e4:7f:06:57:03:
7d:bf:87:3f:62:50:56:f4:43:79:8f:0d:aa:2a:76:
51:87:8d:9d:d0:7c:6e:5d:58:69:1a:00:ae:91:eb:
d7:0d:36:c1:d1:1a:fb:8b:70:25:9b:30:99:f4:7b:
7a:d0:93:e9:f4:59:72:02:35:df:eb:38:14:5a:89:
d6:3c:5b:c7:b7:90:2c:44:dd:6d:4f:19:2f:a2:57:
02:4f:70:63:06:43:29:cb:65:9f:e5:2f:9b:8b:9a:
12:7a:25:74:09:07:0b:e7:a4:de:18:8e:8a:83:04:
e8:e2:12:c4:71:94:5d:49:85:96:3f:e0:b5:9f:66:
a6:b3:2d:ba:e9:81:05:d1:81:b1:dc:83:da:a5:64:
d5:5f:c8:e3:ab:0a:6e:b3:3b:4d:a9:63:12:0b:02:
9b:44:97:57:1b:f5:21:cb:0d:77:ba:9b:ee:19:8a:
f1:8e:41:08:9a:44:8b:c1:1a:07:46:20:90:90:09:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:E0:5C:8B:2F:0E:92:57:71:FD:27:FA:36:D9:F1:A9:74:22:9A
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:58:d1:1c:a8:b1:57:b5:de:5c:bc:dc:19:2c:68:fe:85:78:
99:02:20:7c:4a:da:ac:49:b7:82:53:00:8b:9f:75:4a:29:8e:
a8:4e:7c:af:f2:40:d5:fc:3d:d8:1b:80:e9:f9:16:c4:9e:45:
47:2b:b6:8c:51:94:2b:7c:d6:f2:0c:e7:e5:ae:04:51:5d:e5:
1c:1f:c1:e5:7c:58:2a:b4:5a:42:4b:e1:af:33:9b:3f:ba:68:
0e:d5:fe:61:e7:c0:b7:d6:c7:a5:ff:20:0f:52:42:83:0f:90:
6d:cf:c3:da:c6:20:b1:d7:a6:09:c9:0c:4e:75:00:dc:ad:b5:
86:52:d9:09:3e:33:e3:9e:bd:08:ef:09:78:7f:ee:2d:37:05:
38:2a:40:76:50:11:70:61:79:c2:8b:2d:49:1b:4c:36:b2:d0:
bd:ee:67:1d:5e:7e:6b:3e:59:5a:43:01:12:54:17:30:ed:26:
9e:67:22:36:35:15:d6:42:cc:16:82:5b:dc:53:57:9c:8e:67:
8b:ce:91:88:68:f9:8d:3a:82:dc:65:3f:b5:e8:d7:49:33:db:
97:4c:18:3d:ab:86:a6:95:2c:9d:bb:0c:36:4a:10:f6:15:cb:
bd:a5:44:cb:c8:70:3e:20:e9:2a:7e:c1:d0:3f:b5:45:96:5b:
3d:76:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:33 2026 by rpki-client