Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: RrdY0u9wz7GRoTzx7cXobUPZFC4Xk1m3Ingt6pj3CZk=
Subject key identifier: AD:21:B2:52:78:F9:6C:85:B3:FB:D5:41:D7:66:F5:B9:FB:EA:6C:AC
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019EB7A16FCB04B85B4DFEFA221FD31D4FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 165C
Signing time: Thu 11 Jun 2026 17:01:10 +0000
Manifest this update: Thu 11 Jun 2026 17:01:10 +0000
Manifest next update: Fri 12 Jun 2026 17:01:10 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: zqBmSU+e5F4rnaBxfxpelE0qtQbViR+EruBUbJBIBE8=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:6f:cb:04:b8:5b:4d:fe:fa:22:1f:d3:1d:4f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jun 11 17:01:10 2026 GMT
Not After : Jun 12 17:01:10 2026 GMT
Subject: CN=ad21b25278f96c85b3fbd541d766f5b9fbea6cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:ae:ec:a4:ef:fa:c3:2a:08:dd:49:e8:5e:
71:f3:f8:b6:e2:3b:4d:5a:1d:ae:98:48:62:c6:6f:
ab:90:5d:2a:93:7f:00:a0:8e:2c:13:40:22:a7:93:
5c:fe:90:08:c2:98:29:b9:b9:dd:1c:8d:c5:2d:01:
83:51:66:86:ca:36:5d:7e:5d:bb:df:ed:63:54:c5:
2d:4b:0f:67:d8:8f:98:ca:05:5a:14:3a:75:fd:1d:
19:5e:e8:58:45:c2:2d:32:5e:37:20:c4:71:5a:07:
a3:85:f3:c7:e6:39:08:cf:56:e7:05:3b:98:e1:dd:
1f:31:41:4a:ae:ed:d6:1c:50:8c:cf:0a:d1:4f:99:
0a:a5:6d:e3:f6:6a:48:46:9e:65:a3:0c:87:e2:91:
75:e9:b1:b9:c9:76:c2:89:f3:54:18:11:a6:e1:6d:
fd:04:a3:68:c6:74:9b:b9:bc:73:94:1c:12:85:4f:
dd:4d:3e:27:93:81:25:20:b1:78:2f:31:1f:d2:82:
84:28:88:92:84:13:b0:00:f6:a2:8f:d4:2b:67:ff:
ca:38:09:65:c5:df:41:a0:a5:e4:71:0d:71:d1:19:
31:bf:80:41:4f:0d:01:23:86:e7:fa:51:b3:08:01:
4d:16:29:64:ba:27:d1:63:7f:69:50:15:9b:3f:ac:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:B2:52:78:F9:6C:85:B3:FB:D5:41:D7:66:F5:B9:FB:EA:6C:AC
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ab:d2:54:95:03:20:2f:53:7e:78:9e:a1:b2:aa:26:d7:03:
83:57:95:b1:08:88:8f:f3:b0:aa:f0:6c:d6:d2:00:d5:69:07:
96:f1:6f:c2:6c:10:aa:1c:b2:a9:32:ea:24:f9:81:ac:4f:d7:
d5:82:0d:ea:73:4b:98:0c:cf:cd:8a:bf:26:2b:c5:56:1f:35:
6c:1a:9f:00:3b:b6:8c:6b:60:2d:cf:5f:62:9f:91:12:ae:6e:
42:a8:a4:e8:96:23:3a:1e:ba:4a:d8:a1:dc:43:e7:a2:c0:12:
25:75:1e:22:3c:c3:cc:aa:0c:44:35:2a:63:17:26:6d:ed:d0:
70:60:2d:62:bd:b1:fb:8b:43:1c:59:8e:11:34:c5:86:0f:62:
0e:0a:ae:e1:a9:be:ff:63:6d:3e:59:7f:71:7e:79:2d:ce:9f:
1f:30:57:23:e7:0c:d7:2b:c3:10:94:8e:d8:02:b1:1b:bb:62:
29:92:36:01:1d:57:88:37:f2:24:9c:79:ce:ea:ca:98:9b:df:
6c:1b:3f:5f:48:fe:e2:47:f1:23:18:be:8b:9e:35:40:c9:bf:
ee:cd:ee:5e:62:45:2f:2f:d3:20:c4:69:0a:1b:61:8f:01:f9:
f9:e4:23:ee:99:19:98:12:7e:48:db:7a:88:1e:27:8c:f4:04:
a4:cb:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:43 2026 by rpki-client