Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: 9IlU4D7alDx08MzBXV5l+si2NEG6pH5Z20uAAFcXyOc=
Subject key identifier: BD:00:B3:93:81:22:BF:F6:AB:C5:23:67:AE:2D:63:3C:34:13:78:D2
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019E30E067E1EC3A1536B7620DAE7CB26EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 13:01:13 +0000
Manifest this update: Sat 16 May 2026 13:01:13 +0000
Manifest next update: Sun 17 May 2026 13:01:13 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: 4Lyt7KrG24RHeYsX5F48DEoyHtyxMfY1r2yqGQO1S+M=)
2: PO0oGhcAcu4rnMxqB7i3EgHcfmk.roa (hash: TAhgr8iisePtAicuDOb6xnSpMggHAcTbal551KlXsKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:67:e1:ec:3a:15:36:b7:62:0d:ae:7c:b2:6e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: May 16 13:01:13 2026 GMT
Not After : May 17 13:01:13 2026 GMT
Subject: CN=bd00b3938122bff6abc52367ae2d633c341378d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:37:1c:77:da:86:c4:ae:f2:f5:36:78:5e:
18:f6:b4:e2:7e:9b:68:79:f6:dd:90:6a:63:e5:7f:
32:75:52:4f:47:c1:00:c4:50:52:40:81:14:68:f2:
4f:78:e1:5a:d1:e7:d6:dd:96:30:74:82:94:e3:3c:
39:93:98:6d:14:0e:0d:ae:aa:77:36:7c:77:69:95:
6c:28:23:b7:d6:08:29:08:a2:1f:d9:ed:6d:8e:4f:
02:d3:f4:b6:bf:4a:3a:3a:ed:3b:80:c2:a3:03:2b:
79:79:af:4a:00:60:5e:80:ec:33:1b:30:8b:6f:fc:
b8:18:fe:d1:d7:1d:34:c8:b7:bb:51:f9:4f:e9:ae:
96:b2:35:26:63:e4:c5:d0:fe:fa:f8:8f:6e:f8:02:
7b:b6:ee:7e:3a:b3:96:ab:2e:e4:07:28:f3:c4:ac:
19:59:47:3a:60:f8:f0:e8:72:0d:b4:21:bc:d0:00:
51:a0:3a:74:e2:bd:9e:f3:19:2c:b0:d2:fa:af:f5:
d2:c7:b9:2d:2b:ea:6c:24:e1:ca:f8:c0:37:22:a7:
d0:09:1d:b9:4c:f0:69:1e:c2:25:f0:e0:5e:48:3c:
82:94:85:1a:80:a8:2f:8d:e1:17:58:56:53:44:c8:
75:07:07:bd:4f:95:85:80:c0:f5:af:14:89:21:97:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:B3:93:81:22:BF:F6:AB:C5:23:67:AE:2D:63:3C:34:13:78:D2
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:bd:42:d9:dd:59:96:d3:91:8a:4d:4c:58:f5:c0:55:4b:
3f:47:8e:e2:be:48:8a:f7:b0:62:d8:8c:f9:95:4f:0d:8f:f8:
35:67:e8:88:ad:92:78:2d:95:72:38:7b:58:b0:03:fc:e0:c3:
69:98:93:47:6a:6b:5b:12:0e:9d:2b:a2:ea:54:10:86:69:0d:
94:d2:76:2b:69:89:e4:4e:15:31:68:61:53:2e:d3:3c:85:c3:
f3:3b:d5:ef:26:52:7f:e0:bf:ad:b7:e8:ec:60:43:c9:3c:ee:
8a:91:b1:cf:9d:8c:fc:92:f6:92:a2:3b:0e:47:a1:dd:9a:8e:
d9:5a:f7:d2:4f:b0:3c:40:48:1a:71:90:7f:46:cd:90:e8:85:
f1:37:8b:8b:ec:5b:74:7a:1e:9c:bc:ca:dc:60:45:de:7f:e7:
fb:62:d5:3c:b4:69:22:06:6d:c4:9b:4c:51:3a:8b:09:b9:e9:
a3:9c:00:4a:2b:6d:56:43:bd:00:3b:3f:38:e3:29:10:78:9e:
1c:45:ac:0f:ee:9a:c9:c0:a7:e7:51:d1:63:27:d4:5e:6e:47:
d7:a7:fe:d0:53:f6:30:44:bc:37:f7:03:e6:93:0d:96:5f:d2:
0a:59:72:b5:53:b0:ef:d6:e9:6d:02:ad:48:91:42:5f:66:24:
a2:9d:09:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Gfh7DoVNrdiDa58sm6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjExYjRlYWEyZTBiMzdmNzJjYzA4YWM5Mjk2MTk4MWVh
YmIyMWYwHhcNMjYwNTE2MTMwMTEzWhcNMjYwNTE3MTMwMTEzWjAzMTEwLwYDVQQD
EyhiZDAwYjM5MzgxMjJiZmY2YWJjNTIzNjdhZTJkNjMzYzM0MTM3OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuA3HHfahsSu8vU2eF4Y9rTifpto
efbdkGpj5X8ydVJPR8EAxFBSQIEUaPJPeOFa0efW3ZYwdIKU4zw5k5htFA4Nrqp3
Nnx3aZVsKCO31ggpCKIf2e1tjk8C0/S2v0o6Ou07gMKjAyt5ea9KAGBegOwzGzCL
b/y4GP7R1x00yLe7UflP6a6WsjUmY+TF0P76+I9u+AJ7tu5+OrOWqy7kByjzxKwZ
WUc6YPjw6HINtCG80ABRoDp04r2e8xkssNL6r/XSx7ktK+psJOHK+MA3IqfQCR25
TPBpHsIl8OBeSDyClIUagKgvjeEXWFZTRMh1Bwe9T5WFgMD1rxSJIZdAuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0As5OBIr/2q8UjZ64tYzw0E3jSMB8GA1UdIwQY
MBaAFAJhG06qLgs39yzAiskpYZgeq7IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2Qt
MTJjNGJkODA1OGFhLzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82NDY0MzgtNmRhMi00YzA1LTlmY2QtMTJjNGJkODA1OGFh
LzEvQW1FYlRxb3VDemYzTE1DS3lTbGhtQjZyc2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8m9Qtnd
WZbTkYpNTFj1wFVLP0eO4r5IivewYtiM+ZVPDY/4NWfoiK2SeC2Vcjh7WLAD/ODD
aZiTR2prWxIOnSui6lQQhmkNlNJ2K2mJ5E4VMWhhUy7TPIXD8zvV7yZSf+C/rbfo
7GBDyTzuipGxz52M/JL2kqI7Dkeh3ZqO2Vr30k+wPEBIGnGQf0bNkOiF8TeLi+xb
dHoenLzK3GBF3n/n+2LVPLRpIgZtxJtMUTqLCbnpo5wASittVkO9ADs/OOMpEHie
HEWsD+6aycCn51HRYyfUXm5H16f+0FP2MES8N/cD5pMNll/SCllytVOw79bpbQKt
SJFCX2Ykop0JzA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:37 2026 by rpki-client