Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File: AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier: MYv97HE/tSaew6jR/zpJlmjbJuMmlBZChHB1Si8i4Mw=
Subject key identifier: 4F:A0:F6:58:6F:AB:DC:77:82:03:D0:36:D6:9C:B1:E5:88:05:64:E2
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 01A039DE546419A5D3E445988C1B3A8ACD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number: 03DB
Signing time: Tue 25 Aug 2026 17:01:06 +0000
Manifest this update: Tue 25 Aug 2026 17:01:06 +0000
Manifest next update: Wed 26 Aug 2026 17:01:06 +0000
Files and hashes: 1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: u3FL0CYjBTHXbRVQkQLROqENI5jQr2QPEbz/PePVmrg=)
2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:de:54:64:19:a5:d3:e4:45:98:8c:1b:3a:8a:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Aug 25 17:01:06 2026 GMT
Not After : Aug 26 17:01:06 2026 GMT
Subject: CN=4fa0f6586fabdc778203d036d69cb1e5880564e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:a9:57:ba:87:f8:88:17:93:c5:dc:41:97:
cc:20:d2:8b:d7:65:0c:93:ab:ae:00:b2:05:0e:2e:
c6:1a:9a:ef:6f:36:44:a4:6a:23:15:1f:a2:4b:23:
66:81:dd:2a:f0:20:a4:5d:a1:01:9f:f2:d1:75:9e:
f4:3a:3d:2f:e8:01:e6:9b:a7:7c:fa:82:c0:c4:e8:
4b:31:04:ad:df:fc:cd:e9:09:72:cc:27:db:87:45:
14:07:9b:8a:42:0d:8a:03:2f:3e:41:46:99:a9:22:
0c:25:e7:fa:ef:93:cb:d5:4e:d5:cf:2b:5a:b7:5e:
8f:6b:71:af:6b:17:27:10:07:3c:2e:fd:9d:61:7d:
fc:b3:77:0f:ef:45:ee:0e:10:7d:04:f0:10:74:95:
7f:a0:20:b0:9a:06:55:79:87:33:6c:aa:12:59:d7:
8c:d3:7b:c9:84:15:93:b6:dd:06:9d:db:6b:ab:51:
9a:7b:6d:02:ff:e4:98:81:c4:ed:08:2a:89:85:3e:
bd:74:31:6e:f9:7e:15:12:f0:cb:7e:ff:c1:4e:df:
74:90:5e:d4:28:3a:93:15:c1:70:dd:c1:8d:36:9b:
7f:8b:b1:71:e0:89:3d:35:10:95:56:f8:c9:aa:40:
b3:e8:8a:8a:bc:ac:03:51:6d:10:24:db:34:ec:03:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:F6:58:6F:AB:DC:77:82:03:D0:36:D6:9C:B1:E5:88:05:64:E2
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d2:77:be:d6:c9:c5:16:4f:0a:e9:59:4e:6f:7a:e2:a8:08:
ec:60:3f:c7:00:dd:b6:fb:6b:68:1b:50:5a:11:c1:f0:f1:37:
04:d0:b6:ef:04:5c:f3:59:6b:2b:43:5e:36:e6:c1:46:78:c5:
67:a6:03:0d:81:2d:3d:92:9b:ea:cf:aa:ec:37:bb:63:66:2b:
fa:b4:8d:93:76:38:47:8b:28:d9:e6:f6:23:96:a2:4f:8c:ec:
b4:2d:9f:66:ff:77:18:a5:e0:9a:5f:12:0b:d3:b9:44:ab:f6:
0e:85:6c:45:ec:20:2d:2b:50:60:2e:3e:6b:54:02:a9:6b:80:
1f:e9:5a:65:ca:62:87:5a:c6:49:4b:3c:fb:1e:6b:ed:6f:64:
66:4d:e3:6f:6d:69:b8:09:c2:0e:cf:8d:f2:58:8d:81:07:c5:
3c:b7:5b:46:bb:70:48:6e:0f:56:d1:86:07:9e:c1:bd:bf:8d:
f7:1e:f4:fa:92:2a:79:d5:0d:5b:42:d7:18:9f:28:12:5e:21:
42:3c:82:0c:9d:24:ef:da:bf:91:fb:13:3e:b9:58:87:32:35:
e5:23:27:6d:14:16:da:f9:ea:57:2b:b5:11:bb:af:6e:a6:43:
aa:ea:54:91:25:e4:d5:3a:12:7c:c8:7b:85:fc:0f:38:2d:0f:
45:36:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:40:29 2026 by rpki-client