Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
File: sAm-idR1R1b5z954-sGjYnrAyBc.mft (raw, json)
Hash identifier: e+flBnmJK8+SA5IWXx/vJskqD/cpm2c2cFSmgdkXqUY=
Subject key identifier: A6:50:A6:C1:ED:BF:9C:74:D9:CC:EF:A3:2E:C6:D2:40:30:D8:30:97
Authority key identifier: B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
Certificate issuer: /CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Certificate serial: 01A181BE35A143D966FF5E9B1C8C37F90AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:28 +0000
Manifest this update: Wed 28 Oct 2026 09:01:28 +0000
Manifest next update: Thu 29 Oct 2026 09:01:28 +0000
Files and hashes: 1: TKICB8YOdD6bdiIav5yEIcN-jFE.roa (hash: g+d7zzQluUE41eE7PBez/FLekTdLQ2Gdgu4OxTMnlfU=)
2: sAm-idR1R1b5z954-sGjYnrAyBc.crl (hash: 21W8PIp8NTqVMEZALJtsCic4K+5n/qUo807FvpRHyes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:35:a1:43:d9:66:ff:5e:9b:1c:8c:37:f9:0a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b009be89d4754756f9cfde78fac1a3627ac0c817
Validity
Not Before: Oct 28 09:01:28 2026 GMT
Not After : Oct 29 09:01:28 2026 GMT
Subject: CN=a650a6c1edbf9c74d9ccefa32ec6d24030d83097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:7c:60:d7:1f:24:34:d1:79:0e:d3:a6:7d:
01:92:eb:1c:f0:3d:7e:e6:42:59:b2:fd:4b:0e:97:
cc:b2:f2:87:cd:ac:a5:08:52:85:11:44:bb:ba:9a:
42:f5:c8:08:2d:4c:8f:a0:b8:c4:bb:9c:f0:56:97:
fb:7b:8a:24:91:09:69:2f:ee:18:6a:8c:f0:88:50:
0c:91:80:98:28:56:ed:84:f1:2f:47:58:8d:d4:a8:
c2:c4:0d:ec:b9:63:36:c8:73:e6:e2:d9:de:39:c2:
8f:1c:d5:7d:d8:4a:48:47:70:24:2e:cc:a3:14:74:
40:92:8a:74:88:44:f2:06:3c:af:bc:92:db:e8:12:
58:9b:a7:a0:25:c3:b3:e0:a8:a9:2c:73:da:bb:50:
b0:0c:12:a9:07:8b:ed:4a:08:4e:d7:0d:4a:6e:bb:
1b:6e:99:91:dd:ea:01:4d:77:4a:1b:41:dc:4e:5f:
c0:d0:a6:54:78:31:dd:23:32:a2:40:6b:b7:67:53:
97:ee:fc:c7:23:8c:96:da:ef:7c:fc:7a:ab:be:b1:
5e:06:60:79:c1:48:af:c6:68:14:33:3f:ce:09:bc:
85:2a:3e:2b:4b:87:f2:89:43:49:45:81:9c:93:bc:
3d:7e:74:b2:6e:b6:a5:54:68:9a:64:7c:0b:c1:6c:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:A6:C1:ED:BF:9C:74:D9:CC:EF:A3:2E:C6:D2:40:30:D8:30:97
X509v3 Authority Key Identifier:
keyid:B0:09:BE:89:D4:75:47:56:F9:CF:DE:78:FA:C1:A3:62:7A:C0:C8:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAm-idR1R1b5z954-sGjYnrAyBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d032de-7b42-4253-9074-195b2024abee/1/sAm-idR1R1b5z954-sGjYnrAyBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:b1:e7:23:39:58:40:d7:af:0e:d0:8a:45:a9:5b:5f:a2:
e7:4b:0c:ca:9a:45:f2:56:2c:af:ff:ca:7e:19:d6:61:f6:3d:
0e:4a:b1:dd:a2:cc:22:39:a2:39:22:17:d7:63:91:83:fa:ee:
66:4b:f8:52:b4:9f:49:fc:67:ec:58:bb:8e:d8:ca:3b:82:dc:
0a:7b:3d:bc:63:06:5e:ba:c1:d6:9c:d2:46:cc:88:35:73:5c:
7f:80:64:28:bb:df:7b:de:5e:ec:7e:ee:84:29:05:00:ed:f1:
4f:1c:06:e2:fe:4e:4d:1b:36:e7:86:e1:ad:a1:62:14:50:55:
54:cf:01:9b:be:30:43:4c:96:0b:36:bf:a9:b6:db:e1:ac:e7:
80:c4:04:04:4d:c0:02:98:7e:09:0a:4e:de:7b:0b:79:c0:52:
e6:3a:09:a0:c5:05:f2:bc:f2:ce:1c:fe:60:f8:17:1f:45:1a:
e7:5e:8e:2e:a1:0d:da:58:d8:3f:f9:84:2f:16:cb:7a:3e:ec:
b8:9e:f3:21:07:73:84:20:0f:a4:5c:46:6b:9e:c7:85:2d:07:
93:d0:2f:ea:da:de:0c:9e:20:84:3c:39:bf:9b:bd:8d:3b:58:
bd:4b:7d:4d:49:81:65:cf:4f:e8:76:b3:21:78:52:39:e2:88:
f4:db:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:24:20 2026 by rpki-client