Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: Gx2z6pR+rkbM102erT7PKJEGXpEP6fjODib+T4hTVoo=
Subject key identifier: 1B:62:32:C7:32:2D:A3:BE:29:14:25:0C:C0:08:FC:61:0D:49:F9:73
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019DCDF544FFB0F4E247DB406903C8868587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 15E3
Signing time: Mon 27 Apr 2026 08:01:36 +0000
Manifest this update: Mon 27 Apr 2026 08:01:36 +0000
Manifest next update: Tue 28 Apr 2026 08:01:36 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: RR6WiaFy2Kzgg9xyjCqCNv29Q7VDlcApAv47YbXCdxI=)
2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:44:ff:b0:f4:e2:47:db:40:69:03:c8:86:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Apr 27 08:01:36 2026 GMT
Not After : Apr 28 08:01:36 2026 GMT
Subject: CN=1b6232c7322da3be2914250cc008fc610d49f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c4:83:23:c6:08:cb:ba:88:be:83:b9:09:fc:
8c:e7:7c:d1:2c:54:09:92:65:04:de:b0:14:a6:21:
8e:d1:04:d5:79:0e:9a:45:8f:9e:60:e8:f3:3c:cc:
c8:3b:87:cb:63:a7:37:c5:36:6d:c8:a2:73:0c:a1:
7d:b2:3c:81:79:15:c9:a3:26:96:7a:9f:d6:e1:13:
5b:de:1a:b5:a7:66:48:0b:4e:a3:63:6f:a2:82:08:
76:95:5e:a4:29:84:8a:5b:37:23:dc:2d:0f:83:7d:
59:9a:5e:80:f8:87:13:5f:d3:77:eb:31:bf:fb:f1:
a3:cc:e4:37:72:53:4e:4c:f0:ee:bb:0d:32:bf:f2:
ac:e7:74:02:bc:de:5f:68:68:15:3a:1b:e7:25:0e:
8b:88:89:2d:8b:ec:1a:bb:d9:df:ae:82:12:4c:c7:
ac:d6:52:f2:29:9d:22:19:c8:02:fd:58:74:de:03:
dc:55:ba:e2:6c:ce:0a:6c:76:c7:1e:e5:ca:99:2e:
23:2c:29:b6:fb:6b:79:2a:57:5d:72:fe:8d:36:8f:
cf:fe:cb:38:2f:0b:be:20:cf:a7:cb:fe:6a:0b:ea:
8d:b8:a4:42:0d:2a:07:c4:99:b5:33:78:54:46:62:
38:cf:73:c2:d1:9c:8e:26:72:b8:a9:d4:6d:1b:f4:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:62:32:C7:32:2D:A3:BE:29:14:25:0C:C0:08:FC:61:0D:49:F9:73
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:a1:96:eb:2f:88:75:36:a6:92:d2:79:21:88:4d:7c:d7:
72:f6:95:7e:8c:81:3b:31:86:04:e5:82:b9:8b:1d:d8:d8:73:
35:0e:c7:38:ec:dc:d9:ca:22:c7:48:dd:80:6d:39:19:1d:91:
0b:6f:2e:a0:0c:6f:08:ae:9b:82:06:3a:ca:c5:fe:ec:13:89:
65:cc:59:d0:ae:81:2e:b0:a8:03:ae:d4:a9:dd:df:63:48:5a:
e9:63:c7:c3:98:bc:a2:7a:7e:0c:39:68:d4:66:c7:37:23:31:
be:cc:7e:6d:c2:c2:76:f0:a2:32:fc:ae:9e:f5:46:e3:d4:52:
10:e0:f1:7e:dc:77:29:5f:3a:ea:c3:37:2f:de:c6:b0:59:5b:
41:2b:ec:63:ed:7a:4e:56:24:78:89:4b:89:8b:b7:0a:34:3b:
17:d2:00:d9:05:9d:1c:85:59:40:75:52:a3:3a:80:75:5e:60:
ac:4f:c3:92:a7:ce:7f:48:3d:89:f2:01:14:7f:5e:fa:c7:a9:
bd:28:bf:23:75:47:c5:48:3f:ec:d4:e1:38:71:33:0f:aa:1c:
71:4c:32:63:87:4d:75:9f:99:8a:02:ab:f1:4a:81:40:e2:e8:
ad:32:8a:86:d5:8c:e5:91:37:28:8c:cd:60:98:b5:f9:bf:8d:
b8:75:83:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9UT/sPTiR9tAaQPIhoWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjYwNDI3MDgwMTM2WhcNMjYwNDI4MDgwMTM2WjAzMTEwLwYDVQQD
EygxYjYyMzJjNzMyMmRhM2JlMjkxNDI1MGNjMDA4ZmM2MTBkNDlmOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMSDI8YIy7qIvoO5CfyM53zRLFQJ
kmUE3rAUpiGO0QTVeQ6aRY+eYOjzPMzIO4fLY6c3xTZtyKJzDKF9sjyBeRXJoyaW
ep/W4RNb3hq1p2ZIC06jY2+iggh2lV6kKYSKWzcj3C0Pg31Zml6A+IcTX9N36zG/
+/GjzOQ3clNOTPDuuw0yv/Ks53QCvN5faGgVOhvnJQ6LiIkti+wau9nfroISTMes
1lLyKZ0iGcgC/Vh03gPcVbribM4KbHbHHuXKmS4jLCm2+2t5Klddcv6NNo/P/ss4
Lwu+IM+ny/5qC+qNuKRCDSoHxJm1M3hURmI4z3PC0ZyOJnK4qdRtG/SZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtiMscyLaO+KRQlDMAI/GENSflzMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYGhlusv
iHU2ppLSeSGITXzXcvaVfoyBOzGGBOWCuYsd2NhzNQ7HOOzc2coix0jdgG05GR2R
C28uoAxvCK6bggY6ysX+7BOJZcxZ0K6BLrCoA67Uqd3fY0ha6WPHw5i8onp+DDlo
1GbHNyMxvsx+bcLCdvCiMvyunvVG49RSEODxftx3KV866sM3L97GsFlbQSvsY+16
TlYkeIlLiYu3CjQ7F9IA2QWdHIVZQHVSozqAdV5grE/DkqfOf0g9ifIBFH9e+sep
vSi/I3VHxUg/7NThOHEzD6occUwyY4dNdZ+ZigKr8UqBQOLorTKKhtWM5ZE3KIzN
YJi1+b+NuHWDEA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:32 2026 by rpki-client