Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: 285SN2699hTBytCrgL4bADlwXp3ObXZivoqUOsUpt50=
Subject key identifier: CB:60:2C:B4:52:0A:7C:30:90:22:DC:0E:7F:2D:52:28:89:F3:68:2E
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019D37C02BB2C6A76D2D741F1D4EF5A54D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: FUrL+6pyqKsy2C60vRF0SKopu8IPdKT6tgHm4zkvomk=)
2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2b:b2:c6:a7:6d:2d:74:1f:1d:4e:f5:a5:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=cb602cb4520a7c309022dc0e7f2d522889f3682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:40:bf:2a:1b:ef:c3:08:97:5e:26:8d:0a:
cf:fb:96:2b:4a:3e:e5:6f:4f:ed:f9:7c:ff:6c:3f:
7d:25:79:05:a3:18:fd:8a:8d:72:7f:d8:cb:92:13:
18:8f:5a:43:a7:ba:6e:f3:be:bb:8e:38:12:75:a0:
1d:e6:f2:17:9c:5c:f5:bf:99:3d:2c:9f:58:f7:e3:
37:0a:e3:b3:73:8d:5c:fd:0d:a5:30:f2:40:1c:08:
78:3b:c2:60:0b:cb:57:35:e3:50:39:52:b7:d5:87:
40:b9:9f:d1:ba:21:7e:2f:a2:34:ba:af:05:29:2e:
59:26:ef:76:e3:e2:52:61:d5:24:d5:ae:32:c0:d2:
c3:c1:97:49:72:c8:05:08:2c:9e:40:73:4d:f1:b7:
7e:3d:4d:44:6d:9b:31:4a:db:da:41:ca:05:65:c6:
a4:54:a2:da:cc:85:d6:c9:56:46:4e:08:dd:52:75:
ff:e0:8b:c5:cf:50:ab:90:56:99:7d:bd:87:98:53:
7e:7d:8e:e1:42:e2:59:ca:e0:8f:30:29:17:3e:ea:
c6:a9:9a:cf:cf:f9:ca:a5:a1:78:1f:8e:47:61:a4:
89:33:32:a1:ec:e3:4b:e6:71:5b:d3:98:23:1e:95:
1a:50:4e:29:39:c5:19:28:33:87:ee:cb:08:82:21:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:2C:B4:52:0A:7C:30:90:22:DC:0E:7F:2D:52:28:89:F3:68:2E
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:9c:64:0f:36:1c:73:33:fb:db:2e:56:24:1d:ed:b9:93:
8c:a6:43:c7:ff:8c:0b:63:5c:c2:75:d0:5d:b3:97:5c:4e:2f:
3f:1d:9c:b5:c4:23:eb:18:76:68:02:35:b5:63:0a:a7:03:38:
2b:5d:25:ba:3f:60:6a:44:16:27:37:1d:62:0c:43:c5:84:15:
47:49:1e:d7:71:fe:05:4e:ff:78:7b:4b:d7:18:0e:dd:1c:74:
38:b6:cd:8b:b9:2d:b1:94:13:89:36:da:88:9e:59:48:98:ea:
48:c3:a0:59:c0:6e:fe:2e:aa:a8:9c:16:7a:a6:5f:36:cb:9e:
fe:ff:48:59:e9:20:30:2a:e3:ce:38:61:5f:66:27:da:90:58:
ed:1d:c0:50:86:0a:3f:6a:0f:5d:84:b3:f7:2c:3b:df:e9:39:
34:8c:21:8d:d7:e4:fe:5d:03:0a:3b:da:35:c9:73:19:23:a7:
81:d3:ed:5e:ba:ca:a0:4a:49:b3:11:73:f3:39:59:b9:f2:64:
a9:f9:70:32:79:87:93:fb:53:b3:5d:7e:07:bd:44:13:07:c2:
0a:ff:e5:df:e6:f1:fd:cd:ae:58:2a:14:01:8a:8b:c8:85:8e:
d7:3d:4b:08:67:d6:fe:ca:5b:73:51:cd:a7:ce:67:bd:31:46:
a0:43:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client